linux/poky.git/meta/recipes-extended/shadow/shadow.inc, branch 5.0_M3

shadow: add a packageconfig for logind support

2024-02-09T13:55:06+00:00

This was causing host contamination in particular, where libsystemd was installed on the host. (From OE-Core rev: fda06b441655cfa4e5f93e8f5587f27aa3610bb8) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

shadow: replace static linking with dynamic libraries in a custom location and bundled with shadow

2024-01-21T12:27:12+00:00

Despite our efforts to make static linking work, there have been new reports of bizarre build failures: https://lists.openembedded.org/g/openembedded-core/message/194006 https://lists.openembedded.org/g/openembedded-core/message/193907 This commit changes back to dynamic linking, but places the libraries in a custom location, per RP's suggestion. (From OE-Core rev: b93562937737e97dbc8cb7c874e9913f6a285a34) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

shadow: link executables statically for -native variant

2024-01-12T11:54:05+00:00

shadow 4.14.x adds a number of libraries it dynamically links with (md, bsd, attr). This causes troubles in setscene tasks where shadow executables are used (such as useradd), as pulling in the needed dynamic libraries needs unpleasant special-casing. (From OE-Core rev: 495ff95eae14a91c94187f78a0b30c7957c9b168) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

shadow: update 4.13 -> 4.14.2

2024-01-12T11:54:05+00:00

License-Update: formatting, spdx conversion Drop: 0001-Disable-use-of-syslog-for-sysroot.patch (issue fixed upstream) 0001-Fix-can-not-print-full-login.patch 0001-Overhaul-valid_field.patch CVE-2023-29383.patch (backports) libbsd is a new native dependency, as otherwise glibc >= 2.38 is needed. A similar fix is added to musl in order to define non-standard __BEGIN_DECLS/__END_DECLS. (From OE-Core rev: e85069acf304fe0b68583cf79fe3ec4f775dca68) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

shadow: Fix for CVE-2023-4641

2023-12-04T11:23:37+00:00

shadow-utils: possible password leak during passwd(1) change CVE: CVE-2023-4641 Upstream-Status: Backport [https://github.com/shadow-maint/shadow/commit/65c88a43a23c2391dcc90c0abda3e839e9c57904] (From OE-Core rev: 7942df17d9dfcf690106b8b86506d496e6251327) Signed-off-by: Xiangyu Chen Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

shadow: remove dependency on pam-plugin-lastlog

2023-06-27T15:23:40+00:00

This item has been deprecated in pam 1.5.3 and is no longer built by default: https://github.com/linux-pam/linux-pam/blob/master/NEWS (From OE-Core rev: 04f3c3e335bf5e7c3a12ccc97fda9a8c214135d0) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

Revert "python3/ruby/shadow: Revert add libxcrypt-native dependency"

2023-05-29T12:32:55+00:00

This reverts commit c6198e1b1c3e3a3413b6ff9f014b40114f1850db. This reverts commit 167c2c9f15c1bfe401c0512e420a76fa1379c012. This reverts commit 65532fc751dc00e5568e256166f7b259d3a3c06c. The dependencies should not be a -native in the target case. Revert these whilst the proper patch is worked out. (From OE-Core rev: 54eccb76eb8ba2086a56a30dfbb8aba06b02865a) Signed-off-by: Richard Purdie

shadow: add libxcrypt-native dependency

2023-05-28T08:09:47+00:00

crypt.h is otherwise taken from the host machine (From OE-Core rev: 65532fc751dc00e5568e256166f7b259d3a3c06c) Signed-off-by: Markus Volk Signed-off-by: Richard Purdie

shadow: backport patch to fix CVE-2023-29383

2023-04-20T10:56:06+00:00

The fix of CVE-2023-29383.patch contains a bug that it rejects all characters that are not control ones, so backup another patch named "0001-Overhaul-valid_field.patch" from upstream to fix it. (From OE-Core rev: c5da9027cc73484936f4f82a37c32348cee1e229) Signed-off-by: Xiangyu Chen Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

shadow: Fix can not print full login timeout message

2023-04-03T10:39:59+00:00

When we do not enter password during login, it is expected to display message "Login timed out after 60 seconds". But it prints only first few bytes(like "Login t") when write is immediately followed by exit. Fix - Calling exit from new handler provides enough time to display full message. Upstream-Status: Accepted [https://github.com/shadow-maint/shadow/commit/670cae834827a8f794e6f7464fa57790d911b63c] (From OE-Core rev: 644cfe9dcf351bfa6c67f4b4d1e7dec416a59021) Signed-off-by: Soumya Signed-off-by: Richard Purdie