VesperOS/shadow
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,100 Commits 10 Branches 149 Tags
a2f607ed76cddd697cda0443d4809e9dfd9f4f31
Commit Graph

96 Commits

Author SHA1 Message Date
Chris Hofstaedtler 75eb23ace8 Re-add workarounds for tests in tests/tests directory 
4.15.3 fixed this, but 4.16.0 happened earlier.

Gbp-Dch: full
 2024-08-05 02:58:01 +02:00
Chris Hofstaedtler 9b4bfac4ef Turn login.defs file into a patch 
Gbp-Dch: ignore
 2024-07-07 14:08:10 +02:00
Chris Hofstaedtler 43bf5f3b39 Fix setup of test libsubid-04_nss 2024-07-06 23:37:02 +02:00
Chris Hofstaedtler a6f8d25673 Rebase patches 2024-07-06 22:48:07 +02:00
Serge Hallyn aad21d4486 Add upstream tests to run in autopkgtests 
Disable the su tests, since su in debian comes from util-linux.

[zeha@d.o: rebase on top of upstream applied patch, rework
debian/tests/*]
 2024-06-27 01:27:24 +02:00
Chris Hofstaedtler 29f0e1dcf4 patches: fix gbp-pq topic annotation 
Gbp-Dch: ignore
 2024-06-27 01:20:09 +02:00
Chris Hofstaedtler e0d410ad6a Add upstream patch easing running testsuite 2024-06-27 01:18:32 +02:00
Chris Hofstaedtler 999c14c87b Revert "Use upstream's restrictions on user- and group names again" 
This reverts commit 019ffd5126.
 2024-06-26 12:40:15 +02:00
Chris Hofstaedtler 0a96fd2bf0 Drop useradd's backwards-compatibility -O flag 
No users appear left in Debian.
 2024-06-23 14:57:28 +02:00
Chris Hofstaedtler 019ffd5126 Use upstream's restrictions on user- and group names again 
Upstream started supporting mixed-case names some time ago.
Purely numeric names (#79682) are now forbidden again, as there is no
way of distinguishing them from user/group IDs otherwise.

Gbp-Dch: full
 2024-06-23 14:50:55 +02:00
Chris Hofstaedtler 771535fa07 useradd(8): Fix missing paragraph on username length 2024-06-22 18:05:22 +02:00
Chris Hofstaedtler 527b684a18 Rebase patches 2024-06-22 17:55:55 +02:00
Chris Hofstaedtler c154cb50fa Rename remaining patches to end with ".patch" 
Gbp-Dch: ignore
 2024-06-22 15:12:39 +02:00
Chris Hofstaedtler 3bf1270130 Rebase patch 542_useradd-O_option 2024-06-22 15:12:39 +02:00
Chris Hofstaedtler e3549c3f90 Rebase patch 506_relaxed_usernames 2024-06-22 15:12:39 +02:00
Chris Hofstaedtler ad3a822529 Rebase patch 502_debian_useradd_defaults 2024-06-22 15:12:39 +02:00
Chris Hofstaedtler 10c72480c0 Rebase patch 501_commonio_group_shadow 2024-06-22 15:12:39 +02:00
Chris Hofstaedtler 6c1c44f0fc Rebase patch 463_login_delay_obeys_to_PAM 2024-06-22 15:12:39 +02:00
Chris Hofstaedtler 23d33f4922 Use upstream FAILLOG_ENAB code, incompatible with PAM 2024-06-22 15:12:39 +02:00
Chris Hofstaedtler 0c8f801a7a Rename patch 402_cppw_selinux 2024-06-22 15:12:39 +02:00
Chris Hofstaedtler 4a109337ab Rebase patch 401_cppw_src.dpatch 2024-06-22 15:12:39 +02:00
Chris Hofstaedtler 584b0b6a36 Disable FTMP_FILE by default, drop login failure logging 
lastb is gone, so it is pointless to write to the btmp file.
 2024-06-22 15:12:39 +02:00
Chris Hofstaedtler 4e48f059e7 Drop upstream applied patches 2024-06-22 15:12:39 +02:00
Balint Reczey 9f285306f3 Fix valid_field() that regressed in upstream's first CVE fix 
cherry-picking upstream's regression fix.

Follow-up for commit 50defcfa5d .

