Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status
summaryrefslogtreecommitdiff
path: root/sys-apps/shadow
Commit message (Collapse)AuthorAgeFilesLines
* sys-apps/shadow: fix build with cracklib enabledMike Gilbert2021-08-042-0/+28
| | | | | Closes: https://bugs.gentoo.org/806124 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* sys-apps/shadow: destabilize 4.9-r1Sam James2021-07-271-1/+1
| | | | | | | Was pushed as stable. Fixes: 094b04485ed2967a788dc20912de0cc76d2f47ab Signed-off-by: Sam James <sam@gentoo.org>
* sys-apps/shadow: Consolidate blocker against man-pages-jaUlrich Müller2021-07-272-2/+2
| | | | | Package-Manager: Portage-3.0.20, Repoman-3.0.3 Signed-off-by: Ulrich Müller <ulm@gentoo.org>
* sys-apps/shadow: Revbump to install man pagesLars Wendler2021-07-251-0/+3
| | | | Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Bump to version 4.9Lars Wendler2021-07-254-0/+387
| | | | Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Fix whitespaceUlrich Müller2021-07-241-1/+1
| | | | | Package-Manager: Portage-3.0.20, Repoman-3.0.3 Signed-off-by: Ulrich Müller <ulm@gentoo.org>
* sys-apps/shadow: Add blockers against app-i18n/man-pages-*Ulrich Müller2021-07-241-0/+5
| | | | | | | | File collision for passwd.5 man page Bug: https://bugs.gentoo.org/803587 Package-Manager: Portage-3.0.20, Repoman-3.0.3 Signed-off-by: Ulrich Müller <ulm@gentoo.org>
* sys-apps/shadow: Install the passwd.5 man pageUlrich Müller2021-07-231-2/+5
| | | | | | | | | This needs a somewhat awkward blocker against sys-apps/man-pages, which can be simplified when >=man-pages-5.12-r2 becomes stable. Bug: https://bugs.gentoo.org/776787 Package-Manager: Portage-3.0.20, Repoman-3.0.3 Signed-off-by: Ulrich Müller <ulm@gentoo.org>
* sys-apps/shadow: remove unused patchMichael Mair-Keimberger2021-07-101-15/+0
| | | | | | | Closes: https://github.com/gentoo/gentoo/pull/20873 Package-Manager: Portage-3.0.18, Repoman-3.0.3 Signed-off-by: Michael Mair-Keimberger <mmk@levelnine.at> Signed-off-by: Conrad Kostecki <conikost@gentoo.org>
* sys-apps/shadow: ...and sparcMikle Kolyada2021-05-151-1/+1
| | | | | Package-Manager: Portage-3.0.17, Repoman-3.0.2 Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* sys-apps/shadow: Drop oldMikle Kolyada2021-05-152-242/+0
| | | | | Package-Manager: Portage-3.0.17, Repoman-3.0.2 Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* sys-apps/shadow: mark stableMikle Kolyada2021-05-151-1/+1
| | | | | Package-Manager: Portage-3.0.17, Repoman-3.0.2 Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* sys-apps/shadow: libtool--Sam James2021-04-212-5/+5
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* sys-apps/shadow: drop s390 to ~s390 (unstable)Sam James2021-04-051-2/+2
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* Revert "sys-apps/shadow: require the mail group at runtime"Mike Gilbert2020-09-082-2/+0
| | | | | | | | | | The acct-{user,group} eclasses call useradd and groupadd to create users and groups. This is esentually a circular dependency that needs to be resolved somehow. Bug: https://bugs.gentoo.org/720948 Reverts: f065b54fc2420c72d1d248b6a96c52c81f00d141 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* sys-apps/shadow: require the mail group at runtimeDavid Michael2020-09-072-0/+2
| | | | | | | Closes: https://bugs.gentoo.org/720948 Package-Manager: Portage-3.0.4, Repoman-2.3.23 Signed-off-by: David Michael <fedora.dm0@gmail.com> Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* sys-apps/shadow: fix cracklib dictonary pathMikle Kolyada2020-08-212-2/+2
| | | | | | Closes: https://bugs.gentoo.org/714012 Package-Manager: Portage-2.3.103, Repoman-2.3.23 Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* sys-apps/shadow: Disable cracklib defaultMikle Kolyada2020-08-212-2/+6
| | | | | | | | | | | | | Built-in cracklib support is just an alternative to the stack installed by the sys-auth/pambase package. If shadow is built with USE=pam, then it will prefer pam configuration files over cracklib, so cracklib is useless as an option. The pam use flag is enabled in the linux profiles by default, which covers most use cases. Package-Manager: Portage-2.3.103, Repoman-2.3.23 Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* sys-apps/shadow: Security cleanupLars Wendler2020-04-214-582/+0
| | | | | | Bug: https://bugs.gentoo.org/702252 Package-Manager: Portage-2.3.99, Repoman-2.3.22 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* */*: downgrade m68k down to ~m68kSergei Trofimovich2020-04-211-1/+1
