<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-extended/shadow/shadow.inc, branch halstead/hashclient</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=halstead%2Fhashclient</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=halstead%2Fhashclient'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2024-04-12T17:04:01+00:00</updated>
<entry>
<title>shadow: update 4.14.2 -&gt; 4.15.0</title>
<updated>2024-04-12T17:04:01+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2024-03-13T17:33:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=31ec877af046293262dc4c6038f959488b40752f'/>
<id>urn:sha1:31ec877af046293262dc4c6038f959488b40752f</id>
<content type='text'>
libcrack support was dropped.

(From OE-Core rev: 2d00e17dfdfbbf8c301a63192ac1066c167f2bec)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: don't install libattr.so.* when xattr not in DISTRO_FEATURES</title>
<updated>2024-03-23T10:18:20+00:00</updated>
<author>
<name>Sam Van Den Berge</name>
<email>sam.van.den.berge@gmail.com</email>
</author>
<published>2024-03-22T11:06:54+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=f9b691150bf2e6b416319d2df9505724e7df71eb'/>
<id>urn:sha1:f9b691150bf2e6b416319d2df9505724e7df71eb</id>
<content type='text'>
Fixes the following issue:

install: cannot stat '.../recipe-sysroot-native/usr/lib/libattr.so.*': No such file or directory
...
ERROR: Task (virtual:native:.../shadow_4.14.2.bb:do_install) failed with exit code '1'

(From OE-Core rev: b3afb80d07d97aaa786b6921fb6f61e316201367)

Signed-off-by: Sam Van Den Berge &lt;sam.van.den.berge@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: fix copydir operation with 'pseudo'</title>
<updated>2024-03-20T18:20:38+00:00</updated>
<author>
<name>Enrico Scholz</name>
<email>enrico.scholz@sigma-chemnitz.de</email>
</author>
<published>2024-03-18T13:58:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=7d530aa4170fe1ce66051c493d17c058d8c48572'/>
<id>urn:sha1:7d530aa4170fe1ce66051c493d17c058d8c48572</id>
<content type='text'>
Calling 'useradd' through pseudo on (at least) Ubuntu 20 creates
filesystem objects (.bashrc, .profile) with invalid attributes.  It
manifests as

| tar: ./home/.../.bashrc: Unknown file type; file ignored

or

| Copying files into the device: __populate_fs: ignoring entry ".bashrc"
| .bashrc: File not found by ext2_lookup while looking up ".bashrc"

when building the image.

This happens due to a bug in shadow which is caused by clobbering
fstatat() results.

(From OE-Core rev: 991f880e5cb3d30a1197711d44af2fdb1719ce82)

Signed-off-by: Enrico Scholz &lt;enrico.scholz@sigma-chemnitz.de&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: add a packageconfig for logind support</title>
<updated>2024-02-09T13:55:06+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2024-02-08T18:56:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=df0a2575ec54dd20061092d0a8fba93de294da04'/>
<id>urn:sha1:df0a2575ec54dd20061092d0a8fba93de294da04</id>
<content type='text'>
This was causing host contamination in particular, where
libsystemd was installed on the host.

(From OE-Core rev: fda06b441655cfa4e5f93e8f5587f27aa3610bb8)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: replace static linking with dynamic libraries in a custom location and bundled with shadow</title>
<updated>2024-01-21T12:27:12+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2024-01-19T12:43:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4a61101478be8affd8bba69797e319b9e5657662'/>
<id>urn:sha1:4a61101478be8affd8bba69797e319b9e5657662</id>
<content type='text'>
Despite our efforts to make static linking work, there have
been new reports of bizarre build failures:
https://lists.openembedded.org/g/openembedded-core/message/194006
https://lists.openembedded.org/g/openembedded-core/message/193907

This commit changes back to dynamic linking, but places
the libraries in a custom location, per RP's suggestion.

