Commit Graph

288 Commits

Author SHA1 Message Date
Fedora Release Engineering
6f7a2acd68 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-02 15:17:20 +00:00
Igor Gnatenko
a5c5d1f162 Remove obsolete BuildRoot tag
Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2019-01-29 05:36:30 +01:00
Igor Gnatenko
aa9270652f Remove obsolete Group tag
References: https://fedoraproject.org/wiki/Changes/Remove_Group_Tag
2019-01-28 20:24:49 +01:00
Björn Esser
2fcf41cf88
Rebuilt for libcrypt.so.2 (#1666033) 2019-01-14 18:53:28 +01:00
Tomas Mraz
7eb46d2996 usermod: guard against unsafe change of ownership of special home directories 2018-12-18 15:30:26 +01:00
Tomas Mraz
b9927e87e2 Release bump 2018-11-19 11:02:43 +01:00
Tomas Mraz
b41cff1956 use itstool instead of xml2po 2018-11-19 11:02:06 +01:00
Tomas Mraz
f38d60a562 Use cap_setxid file capabilities for newxidmap instead of making them setuid
Also:
limit the SYS_U/GID_MIN value to 1 as the algorithm does not work with 0
  and the 0 is always used by root anyway
manual page improvements
2018-11-06 10:40:50 +01:00
Tomas Mraz
d80def3861 fix some issues from Coverity scan
flush sssd caches - patch by Jakub Hrozek
2018-10-12 17:38:01 +02:00
Fedora Release Engineering
8362f15341 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-14 06:02:14 +00:00
Jason Tibbitts
0aa8060034 Remove needless use of %defattr 2018-07-10 01:20:51 -05:00
Tomas Mraz
38a12ac864 update to current upstream release 4.6 2018-05-28 15:25:08 +02:00
Tomas Mraz
4cb5077b68 Raise limit for passwd and shadow entry length
- also prevent writing longer entries (#1422497)
2018-04-20 16:23:31 +02:00
Tomas Mraz
8d62f944dd Add gcc buildrequires 2018-03-01 13:11:34 +01:00
Igor Gnatenko
eb66bf0ca5
Remove %clean section
None of currently supported distributions need that.
Last one was EL5 which is EOL for a while.

Signed-off-by: Igor Gnatenko <ignatenkobrain@fedoraproject.org>
2018-02-14 08:49:44 +01:00
Björn Esser
41955fa9ab
Add patch to include crypt.h, if present
Use %%make_{build,install} macros
Refresh other patches for proper alignment
2018-02-06 11:33:37 +01:00
Björn Esser
2d4f6e1972
Rebuilt for switch to libxcrypt 2018-01-20 23:08:33 +01:00
Tomas Mraz
95d0ea6880 fix regression caused by the userdel-chroot patch (#1509978) 2017-11-06 15:31:26 +01:00
Tomas Mraz
8633999acf fix userdel in chroot (#1316168)
add useful chage -E example to chage manpage
2017-11-02 11:50:59 +01:00
Tomas Mraz
b90f1c3912 do not allow "." and ".." user names 2017-09-15 17:54:22 +02:00
Tomas Mraz
2c7fd6de84 allow switching to secondary group without checking the membership
(patch from upstream)
2017-08-14 11:03:28 +02:00
Fedora Release Engineering
46349c33e5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild 2017-08-03 08:23:19 +00:00
Fedora Release Engineering
3a17ec0f47 - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild 2017-07-27 18:30:31 +00:00
Tomas Mraz
ec99eade4e update to current upstream release 4.5 2017-07-21 14:04:11 +02:00
Fedora Release Engineering
ba9340caf5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild 2017-02-11 13:21:56 +00:00
Tomas Mraz
bb62fd7837 fix regression in useradd - not processing defaults properly (#1369979) 2016-08-25 11:24:38 +02:00
Tomas Mraz
457acab6b4 Add buildrequires for docbook. 2016-08-23 16:51:22 +02:00
Tomas Mraz
86cbf7e19d Add proper buildrequires for autotools. 2016-08-23 16:30:57 +02:00
Tomas Mraz
f8ab516d30 new upstream release fixing low impact security issue 2016-08-23 16:03:52 +02:00
Tomas Mraz
c50e17082d guard for localtime() and gmtime() failure 2016-06-14 11:34:10 +02:00
Tomas Mraz
abed79ee4e chpasswd, chgpasswd: open audit when starting 2016-05-30 11:59:54 +02:00
Tomas Mraz
f884cd4c94 chgpasswd: do not remove it
- chpasswd, chgpasswd: add selinux_check_access call (#1336902)
2016-05-26 21:05:16 +02:00
Tomas Mraz
a359c84a6e userdel: fix userdel -f with /etc/subuid present (#1316168) 2016-03-17 17:40:43 +01:00
Tomas Mraz
1bf254df98 usermod: properly return error during password manipulation 2016-02-09 11:54:02 +01:00
Tomas Mraz
b1dccbc445 add possibility to clear or set lastlog record for user via lastlog 2016-02-03 14:01:19 +01:00
Tomas Mraz
05ccc5cb0b Correct changelog date. 2016-01-08 10:02:44 +01:00
Tomas Mraz
904910f545 do not use obscure permissions for binaries
- remove unused commands from login.defs(5) cross-reference
2016-01-08 10:02:12 +01:00
Tomas Mraz
c2f1a1c502 document that groupmems is not setuid root
- document that expiration of the password after inactivity period
  locks the user account completely
2015-11-06 14:34:35 +01:00
Tomas Mraz
25899fefb0 Multiple fixes.
