Do not check old passwords using passwd.adjunct feature

This commit is contained in:
Honza Horák 2012-04-23 14:39:21 +02:00
parent 1604bf4577
commit b8eaf28911
2 changed files with 15 additions and 0 deletions

View File

@ -0,0 +1,12 @@
diff -up yp-tools-2.12/src/yppasswd.c.adjunct yp-tools-2.12/src/yppasswd.c
--- yp-tools-2.12/src/yppasswd.c.adjunct 2012-04-23 13:17:47.000988833 +0200
+++ yp-tools-2.12/src/yppasswd.c 2012-04-23 13:18:01.209802938 +0200
@@ -449,7 +449,7 @@ verifypassword (struct passwd *pwd, char
passwdlen = get_passwd_len (pwd->pw_passwd);
if (pwd->pw_passwd[0]
- && 0 != strcmp (pwd->pw_passwd, "x") /* don't check shadow passwords */
+ && 0 != strcmp (pwd->pw_passwd, "##") /* don't check passwords using passwd.adjunct feature */
&& uid)
{
char *crypted = crypt(pwdstr, pwd->pw_passwd);

View File

@ -11,6 +11,7 @@ Patch1: yp-tools-2.12-typo.patch
Patch2: yp-tools-2.12-gethost.patch
Patch3: yp-tools-2.12-hash.patch
Patch4: yp-tools-2.12-crypt.patch
Patch5: yp-tools-2.12-adjunct.patch
Url: http://www.linux-nis.org/nis/yp-tools/index.html
Requires: ypbind
@ -41,6 +42,7 @@ you'll need to install the ypserv package on one machine on the network.
%patch2 -p1 -b .gethost
%patch3 -p1 -b .hash
%patch4 -p1 -b .crypt
%patch5 -p1 -b .adjunct
%build
%configure --disable-domainname
@ -63,6 +65,7 @@ make DESTDIR="$RPM_BUILD_ROOT" INSTALL_PROGRAM=install install
%changelog
* Mon Apr 23 2012 Honza Horak <hhorak@redhat.com> - 2.12-9
- Do not check old passwords using passwd.adjunct feature
- Patch from Paul Wouters to handle crypt() returning NULL
Resolves: #814803