| | | | | | | | | m68k and ~m68k trees are inconsistent. Let's drop keywords down to ~m68k only. Profiles already accept both keywords: ACCEPT_KEYWORDS="m68k ~m68k" Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org>
* */*: Drop stable ia64 keywordsMatt Turner2020-04-032-2/+2
| | | | Signed-off-by: Matt Turner <mattst88@gentoo.org>
* */*: Discontinue Gentoo SuperH portMikle Kolyada2020-03-264-4/+4
| | | | | | Package-Manager: Portage-2.3.89, Repoman-2.3.20 RepoMan-Options: --ignore-arches Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* sys-apps/shadow: stable 4.8-r4 for hppa, bug #702252Rolf Eike Beer2020-03-181-1/+1
| | | | | | | Package-Manager: Portage-2.3.89, Repoman-2.3.20 RepoMan-Options: --include-arches="hppa" Signed-off-by: Rolf Eike Beer <eike@sf-mail.de> Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org>
* sys-apps/shadow: depend on >=sys-kernel/linux-headers-4.14Mike Gilbert2020-03-173-3/+3
| | | | | | Bug: https://bugs.gentoo.org/708810 Package-Manager: Portage-2.3.92_p3, Repoman-2.3.20_p118 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* sys-apps/shadow: arm64 stable (bug #702252)Mart Raudsepp2020-03-171-1/+1
| | | | | Package-Manager: Portage-2.3.84, Repoman-2.3.20 Signed-off-by: Mart Raudsepp <leio@gentoo.org>
* sys-apps/shadow: Revbumps to fix pam usage of chpasswd and newusersMichael Weiser2020-03-163-0/+11
| | | | | | Closes: https://bugs.gentoo.org/712372 Package-Manager: Portage-2.3.94, Repoman-2.3.21 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: depend on >=sys-kernel/linux-headers-4.19Mike Gilbert2020-03-113-18/+24
| | | | | | Closes: https://bugs.gentoo.org/708810 Package-Manager: Portage-2.3.92_p3, Repoman-2.3.20_p118 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* sys-apps/shadow: ppc64 stable wrt bug #702252Agostino Sarubbo2020-03-081-1/+1
| | | | | | Package-Manager: Portage-2.3.89, Repoman-2.3.20 RepoMan-Options: --include-arches="ppc64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* sys-apps/shadow: ia64 stable wrt bug #702252Agostino Sarubbo2020-03-081-1/+1
| | | | | | Package-Manager: Portage-2.3.89, Repoman-2.3.20 RepoMan-Options: --include-arches="ia64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* sys-apps/shadow: x86 stable wrt bug #702252Agostino Sarubbo2020-03-081-1/+1
| | | | | | Package-Manager: Portage-2.3.89, Repoman-2.3.20 RepoMan-Options: --include-arches="x86" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* sys-apps/shadow: ppc stable wrt bug #702252Agostino Sarubbo2020-03-081-1/+1
| | | | | | Package-Manager: Portage-2.3.89, Repoman-2.3.20 RepoMan-Options: --include-arches="ppc" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* sys-apps/shadow: arm stable wrt bug #702252Agostino Sarubbo2020-03-081-1/+1
| | | | | | Package-Manager: Portage-2.3.89, Repoman-2.3.20 RepoMan-Options: --include-arches="arm" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* sys-apps/shadow: sparc stable wrt bug #702252Agostino Sarubbo2020-03-081-1/+1
| | | | | | Package-Manager: Portage-2.3.89, Repoman-2.3.20 RepoMan-Options: --include-arches="sparc" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* sys-apps/shadow: amd64 stable wrt bug #702252Mikle Kolyada2020-03-081-1/+1
| | | | | | Package-Manager: Portage-2.3.89, Repoman-2.3.20 RepoMan-Options: --include-arches="amd64" Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* sys-apps/shadow: s390 stable wrt bug #702252Agostino Sarubbo2020-03-081-1/+1
| | | | | | Package-Manager: Portage-2.3.89, Repoman-2.3.20 RepoMan-Options: --include-arches="s390" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* */*: Bump copyright on files touched this yearMichał Górny2020-02-111-1/+1
| | | | | | | Update the copyright notice on all files that were touched since January 1st but did not have the notice updated. Signed-off-by: Michał Górny <mgorny@gentoo.org>
* sys-apps/shadow-4.8.1-r1: add slot operator to libcryptPatrick McLean2020-02-061-1/+1
| | | | | | Copyright: Sony Interactive Entertainment Inc. Package-Manager: Portage-2.3.87, Repoman-2.3.20 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* sys-apps/shadow-4.8.1-r1: Revbump, add dep on virtual/libcryptPatrick McLean2020-02-061-0/+1
| | | | | | Copyright: Sony Interactive Entertainment Inc. Package-Manager: Portage-2.3.87, Repoman-2.3.20 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* sys-apps/shadow: fix su blockerMike Gilbert2020-02-023-5/+5
| | | | | Package-Manager: Portage-2.3.86_p1, Repoman-2.3.20_p43 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* */*: Drop stable alpha keywordsMatt Turner2020-01-251-1/+1
