<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/poky.git/meta/recipes-extended/shadow, branch hardknott-next</title>
<subtitle>Mirror of git.yoctoproject.org/poky</subtitle>
<id>https://git.enea.com/cgit/linux/poky.git/atom?h=hardknott-next</id>
<link rel='self' href='https://git.enea.com/cgit/linux/poky.git/atom?h=hardknott-next'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/'/>
<updated>2021-03-06T22:39:04+00:00</updated>
<entry>
<title>meta/recipes-extended: Add HOMEPAGE / DESCRIPTION</title>
<updated>2021-03-06T22:39:04+00:00</updated>
<author>
<name>Dorinda</name>
<email>dorindabassey@gmail.com</email>
</author>
<published>2021-03-03T02:01:52+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=76e7ccfc306531b57fe88f1c37dc92d93af49b18'/>
<id>urn:sha1:76e7ccfc306531b57fe88f1c37dc92d93af49b18</id>
<content type='text'>
Added HOMEPAGE and DESCRIPTION for recipes with missing decriptions or homepage

[YOCTO #13471]

(From OE-Core rev: cc6c7af900ae0196a62b7fa1375c55bbcd8e68b4)

Signed-off-by: Dorinda Bassey &lt;dorindabassey@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: whitelist CVE-2013-4235</title>
<updated>2021-03-06T22:39:04+00:00</updated>
<author>
<name>Purushottam Choudhary</name>
<email>Purushottam.Choudhary@kpit.com</email>
</author>
<published>2021-03-03T10:50:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=cc300fb849e8f291bf6401e0b8d6f58e19769f9a'/>
<id>urn:sha1:cc300fb849e8f291bf6401e0b8d6f58e19769f9a</id>
<content type='text'>
This CVE is about TOCTOU (time-of-check time-of-use)
race condition when copying and removing directory trees
which had very low severity problem and marked as closed
and won't fix. Therefore whitelisted CVE-2013-4235.
Master, gatesgarth and dunfell all have shadow version 4.81.
Hence, this is applicable for master, gatesgarth and dunfell.
Link: https://bugzilla.redhat.com/show_bug.cgi?id=884658

(From OE-Core rev: b1c6cd87bee6b019619dc5728fd6c36bc87ed696)

Signed-off-by: Sana Kazi &lt;Sana.Kazi@kpit.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: Remove lastlog pam plugin on musl system</title>
<updated>2021-01-03T08:58:26+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2021-01-02T20:25:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=e698e66dd80769d4ed99e9d7ccbc950beeef3b2a'/>
<id>urn:sha1:e698e66dd80769d4ed99e9d7ccbc950beeef3b2a</id>
<content type='text'>
lastlog needs logwtmp which musl does not provide

(From OE-Core rev: f2b826fe5384dde4aa52ce862cd3098acb4feea2)

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>libtools-cross/shadow-sysroot: Use nopackages inherit</title>
<updated>2020-10-06T22:14:25+00:00</updated>
<author>
<name>Richard Purdie</name>
<email>richard.purdie@linuxfoundation.org</email>
</author>
<published>2020-10-01T15:50:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=ea79ef5897aa6b074ba2600f3c5e7c0f9ae8a472'/>
<id>urn:sha1:ea79ef5897aa6b074ba2600f3c5e7c0f9ae8a472</id>
<content type='text'>
When testing pseudo changes I realised these recipes have packaging tasks
but don't generate packages. Drop the packages tasks for cleanliness.

(From OE-Core rev: ef9c11797b5d626bdb40b4509d8b2b0d461ff9ea)

Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow-sysroot: drop unused SRC_URI checksums</title>
<updated>2020-06-23T11:31:02+00:00</updated>
<author>
<name>Paul Eggleton</name>
<email>paul.eggleton@linux.microsoft.com</email>
</author>
<published>2020-06-15T02:27:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=6f5a85b1a03f99513c05a5667dac008db6810c8f'/>
<id>urn:sha1:6f5a85b1a03f99513c05a5667dac008db6810c8f</id>
<content type='text'>
This recipe only fetches local files, so there's no need for a checksum.
These have been present for some time and nobody noticed.

(From OE-Core rev: 100bbc264cb54275ed2912d96f1fea9f6fd41fbf)

Signed-off-by: Paul Eggleton &lt;paul.eggleton@linux.microsoft.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: upgrade 4.8 -&gt; 4.8.1</title>
<updated>2020-02-21T17:48:09+00:00</updated>
<author>
<name>Wang Mingyu</name>
<email>wangmy@cn.fujitsu.com</email>
</author>
<published>2020-02-21T10:09:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4e51659ff4eeb59349a931e7844f25a55c63f03e'/>
<id>urn:sha1:4e51659ff4eeb59349a931e7844f25a55c63f03e</id>
<content type='text'>
0001-Do-not-check-for-validity-of-shell-executable.patch
CVE-2019-19882.patch
Removed since they are included in 4.8.1.

