linux/poky.git/meta/recipes-extended/shadow/shadow.inc, branch yocto-4.0.29

shadow: Fix CVE-2023-4641

2023-09-30T19:43:59+00:00

shadow-utils: possible password leak during passwd(1) change (From OE-Core rev: 734a3e1fb5ee8ded3097a94c7ee8696518346166) Signed-off-by: Soumya Sambu Signed-off-by: Steve Sakoman

shadow: backport patch to fix CVE-2023-29383

2023-04-26T14:03:21+00:00

The fix of CVE-2023-29383.patch contains a bug that it rejects all characters that are not control ones, so backup another patch named "0001-Overhaul-valid_field.patch" from upstream to fix it. (From OE-Core rev: ab48ab23de6f6bb1f05689c97724140d4bef8faa) Signed-off-by: Xiangyu Chen Signed-off-by: Steve Sakoman

shadow: Avoid nss warning/error with musl

2022-09-03T12:09:49+00:00

The libnss configuration file is only installed when glibc is used. The inexistence of it on a musl-based rootfs, will make shadow complain about it: Failed opening /etc/nsswitch.conf This is because shadow will try to use nsswich when dealing with subordinate IDs and the message is just a warning as the tool will still generate them correctly in subuid/subgid files. We drop this log message for class native to avoid an error when rootfs logs are checked ('Failed' will match the regex bitbake is using to check for rootfs generation errors). (From OE-Core rev: e5ce33228858fcc12051548399c71ce10346bf5b) Signed-off-by: Andrei Gherzan Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

shadow: Enable subid support

2022-09-03T12:09:49+00:00

shadow utils are used when creating users at image creation time. The useradd/usermod tools will only try to add a default configuration for subid files if they exist. (From OE-Core rev: 5cdc9c1809ef169b8af7ce3085f316d1e68eb7ec) Signed-off-by: Andrei Gherzan Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

shadow: upgrade 4.10 -> 4.11.1

2022-01-20T11:57:29+00:00

License-Update: license clarified to BSD-3-Clause only (From OE-Core rev: 79201206b5f7867ad7ffd462705f34179b33c0d7) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

shadow: upgrade 4.9 -> 4.10

2022-01-05T17:18:15+00:00

0001-Fix-out-of-tree-builds-with-respect-to-libsubid-incl.patch 0001-libmisc-fix-default-value-in-SHA_get_salt_rounds.patch 0001-libsubid-link-to-PAM-libraries.patch removed since they're included in 4.10 License-Update: Delete the space at the end of the sentence. Changelog: ========== * libsubid fixes * Rename the test program list_subid_ranges to getsubids, write a manpage, so distros can ship it. (Iker Pedrosa) * Add libeconf dep for new*idmap * Allow all group types with usermod -G * Avoid useradd generating empty subid range * Handle NULL pw_passwd * Fix default value SHA_get_salt_rounds * Use https where possible in README * Update content and format of README * Translation updates * Switch from xml2po to itstool in 'make dist' * Fix double frees * Add LOG_INIT configurable to useradd * Add CREATE_MAIL_SPOOL documentation * Create a security.md * Fix su never being SIGKILLd when trapping TERM * Fix wrong SELinux labels in several possible cases * Fix missing chmod in chadowtb_move * Handle malformed hushlogins entries * Fix groupdel segv when passwd does not exist * Fix covscan-found newgrp segfault * Remove trailing slash on hoedir * Fix passwd -l message - it does not change expirey * Fix SIGCHLD handling bugs in su and vipw * Remove special case for "" in usermod * Implement usermod -rG to remove a specific group * call pam_end() after fork in child path for su and login * useradd: In absence of /etc/passwd, assume 0 == root * lib: check NULL before freeing data * Fix pwck segfault (From OE-Core rev: b7215993cf00f668d7e33b7fbc98fb4d8636edac) Signed-off-by: Zheng Ruoqin Signed-off-by: Richard Purdie

shadow: Use specific BSD license variant

2021-09-02T11:12:07+00:00

Make the license more accurate by specifying the specific variant of BSD license instead of the generic one. This helps with SPDX license attribution as "BSD" is not a valid SPDX license. (From OE-Core rev: 65e3b23e1b266653fd30c90222e953f7e37fba0c) Signed-off-by: Joshua Watt Signed-off-by: Richard Purdie

shadow: add /etc/default/useradd

2021-08-20T07:53:03+00:00

The shadow 4.9 stops shiping /etc/default/useradd[1] and uses built-in settings by default. Some settings are not consistent with previous shadow 4.8.1 in oe-core. e.g. The default shell is /bin/bash rather than /bin/sh. Per shadow 4.8.1 settings, add /etc/default/useradd back. [1] https://github.com/shadow-maint/shadow/commit/bbf4b79bc49fd1826eb41f6629669ef0b647267b (From OE-Core rev: 736d0b29c6246658a925ea9036ccfe6216d12837) Signed-off-by: Yi Zhao Signed-off-by: Richard Purdie

shadow: fix default value in SHA_get_salt_rounds()

2021-08-17T08:53:04+00:00

Backport a patch [1] to fix chpasswd, gpasswd and passwd "hang" for several minutes (10-20min) at 100% cpu usage though they finally terminate successfully. [1] https://github.com/shadow-maint/shadow/issues/393 (From OE-Core rev: ad8c62f988017e1e4da1f5ed7fb6f4a5ce44844e) Signed-off-by: Mingli Yu Signed-off-by: Richard Purdie

shadow: add PACKAGECONFIG for audit and selinux

2021-08-13T13:44:06+00:00

Add PACKAGECONFIG for audit and selinux rather than disable them directly. This is useful for selinux distro feature. (From OE-Core rev: 0a0c6cfc5a17ed442aad9e71e627e0fa39e60ead) Signed-off-by: Yi Zhao Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie