diff -up shadow-4.2.1/man/groupmems.8.xml.manfix shadow-4.2.1/man/groupmems.8.xml --- shadow-4.2.1/man/groupmems.8.xml.manfix 2014-03-01 19:59:51.000000000 +0100 +++ shadow-4.2.1/man/groupmems.8.xml 2015-11-06 14:21:03.013060324 +0100 @@ -179,20 +179,10 @@ SETUP - The groupmems executable should be in mode - 2770 as user root and in group - groups. The system administrator can add users to - group groups to allow or disallow them using the - groupmems utility to manage their own group - membership list. + In this operating system the groupmems executable + is not setuid and regular users cannot use it to manipulate + the membership of their own group. - - - $ groupadd -r groups - $ chmod 2770 groupmems - $ chown root.groups groupmems - $ groupmems -g groups -a gk4 - diff -up shadow-4.2.1/man/chage.1.xml.manfix shadow-4.2.1/man/chage.1.xml --- shadow-4.2.1/man/chage.1.xml.manfix 2014-03-01 19:59:51.000000000 +0100 +++ shadow-4.2.1/man/chage.1.xml 2014-11-26 15:34:51.256978960 +0100 @@ -102,6 +102,9 @@ Set the number of days since January 1st, 1970 when the password was last changed. The date may also be expressed in the format YYYY-MM-DD (or the format more commonly used in your area). + If the LAST_DAY is set to + 0 the user is forced to change his password + on the next log on. diff -up shadow-4.2.1/man/login.defs.5.xml.manfix shadow-4.2.1/man/login.defs.5.xml --- shadow-4.2.1/man/login.defs.5.xml.manfix 2014-03-13 06:52:55.000000000 +0100 +++ shadow-4.2.1/man/login.defs.5.xml 2014-11-26 15:34:51.257978963 +0100 @@ -162,6 +162,17 @@ long numeric parameters is machine-dependent. + + Please note that the parameters in this configuration file control the + behavior of the tools from the shadow-utils component. None of these + tools uses the PAM mechanism, and the utilities that use PAM (such as the + passwd command) should be configured elsewhere. The only values that + affect PAM modules are ENCRYPT_METHOD and SHA_CRYPT_MAX_ROUNDS + for pam_unix module, FAIL_DELAY for pam_faildelay module, + and UMASK for pam_umask module. Refer to + pam(8) for more information. + + The following configuration items are provided: diff -up shadow-4.2.1/man/shadow.5.xml.manfix shadow-4.2.1/man/shadow.5.xml --- shadow-4.2.1/man/shadow.5.xml.manfix 2014-03-01 19:59:51.000000000 +0100 +++ shadow-4.2.1/man/shadow.5.xml 2015-10-27 16:54:29.304231353 +0100 @@ -208,8 +208,8 @@ After expiration of the password and this expiration period is - elapsed, no login is possible using the current user's - password. The user should contact her administrator. + elapsed, no login is possible for the user. + The user should contact her administrator. An empty field means that there are no enforcement of an diff -up shadow-4.2.1/man/useradd.8.xml.manfix shadow-4.2.1/man/useradd.8.xml --- shadow-4.2.1/man/useradd.8.xml.manfix 2014-11-26 15:34:51.234978891 +0100 +++ shadow-4.2.1/man/useradd.8.xml 2014-11-26 15:34:51.257978963 +0100 @@ -347,11 +347,16 @@ is not enabled, no home directories are created. + + The directory where the user's home directory is created must + exist and have proper SELinux context and permissions. Otherwise + the user's home directory cannot be created or accessed. + - + , diff -up shadow-4.2.1/man/usermod.8.xml.manfix shadow-4.2.1/man/usermod.8.xml --- shadow-4.2.1/man/usermod.8.xml.manfix 2014-03-01 19:59:51.000000000 +0100 +++ shadow-4.2.1/man/usermod.8.xml 2014-11-26 15:34:51.257978963 +0100 @@ -132,7 +132,8 @@ If the option is given, the contents of the current home directory will be moved to the new home directory, which is created if it does - not already exist. + not already exist. If the current home directory does not exist + the new home directory will not be created. @@ -256,7 +257,8 @@ Move the content of the user's home directory to the new - location. + location. If the current home directory does not exist + the new home directory will not be created. This option is only valid in combination with the