(From OE-Core rev: b93562937737e97dbc8cb7c874e9913f6a285a34)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: link executables statically for -native variant</title>
<updated>2024-01-12T11:54:05+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2024-01-11T13:15:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=ea9e07a3e25a687198f6fcda81daff77cf099909'/>
<id>urn:sha1:ea9e07a3e25a687198f6fcda81daff77cf099909</id>
<content type='text'>
shadow 4.14.x adds a number of libraries it dynamically links with
(md, bsd, attr). This causes troubles in setscene tasks where
shadow executables are used (such as useradd), as pulling in
the needed dynamic libraries needs unpleasant special-casing.

(From OE-Core rev: 495ff95eae14a91c94187f78a0b30c7957c9b168)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: update 4.13 -&gt; 4.14.2</title>
<updated>2024-01-12T11:54:05+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2024-01-11T13:15:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=405cc80b6b1b55c6aacd671024e83ca8eaa2920d'/>
<id>urn:sha1:405cc80b6b1b55c6aacd671024e83ca8eaa2920d</id>
<content type='text'>
License-Update: formatting, spdx conversion

Drop:
0001-Disable-use-of-syslog-for-sysroot.patch
(issue fixed upstream)

0001-Fix-can-not-print-full-login.patch
0001-Overhaul-valid_field.patch
CVE-2023-29383.patch
(backports)

libbsd is a new native dependency, as otherwise glibc &gt;= 2.38
is needed.

A similar fix is added to musl in order to define non-standard __BEGIN_DECLS/__END_DECLS.

(From OE-Core rev: e85069acf304fe0b68583cf79fe3ec4f775dca68)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: Fix for CVE-2023-4641</title>
<updated>2023-12-04T11:23:37+00:00</updated>
<author>
<name>Xiangyu Chen</name>
<email>xiangyu.chen@windriver.com</email>
</author>
<published>2023-11-30T09:27:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=377078dd943ad34639300fa1263b61e589fb594a'/>
<id>urn:sha1:377078dd943ad34639300fa1263b61e589fb594a</id>
<content type='text'>
shadow-utils: possible password leak during passwd(1) change

CVE: CVE-2023-4641

Upstream-Status: Backport
[https://github.com/shadow-maint/shadow/commit/65c88a43a23c2391dcc90c0abda3e839e9c57904]

(From OE-Core rev: 7942df17d9dfcf690106b8b86506d496e6251327)

Signed-off-by: Xiangyu Chen &lt;xiangyu.chen@windriver.com&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: remove dependency on pam-plugin-lastlog</title>
<updated>2023-06-27T15:23:40+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2023-06-25T21:22:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=45ff515d34a6647f1d75df0224b82a853a0f1a78'/>
<id>urn:sha1:45ff515d34a6647f1d75df0224b82a853a0f1a78</id>
<content type='text'>
This item has been deprecated in pam 1.5.3 and is no longer
built by default:
https://github.com/linux-pam/linux-pam/blob/master/NEWS

(From OE-Core rev: 04f3c3e335bf5e7c3a12ccc97fda9a8c214135d0)

Signed-off-by: Alexander Kanavin &lt;alex@linutronix.de&gt;
Signed-off-by: Alexandre Belloni &lt;alexandre.belloni@bootlin.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>Revert "python3/ruby/shadow: Revert add libxcrypt-native dependency"</title>
<updated>2023-05-29T12:32:55+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2023-05-29T12:31:14+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=7412af2d39673ba34880e96fd54a2ed39aa82c14'/>
<id>urn:sha1:7412af2d39673ba34880e96fd54a2ed39aa82c14</id>
<content type='text'>
This reverts commit c6198e1b1c3e3a3413b6ff9f014b40114f1850db.
This reverts commit 167c2c9f15c1bfe401c0512e420a76fa1379c012.
This reverts commit 65532fc751dc00e5568e256166f7b259d3a3c06c.

The dependencies should not be a -native in the target case. Revert
these whilst the proper patch is worked out.

(From OE-Core rev: 54eccb76eb8ba2086a56a30dfbb8aba06b02865a)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