- unlock also passwords locked with passwd -l
- prevent breaking user entry by entering a password containing colon
- fix possible DoS when locking the database files for update
- properly use login.defs from the chroot in useradd
2015-08-27 15:53:13 +02:00
Dennis Gilmore
283bf24723 - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild 2015-06-19 00:44:03 +00:00
Tomas Mraz
8b4e03b994 new upstream release with support for subordinate uids and gids 2014-11-26 15:58:28 +01:00
Tomas Mraz
04260e2340 small adjustments to the audit patch 2014-11-25 11:58:16 +01:00
Tomas Mraz
e1ce821d45 update auditing to cover more events and fix some incorrect audit records
(auditing patch by Steve Grubb (#1151580))
- apply the same new allocation algorithm to uids as for gids
2014-10-17 17:03:29 +02:00
Tomas Mraz
af13db915f discard obsolete matchpathcon cache after semanage_commit() 2014-09-10 10:28:53 +02:00
Tomas Mraz
d29b2a8def disallow all-numeric user and group names (#1139318) 2014-09-09 17:39:08 +02:00
Tomas Mraz
4c1ef1cd21 Multiple fixes
- label the newly created home dir correctly (#1077809)
- mention that chage -d 0 forces password change (#1135010)
- improve date parsing and error detecting in chage
- avoid full group database scanning in newgrp in most common case
- report error if usermod asked for moving homedir and it does not exist
2014-08-29 14:28:48 +02:00
Peter Robinson
183c869703 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild 2014-08-18 02:08:56 +00:00
Tom Callaway
972907741d fix license handling 2014-08-05 10:56:28 -04:00
Tom Callaway
9120a44c3f fix license handling 2014-08-05 08:57:58 -04:00
Tom Callaway
5ac7a63576 fix license handling 2014-08-05 08:57:03 -04:00
Tom Callaway
1e95b5b479 fix license handling 2014-08-05 08:55:45 -04:00
Tomas Mraz
fd2973e24f revert the last change as it is not really needed 2014-07-14 10:34:08 +02:00
Tomas Mraz
6a7e42e7e9 put system users and groups into /usr/lib/{passwd,group} if
the files exist and SHADOW_USE_USRLIB environment variable is set
  Patch by Colin Walters
2014-07-10 17:06:38 +02:00
Tomas Mraz
efff9fe79f ignore getgrgid() errors for now 2014-07-02 13:30:31 +02:00
Tomas Mraz
dad42cc2f5 improve group allocation algorithm - patch by Stephen Gallager (#1089738) 2014-06-30 15:22:33 +02:00
Dennis Gilmore
c509d20844 - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild 2014-06-08 01:14:33 -05:00
Tomas Mraz
8d1ef4078b clean up login.defs manpage
- properly document userdel -f behavior
2014-02-12 11:43:04 +01:00
Tomas Mraz
317fc748b3 document that the directory where user's home is created must exist 2013-10-18 16:33:21 +02:00
Tomas Mraz
462b4b2f45 Fix bogus dates in changelog 2013-07-25 14:30:32 +02:00
Tomas Mraz
a451dc3d55 slightly more meaningful error messages if crypt() returns NULL (#988184)
- explicit suid permissions
2013-07-25 13:26:18 +02:00
Tomas Mraz
4eaf9cda61 fix useradd man page bugs 2013-07-19 07:44:18 +02:00
Tomas Mraz
32f6a78157 report error to stdout when SELinux context for home directory
cannot be determined (#973647)
- audit the changing home directory owner (#885797)
- do not set the default SELinux MLS range (#852676)
2013-06-14 15:27:20 +02:00
Tomas Mraz
0bdf7eb7a5 improve the failure syslog message in useradd (#830617) 2013-03-19 18:43:43 +01:00
Tomas Mraz
c85c93b88e keep the original context if matchpathcon() fails (#912399) 2013-02-20 15:30:31 +01:00
Tomas Mraz
778c4c228d fix bugs in merge_group_entries() 2013-01-29 14:17:57 +01:00
