Chris Hofstaedtler
43bf5f3b39
Fix setup of test libsubid-04_nss
2024-07-06 23:37:02 +02:00
Chris Hofstaedtler
a6f8d25673
Rebase patches
2024-07-06 22:48:07 +02:00
Serge Hallyn
aad21d4486
Add upstream tests to run in autopkgtests
...
Disable the su tests, since su in debian comes from util-linux.
[zeha@d.o: rebase on top of upstream applied patch, rework
debian/tests/*]
2024-06-27 01:27:24 +02:00
Chris Hofstaedtler
29f0e1dcf4
patches: fix gbp-pq topic annotation
...
Gbp-Dch: ignore
2024-06-27 01:20:09 +02:00
Chris Hofstaedtler
e0d410ad6a
Add upstream patch easing running testsuite
2024-06-27 01:18:32 +02:00
Chris Hofstaedtler
999c14c87b
Revert "Use upstream's restrictions on user- and group names again"
...
This reverts commit 019ffd5126 .
2024-06-26 12:40:15 +02:00
Chris Hofstaedtler
712f360fcd
shadowconfig.8: actually install again
2024-06-23 15:57:14 +02:00
Chris Hofstaedtler
0a96fd2bf0
Drop useradd's backwards-compatibility -O flag
...
No users appear left in Debian.
2024-06-23 14:57:28 +02:00
Chris Hofstaedtler
019ffd5126
Use upstream's restrictions on user- and group names again
...
Upstream started supporting mixed-case names some time ago.
Purely numeric names (#79682 ) are now forbidden again, as there is no
way of distinguishing them from user/group IDs otherwise.
Gbp-Dch: full
2024-06-23 14:50:55 +02:00
Chris Hofstaedtler
771535fa07
useradd(8): Fix missing paragraph on username length
2024-06-22 18:05:22 +02:00
Chris Hofstaedtler
527b684a18
Rebase patches
2024-06-22 17:55:55 +02:00
Chris Hofstaedtler
c154cb50fa
Rename remaining patches to end with ".patch"
...
Gbp-Dch: ignore
2024-06-22 15:12:39 +02:00
Chris Hofstaedtler
3bf1270130
Rebase patch 542_useradd-O_option
2024-06-22 15:12:39 +02:00
Chris Hofstaedtler
e3549c3f90
Rebase patch 506_relaxed_usernames
2024-06-22 15:12:39 +02:00
Chris Hofstaedtler
ad3a822529
Rebase patch 502_debian_useradd_defaults
2024-06-22 15:12:39 +02:00
Chris Hofstaedtler
10c72480c0
Rebase patch 501_commonio_group_shadow
2024-06-22 15:12:39 +02:00
Chris Hofstaedtler
6c1c44f0fc
Rebase patch 463_login_delay_obeys_to_PAM
2024-06-22 15:12:39 +02:00
Chris Hofstaedtler
23d33f4922
Use upstream FAILLOG_ENAB code, incompatible with PAM
2024-06-22 15:12:39 +02:00
Chris Hofstaedtler
0c8f801a7a
Rename patch 402_cppw_selinux
2024-06-22 15:12:39 +02:00
Chris Hofstaedtler
4a109337ab
Rebase patch 401_cppw_src.dpatch
2024-06-22 15:12:39 +02:00
Chris Hofstaedtler
584b0b6a36
Disable FTMP_FILE by default, drop login failure logging
...
lastb is gone, so it is pointless to write to the btmp file.
2024-06-22 15:12:39 +02:00
Chris Hofstaedtler
4e48f059e7
Drop upstream applied patches
2024-06-22 15:12:39 +02:00
Balint Reczey
9f285306f3
Fix valid_field() that regressed in upstream's first CVE fix
...
cherry-picking upstream's regression fix.
Follow-up for commit 50defcfa5d .
Gbp-Dch: Ignore
2023-09-26 12:19:29 +02:00
Balint Reczey
50defcfa5d
Cherry-pick upstream patch to fix chfn vulnerability
...
(CVE-2023-29383)
Closes : #1034482
2023-09-25 18:13:40 +02:00
Balint Reczey
56c7502686
Cherry-pick upstream patch to fix gpasswd passwd leak
...
(CVE-2023-4641)
Closes : #1051062
2023-09-25 17:55:00 +02:00
Balint Reczey
b4c00e119f
debian/patches/506_relaxed_usernames: Fix refreshing the patch
...
Gbp-Dch: Ignore
2022-11-11 12:59:33 +01:00
Balint Reczey
f960334281
Refresh patches
2022-11-10 22:07:00 +01:00
Balint Reczey
8f8e8c66d6
Fix tree copying regressions introduced in 4.12.2.