Gbp-Dch: Ignore
 2023-09-26 12:19:29 +02:00
Balint Reczey 50defcfa5d Cherry-pick upstream patch to fix chfn vulnerability 
(CVE-2023-29383)

Closes: #1034482
 2023-09-25 18:13:40 +02:00
Balint Reczey 56c7502686 Cherry-pick upstream patch to fix gpasswd passwd leak 
(CVE-2023-4641)

Closes: #1051062
 2023-09-25 17:55:00 +02:00
Balint Reczey f960334281 Refresh patches 2022-11-10 22:07:00 +01:00
Balint Reczey 8f8e8c66d6 Fix tree copying regressions introduced in 4.12.2. 
Closes: #1023132
 2022-11-05 14:46:09 +01:00
Balint Reczey 220f9aac4d Cherry-pick upstream patch to fix regression in expiration date handling 
Closes: #1021697
 2022-10-22 20:09:51 +02:00
Balint Reczey f7c5ed7e44 debian/patches: Reorder patches in series to make it look sane 2022-09-11 23:16:27 +02:00
Johannes Schauer Marin Rodrigues 840aa7a980 useradd: avoid creating several GB worth of sparse lastlog and faillog files 
Closes: #1019245
 2022-09-06 10:01:45 +02:00
Balint Reczey b96c915fb6 useradd: Restore defaults used up to 4.8.1 version 
Also fix /etc/default/useradd to state that mail spool directories are
not created.
 2022-02-11 13:14:04 +01:00
Balint Reczey e225d71e7f Install nologin /usr/sbin without patching makefiles 2021-11-14 13:17:32 +01:00
Balint Reczey 2d2f190b5f Refresh patches 2020-02-06 23:33:56 +01:00
Andreas Henriksson e34706dd5b Cherry-pick upstream patch reverting bindir/sbindir 
From:
https://github.com/shadow-maint/shadow/commit/3cc3948d719d3b9dedaaf2e96221e4b5b96ea380.patch
 2019-12-05 15:12:17 +01:00
Balint Reczey b43b5a89d1 Drop patches manipulating su argument concatenation: 
- 523_su_arguments_are_concatenated
- su_arguments_are_no_more_concatenated_by_default
 2017-08-11 11:16:45 -04:00
Balint Reczey 591aa8debe Refresh patches 
Dropped patches:
- 0001-Typos-fix-in-german-translation-of-man-pages.patch
- 0002-Last-bits-of-enabling-subuids.patch
- 0003-Dutch-translation-update.patch
- 0004-Updated-Czech-translation.patch
- 0005-Update-for-German-man-pages.patch
- 0006-French-manpage-translation.patch
- 0007-Fix-some-spelling-issues-in-the-Norwegian-translatio.patch
- 0008-su-properly-clear-child-PID.patch
- 1010_vietnamese_translation
- 301-Reset-pid_child-only-if-waitpid-was-successful.patch
 2017-08-10 18:36:48 -04:00
Salvatore Bonaccorso d7f24f954e Import Debian changes 1:4.4-4.1 
shadow (1:4.4-4.1) unstable; urgency=high

  * Non-maintainer upload.
  * Reset pid_child only if waitpid was successful.
    This is a regression fix for CVE-2017-2616. If su receives a signal like
    SIGTERM, it is not propagated to the child. (Closes: #862806)
 2017-08-10 18:25:45 -04:00
Balint Reczey bc6cd09194 su: properly clear child PID (CVE-2017-2616) 
Closes: #855943
 2017-02-24 01:50:09 +01:00
Lars Bahner 182a8cf464 Fix some spelling issues in the Norwegian translation 
Closes: #800553
 2017-01-19 18:55:28 +01:00
Thomas Blein b20639f055 French manpage translation 
Closes: #805182
 2017-01-19 18:25:01 +01:00
Holger Wansing 0531cb85a4 Update for German man pages 2017-01-19 18:25:00 +01:00
Miroslav Kuře 19ebc9d55a Updated Czech translation 
Closes: #759113
 2017-01-19 18:24:54 +01:00
Trần Ngọc Quân f19610854c Update Vietnamese translation 
Closes: #777107
 2017-01-19 17:24:11 +01:00
Frans Spiesschaert 398a6d383a Dutch translation update 
Closes: #772470
 2017-01-19 17:17:57 +01:00
Balint Reczey 25df6ffc55 Send 1000_configure_userns patch upstream 2017-01-18 18:14:19 +01:00
Balint Reczey 9eb5f5e758 Fix typos in German man pages 
Closes: #734609
 2017-01-18 18:12:18 +01:00
Balint Reczey 569a90cd97 Disable Vietnamese translation patch because it does not apply cleanly 2016-11-30 03:03:43 +01:00
Serge Hallyn d9e428fd63 Imported Debian patch 1:4.4-1 2016-10-13 10:19:55 -05:00
Serge Hallyn 68cd195044 add three security patches 
Signed-off-by: Serge Hallyn <serge@hallyn.com>
 2016-08-05 17:44:27 -05:00