Tomas Mraz
6a8565830d /etc/default is owned by glibc-common now (#894194) 2013-01-11 10:45:13 +01:00
Tomas Mraz
44a40b2f4e new upstream version
- use the original file permissions when creating backup (#853102)
2012-09-19 20:33:30 +02:00
Peter Vrabec
cae35b95ab make /etc/default/useradd world-readable (#835137) 2012-07-25 12:44:17 +02:00
Dennis Gilmore
3481ee2a8f - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild 2012-07-21 14:29:08 -05:00
Peter Vrabec
8cd7b2fcb7 pwconv/grpconv skipped 2nd of consecutive failures (#832995) 2012-06-18 13:38:31 +02:00
Peter Vrabec
8994f4c05c - fix selinux context handling
- reset selinux context on files copied from skel
2012-03-22 16:51:40 +01:00
Peter Vrabec
4c8c528414 upgrade 2012-03-20 17:39:28 +01:00
Peter Vrabec
c2e7e463a1 compile with PIE and RELRO flags (#784349) 2012-02-07 18:04:27 +01:00
Dennis Gilmore
f660173551 - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild 2012-01-13 21:52:35 -06:00
Peter Vrabec
5f231e7c37 fix leaks in .IDs patch (#734340) 2011-12-20 13:53:56 +01:00
Peter Vrabec
20341fa201 free memory associated with SELinux security context 2011-11-16 17:17:29 +01:00
Peter Vrabec
22f8cbe3bf - replace semanage call by library call
- useradd man page (#739147)
2011-11-10 17:16:04 +01:00
Peter Vrabec
4897d3d6b7 man page adjustment (userdel -Z) 2011-08-02 14:09:56 +02:00
Peter Vrabec
3a49560688 fixing semanage issue (#701355) 2011-08-02 13:07:03 +02:00
Peter Vrabec
8e39d10d31 do not replace /etc/login.defs on upgrade (temporary) 2011-07-25 15:06:13 +02:00
Peter Vrabec
d410224971 man page fixes 2011-06-29 10:14:51 +02:00
Peter Vrabec
8c0da063a2 spec file fixes 2011-06-28 17:21:30 +02:00
Peter Vrabec
46dd21926b - fixing Linux login <-> SELinux login mapping
(#639900), (#639975), (#639976)
2011-06-28 16:32:18 +02:00
Peter Vrabec
f7bb2ec63f refer to PAM in /etc/login.defs 2011-06-27 16:12:59 +02:00
Peter Vrabec
4d00d71784 fix shadow-4.1.4.2-underflow.patch 2011-06-06 09:07:51 +02:00
Peter Vrabec
6e8f608032 fix integer underflow in laslog (#706321) 2011-05-31 10:00:39 +02:00
Peter Vrabec
5d7612da5b upgrade 2011-05-23 14:58:07 +02:00
Peter Vrabec
e997448056 home directory on fs with noacl + remove faillog 2011-02-10 11:23:21 +01:00
Peter Vrabec
ca4ecc57a6 useradd man page (-m option) #523265 2011-02-09 11:07:44 +01:00
Peter Vrabec
b76f93c25b - do not use gshadow functions from glibc(#674234) 2011-02-01 17:10:35 +01:00
Peter Vrabec
8d9482059f fix Bug #665780
- fix gshadow functions from shadow utils
- make shadow utils use gshadow functions from glibc
2011-01-06 09:41:43 +01:00
Peter Vrabec
30f3024f75 fix pwck/grpck hang 2010-07-20 09:20:10 +00:00
Peter Vrabec
59e397ee42 - fix integer underflow in faillog (#603683)
- use preferred GID for reserved static IDs
2010-06-14 11:15:21 +00:00
Peter Vrabec
6631e0269c add missing buildrequires 2010-04-29 15:26:31 +00:00
Peter Vrabec
4f86795e64 - preserve ACL's on files in /etc/skel Resolves: #513055 2010-04-29 15:09:49 +00:00
Peter Vrabec
d787a9d254 - newusers man page more informative
- userdel should not need to run semanage Resolves: #586330 #586408
2010-04-28 13:13:13 +00:00
Peter Vrabec
0ffcb199d6 fix man directories ownership (#569418) 2010-04-01 13:16:46 +00:00
Peter Vrabec
e772ed6ecf max group name length set to 32 characters 2010-03-26 13:55:46 +00:00
Peter Vrabec
446ad2234a - apply patches{1,2,3}
- enable SHA512 in /etc/login.defs
2009-11-18 09:33:28 +00:00
Peter Vrabec
cdd12ed1d1 upgrade 2009-09-07 14:56:09 +00:00