| | | | Signed-off-by: Matt Turner <mattst88@gentoo.org>
* sys-apps/shadow: Removed oldLars Wendler2020-01-251-236/+0
| | | | | Package-Manager: Portage-2.3.85, Repoman-2.3.20 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Bump to version 4.8.1Lars Wendler2020-01-252-0/+233
| | | | | Package-Manager: Portage-2.3.85, Repoman-2.3.20 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Revbump to fix up PAM configurationMichael Weiser2020-01-192-0/+240
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | shadow includes a number of administrative account management binaries like useradd, chage and chpasswd, traditionally only useable by root. In shadow they can be compiled with PAM support and installed setuid. PAM configuration can then be used to delegate account management to users other than root. The previous config contained the pam_rootok module to provide default behaviour of allowing account management when called as root. But it also contained pam_permit which would allow everyone else to also do account management without any authentication. To close this loophole we remove pam_permit from the config. Also, chpasswd, chgpasswd and newusers are batch-mode mass-change tools meant for scripting. They only contain PAM support if configure flag --enable-account-tools-setuid is in effect and are then installed setuid root. They should use the same restrictive PAM configuration as their siblings. But with setuid user management tools and PAM support within them disabled by commit f569e607 we can stop installing the configuration files as well. chfn and chsh are intended to be called by the user as self-service tools. For this reason they're always installed setuid root and contain PAM support. They should be allowed to work but maybe not without some prior authentication to avoid attacks such as someone finding an unlocked session and using chfn to redirect phone calls intended for the user to himself. The existing passwd config seems perfect for that and is aptly named in that both tools change user information normally stored in /etc/passwd. groupmems is another user self-service tool. It allows the user to add people to their user-private group, allowing them trusted access to normally private files. It is not installed setuid like chfn and chsh but always contains PAM support. Upstream installs a locked down PAM config by default. Since default shell profiles on Gentoo do not change umask to 0002 when a private user group is in use, impact will only be to allow read access to those additional users by default. Since the idea of adding more users to the user *private* group is questionable, go with upstream's default of locking the PAM config down so that an admin not only needs to make the binary suid but also adjust the PAM config, in the process hopefully considering what they're doing. Bug: https://bugs.gentoo.org/702252 Closes: https://github.com/gentoo/gentoo/pull/14032 Reviewed-by: Mikle Kolyada <zlogene@gentoo.org> Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Revbump to no longer install binaries SUID-rootLars Wendler2019-12-171-2/+3
| | | | | | | Thanks-to: Michael Weiser <michael@weiser.dinsnail.net> Bug: https://bugs.gentoo.org/702252 Package-Manager: Portage-2.3.82, Repoman-2.3.20 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Minor ebuild adjustmentLars Wendler2019-12-021-1/+1
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow-4.8-r1: Revbump, install in /usr as well as /Patrick McLean2019-12-012-3/+25
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* sys-apps/shadow: Bump to version 4.8Lars Wendler2019-12-013-0/+230
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: eautoreconf requires sys-devel/gettextLars Wendler2019-11-201-1/+1
| | | | | | | Thanks-to: Arthur Zamarin <arthurzam+gentoo@gmail.com> Closes: https://bugs.gentoo.org/700750 Package-Manager: Portage-2.3.79, Repoman-2.3.18 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Removed oldLars Wendler2019-11-202-426/+0
| | | | | Package-Manager: Portage-2.3.79, Repoman-2.3.18 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Introduced "su" USE flagLars Wendler2019-11-193-0/+367
| | | | | | | | | | Moved passwd from /usr/bin to /bin (again) as it breaks at least one package that has passwd path hardcoded (net-misc/scponly) Thanks-to: fling <fling@member.fsf.org> Bug: https://bugs.gentoo.org/699930 Package-Manager: Portage-2.3.79, Repoman-2.3.18 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>