linux/poky.git/meta/recipes-extended/shadow, branch zeus-next2

shadow: use relaxed usernames for all

2019-10-02T09:09:47+00:00

The previous commit works only for target. When test with configuration: INHERIT += 'extrausers' EXTRA_USERS_PARAMS += "useradd -p '' aBcD; " and run "bitbake core-image-minimal", error occurs: NOTE: core-image-minimal: Performing useradd with [ -R .../build/tmp-glibc/work/qemux86_64-wrs-linux/core-image-minimal/1.0-r0/rootfs -p '' aBcD] useradd: invalid user name 'aBcD' Here move the patch for using relaxed usernames from class_target to the source code for all. (From OE-Core rev: 8adf98e63fefeaf2c841a038a4497f9845bc7b04) Signed-off-by: Li Zhou Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

shadow: Fix BSD license file checksum

2019-08-21T20:52:59+00:00

BSD license files must include the copyright notice. (From OE-Core rev: b57f10c08bef1005b4bb195b84e39cab0e251420) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

shadow: musl now supports secure_getenv

2019-08-21T14:29:02+00:00

This fixed a potential security vulnerability on musl and made the patch obsolete. (From OE-Core rev: 30b6ae3084f63df437a4d6dd859bca674ca01e12) Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

shadow: fix configure error with dash

2019-06-19T11:46:43+00:00

A configure error occurs when /bin/sh -> dash: checking for is_selinux_enabled in -lselinux... yes checking for semanage_connect in -lsemanage... yes configure: 16322: test: yesyes: unexpected operator Use "=" instead of "==" since dash doesn't support the latter. (From OE-Core rev: a86da25d620aa9a2fd832ffe12816e7670b43633) Signed-off-by: Yi Zhao Signed-off-by: Richard Purdie

shadow: Backport last change reproducibility

2019-05-09T15:31:56+00:00

The third field in the /etc/shadow file (sp_lstchg) contains the date of the last password change expressed as the number of days since Jan 1, 1970. Backport the upstream changes to honour SOURCE_DATE_EPOCH for build reproducibility. (From OE-Core rev: 4ad2cf5054618f2dd14fe40dac9aede66f2c0dd3) Signed-off-by: Alex Kiernan Signed-off-by: Richard Purdie

shadow: drop inappropriate patch

2019-03-18T11:12:26+00:00

The 0001-useradd-copy-extended-attributes-of-home.patch (oe-core commit: eed66e85af5ca6bbdd80cc3d5cf8453e8d8880bc) introduced a runtime failure when enable SELinux. When enable SELinux, The directory /home/user will get the extended attributes of /etc/skel. However, the SELinux lable for /etc/skel is etc_t which is also copied to /home/user. It will cause the user can not write their home directory because the SELinux lable for /home/user should be user_home_dir_t. See discussion: http://lists.openembedded.org/pipermail/openembedded-core/2018-January/146039.html The solution at the moment is to drop this patch. (From OE-Core rev: 2a8b35226edde4cd49cb5ba68c5b47aa8379eca1) Signed-off-by: Yi Zhao Signed-off-by: Richard Purdie

default-distrovars: Drop DISTRO_FEATURES_LIBC

2019-02-28T13:21:54+00:00

After eglibc was merged into glibc, Kconfig support was also dropped so these libc features therefore are not effective anymore and can be removed (From OE-Core rev: c62b1cc06613a4cdddf53290e6203559f43fc62d) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

shadow: improve reproducibility by hard-coding shell path

2018-11-14T11:14:39+00:00

The shadow configure script tries really hard to detect the running shell to make sure it doesn't do unsupported calls. On my system the shell is detected as /bin/sh, while a build in an ubuntu docker it resolves to /bin/bash. And since the shell path is baked into the target binaries through config.h, the build becomes inreproducible. Fix reproducibility by hard-coding the shell to be /bin/sh (From OE-Core rev: 5e3e30446b6abd98d1d3e9bee818203a6a206634) Signed-off-by: Martin Hundebøll Signed-off-by: Richard Purdie

shadow: upgrade 4.2.1 -> 4.6

2018-07-30T11:44:35+00:00

The following patches are removed because problems have been fixed in this version. 0001-shadow-CVE-2017-12424 fix-installation-failure-with-subids-disabled.patch usermod-fix-compilation-failure-with-subids-disabled.patch CVE-2017-2616.patch check_size_of_uid_t_and_gid_t_using_AC_CHECK_SIZEOF.patch 0001-Do-not-read-login.defs-before-doing-chroot.patch The following patches are rebased. 0001-Disable-use-of-syslog-for-sysroot.patch 0001-useradd-copy-extended-attributes-of-home.patch 0001-useradd.c-create-parent-directories-when-necessary.patch allow-for-setting-password-in-clear-text.patch (From OE-Core rev: 79dd22729d5b8a2f2cf4294ff6b261c9d6ecd977) Signed-off-by: Chen Qi Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

shadow: fix CVE-2017-2616

2018-07-26T12:16:41+00:00

(From OE-Core rev: 94a1e2794df15f0f2cb62ae030cd81e6c0798b1f) Signed-off-by: Andrej Valek Signed-off-by: Ross Burton Signed-off-by: Richard Purdie