(From OE-Core rev: de9cceb13e264434eb0b8393c3b0c0217b8d505e)

Signed-off-by: Wang Mingyu &lt;wangmy@cn.fujitsu.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: Security Advisory - shadow - CVE-2019-19882</title>
<updated>2020-01-03T22:35:48+00:00</updated>
<author>
<name>Li Zhou</name>
<email>li.zhou@windriver.com</email>
</author>
<published>2020-01-03T05:58:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=b0af33c7c5256d3e671633cab962acda8c58dead'/>
<id>urn:sha1:b0af33c7c5256d3e671633cab962acda8c58dead</id>
<content type='text'>
Backport patch from &lt;https://github.com/shadow-maint/shadow/pull/199/
commits/66b7bc0dcfda12d7f58eba993bd02872cae1d713&gt; to solve
CVE-2019-19882.

(From OE-Core rev: a0de64cab692562d4bbd64f8bdcaa3fc6bc694bb)

Signed-off-by: Li Zhou &lt;li.zhou@windriver.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: update 4.6 -&gt; 4.8</title>
<updated>2019-12-28T23:25:42+00:00</updated>
<author>
<name>Alexander Kanavin</name>
<email>alex.kanavin@gmail.com</email>
</author>
<published>2019-12-04T16:56:00+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=af2b2c4d9ff44b5951ef17dd0fba32021b232a27'/>
<id>urn:sha1:af2b2c4d9ff44b5951ef17dd0fba32021b232a27</id>
<content type='text'>
Drop two backports.

Remove 0001-useradd.c-create-parent-directories-when-necessary.patch
as upstream has addressed the issue:
https://github.com/shadow-maint/shadow/commit/b3b6d9d77c1d18b98670b97157777bb74092cd69

Rebase the rest of the paches.

Add a patch to remove the check for validity of login shells
which does not work in our environment.

Disable sssd cache support as that needs Fedora-specific tooling.

(From OE-Core rev: fee6c063dfb80425caa7080083c61d1544d929c6)

Signed-off-by: Alexander Kanavin &lt;alex.kanavin@gmail.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: update homepage and bugtracker</title>
<updated>2019-10-15T13:16:11+00:00</updated>
<author>
<name>Maxime Roussin-Bélanger</name>
<email>maxime.roussinbelanger@gmail.com</email>
</author>
<published>2019-10-11T04:13:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=4c0be0ec318523071530b0a6dd0daab256249175'/>
<id>urn:sha1:4c0be0ec318523071530b0a6dd0daab256249175</id>
<content type='text'>
The previous homepage and issue tracker is no longer available.

Remove some trailing whitespace

(From OE-Core rev: 1c60c5744b02c5c4eefb240923db5c4cd7959606)

Signed-off-by: Maxime Roussin-Bélanger &lt;maxime.roussinbelanger@gmail.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
<entry>
<title>shadow: use relaxed usernames for all</title>
<updated>2019-10-02T09:09:47+00:00</updated>
<author>
<name>Li Zhou</name>
<email>li.zhou@windriver.com</email>
</author>
<published>2019-09-19T06:15:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/poky.git/commit/?id=b3e0775fcf6c23af0812d2e349fa708a62dae5bc'/>
<id>urn:sha1:b3e0775fcf6c23af0812d2e349fa708a62dae5bc</id>
<content type='text'>
The previous commit &lt;shadow: use relaxed usernames&gt; works only for
target. When test with configuration:
INHERIT += 'extrausers'
EXTRA_USERS_PARAMS += "useradd -p '' aBcD; "
and run "bitbake core-image-minimal", error occurs:
NOTE: core-image-minimal: Performing useradd with [
-R .../build/tmp-glibc/work/qemux86_64-wrs-linux/core-image-minimal/1.0-r0/rootfs -p '' aBcD]
useradd: invalid user name 'aBcD'

Here move the patch for using relaxed usernames from class_target to
the source code for all.

(From OE-Core rev: 8adf98e63fefeaf2c841a038a4497f9845bc7b04)

Signed-off-by: Li Zhou &lt;li.zhou@windriver.com&gt;
Signed-off-by: Ross Burton &lt;ross.burton@intel.com&gt;
Signed-off-by: Richard Purdie &lt;richard.purdie@linuxfoundation.org&gt;
</content>
</entry>
</feed>