...
Closes : #1023132
2022-11-05 14:46:09 +01:00
Balint Reczey
220f9aac4d
Cherry-pick upstream patch to fix regression in expiration date handling
...
Closes : #1021697
2022-10-22 20:09:51 +02:00
Balint Reczey
f7c5ed7e44
debian/patches: Reorder patches in series to make it look sane
2022-09-11 23:16:27 +02:00
Balint Reczey
71b57931c8
debian/patches/502_debian_useradd_defaults: Update useradd.8.xml, too
...
Gbp-Dch: Ignore
2022-09-11 23:05:00 +02:00
Johannes Schauer Marin Rodrigues
840aa7a980
useradd: avoid creating several GB worth of sparse lastlog and faillog files
...
Closes : #1019245
2022-09-06 10:01:45 +02:00
Balint Reczey
56751ea5fa
Refresh patches
2022-08-20 18:37:02 +02:00
Balint Reczey
b96c915fb6
useradd: Restore defaults used up to 4.8.1 version
...
Also fix /etc/default/useradd to state that mail spool directories are
not created.
2022-02-11 13:14:04 +01:00
Balint Reczey
d9490db020
Refresh patches
2022-01-22 21:53:04 +01:00
Balint Reczey
e225d71e7f
Install nologin /usr/sbin without patching makefiles
2021-11-14 13:17:32 +01:00
Balint Reczey
2d2f190b5f
Refresh patches
2020-02-06 23:33:56 +01:00
Andreas Henriksson
e34706dd5b
Cherry-pick upstream patch reverting bindir/sbindir
...
From:
https://github.com/shadow-maint/shadow/commit/3cc3948d719d3b9dedaaf2e96221e4b5b96ea380.patch
2019-12-05 15:12:17 +01:00
Andreas Henriksson
787ebc3336
Refresh and massage patches to apply
...
The following needed massaging to apply:
* debian/patches/508_nologin_in_usr_sbin
* debian/patches/401_cppw_src.dpatch
The remaining patches just got trivial quilt refresh updates,
except debian/patches/506_relaxed_usernames which needed
special attention to be correctly refreshed.
2019-12-05 15:08:29 +01:00
Balint Reczey
084a543a03
Refresh patches
2019-06-23 22:11:48 +02:00
Balint Reczey
089560d90e
Refresh patches
2019-03-03 23:40:55 +01:00
Balint Reczey
ba18b6cab2
Cut redundant information from Debian-specific README files
2017-08-12 18:48:09 -04:00
Balint Reczey
b43b5a89d1
Drop patches manipulating su argument concatenation:
...
- 523_su_arguments_are_concatenated
- su_arguments_are_no_more_concatenated_by_default
2017-08-11 11:16:45 -04:00
Balint Reczey
591aa8debe
Refresh patches
...
Dropped patches:
- 0001-Typos-fix-in-german-translation-of-man-pages.patch
- 0002-Last-bits-of-enabling-subuids.patch
- 0003-Dutch-translation-update.patch
- 0004-Updated-Czech-translation.patch
- 0005-Update-for-German-man-pages.patch
- 0006-French-manpage-translation.patch
- 0007-Fix-some-spelling-issues-in-the-Norwegian-translatio.patch
- 0008-su-properly-clear-child-PID.patch
- 1010_vietnamese_translation
- 301-Reset-pid_child-only-if-waitpid-was-successful.patch
2017-08-10 18:36:48 -04:00
Salvatore Bonaccorso
d7f24f954e
Import Debian changes 1:4.4-4.1
...
shadow (1:4.4-4.1) unstable; urgency=high
* Non-maintainer upload.
* Reset pid_child only if waitpid was successful.
This is a regression fix for CVE-2017-2616. If su receives a signal like
SIGTERM, it is not propagated to the child. (Closes : #862806 )
2017-08-10 18:25:45 -04:00
Balint Reczey
bc6cd09194
su: properly clear child PID (CVE-2017-2616)
...
Closes : #855943
2017-02-24 01:50:09 +01:00
Lars Bahner
182a8cf464
Fix some spelling issues in the Norwegian translation
...
Closes : #800553
2017-01-19 18:55:28 +01:00
Thomas Blein
b20639f055
French manpage translation
...
Closes : #805182
2017-01-19 18:25:01 +01:00
Holger Wansing
0531cb85a4
Update for German man pages
2017-01-19 18:25:00 +01:00
Miroslav Kuře
19ebc9d55a
Updated Czech translation
...
Closes : #759113
2017-01-19 18:24:54 +01:00