Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status
summaryrefslogtreecommitdiff
path: root/sys-apps/shadow
Commit message (Collapse)AuthorAgeFilesLines
...
* sys-apps/shadow: fix su blockerMike Gilbert2020-02-023-5/+5
| | | | | Package-Manager: Portage-2.3.86_p1, Repoman-2.3.20_p43 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* */*: Drop stable alpha keywordsMatt Turner2020-01-251-1/+1
| | | | Signed-off-by: Matt Turner <mattst88@gentoo.org>
* sys-apps/shadow: Removed oldLars Wendler2020-01-251-236/+0
| | | | | Package-Manager: Portage-2.3.85, Repoman-2.3.20 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Bump to version 4.8.1Lars Wendler2020-01-252-0/+233
| | | | | Package-Manager: Portage-2.3.85, Repoman-2.3.20 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Revbump to fix up PAM configurationMichael Weiser2020-01-192-0/+240
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | shadow includes a number of administrative account management binaries like useradd, chage and chpasswd, traditionally only useable by root. In shadow they can be compiled with PAM support and installed setuid. PAM configuration can then be used to delegate account management to users other than root. The previous config contained the pam_rootok module to provide default behaviour of allowing account management when called as root. But it also contained pam_permit which would allow everyone else to also do account management without any authentication. To close this loophole we remove pam_permit from the config. Also, chpasswd, chgpasswd and newusers are batch-mode mass-change tools meant for scripting. They only contain PAM support if configure flag --enable-account-tools-setuid is in effect and are then installed setuid root. They should use the same restrictive PAM configuration as their siblings. But with setuid user management tools and PAM support within them disabled by commit f569e607 we can stop installing the configuration files as well. chfn and chsh are intended to be called by the user as self-service tools. For this reason they're always installed setuid root and contain PAM support. They should be allowed to work but maybe not without some prior authentication to avoid attacks such as someone finding an unlocked session and using chfn to redirect phone calls intended for the user to himself. The existing passwd config seems perfect for that and is aptly named in that both tools change user information normally stored in /etc/passwd. groupmems is another user self-service tool. It allows the user to add people to their user-private group, allowing them trusted access to normally private files. It is not installed setuid like chfn and chsh but always contains PAM support. Upstream installs a locked down PAM config by default. Since default shell profiles on Gentoo do not change umask to 0002 when a private user group is in use, impact will only be to allow read access to those additional users by default. Since the idea of adding more users to the user *private* group is questionable, go with upstream's default of locking the PAM config down so that an admin not only needs to make the binary suid but also adjust the PAM config, in the process hopefully considering what they're doing. Bug: https://bugs.gentoo.org/702252 Closes: https://github.com/gentoo/gentoo/pull/14032 Reviewed-by: Mikle Kolyada <zlogene@gentoo.org> Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Revbump to no longer install binaries SUID-rootLars Wendler2019-12-171-2/+3
| | | | | | | Thanks-to: Michael Weiser <michael@weiser.dinsnail.net> Bug: https://bugs.gentoo.org/702252 Package-Manager: Portage-2.3.82, Repoman-2.3.20 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Minor ebuild adjustmentLars Wendler2019-12-021-1/+1
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow-4.8-r1: Revbump, install in /usr as well as /Patrick McLean2019-12-012-3/+25
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* sys-apps/shadow: Bump to version 4.8Lars Wendler2019-12-013-0/+230
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: eautoreconf requires sys-devel/gettextLars Wendler2019-11-201-1/+1
| | | | | | | Thanks-to: Arthur Zamarin <arthurzam+gentoo@gmail.com> Closes: https://bugs.gentoo.org/700750 Package-Manager: Portage-2.3.79, Repoman-2.3.18 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Removed oldLars Wendler2019-11-202-426/+0
| | | | | Package-Manager: Portage-2.3.79, Repoman-2.3.18 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Introduced "su" USE flagLars Wendler2019-11-193-0/+367
| | | | | | | | | | Moved passwd from /usr/bin to /bin (again) as it breaks at least one package that has passwd path hardcoded (net-misc/scponly) Thanks-to: fling <fling@member.fsf.org> Bug: https://bugs.gentoo.org/699930 Package-Manager: Portage-2.3.79, Repoman-2.3.18 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* Revert "sys-apps/shadow: Revbump to re-add split-usr"Lars Wendler2019-11-181-8/+1
| | | | | | This reverts commit 3e71cbd8a3a3b45fe6858e5837c2e7535ea3a158. Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Revbump to re-add split-usrLars Wendler2019-11-161-1/+8
| | | | | Package-Manager: Portage-2.3.79, Repoman-2.3.18 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: 4.7-r1: create /etc/sub{g,u}id, remove split-usrWilliam Hubbs2019-11-151-0/+212
| | | | | | Bug: https://bugs.gentoo.org/700062 Package-Manager: Portage-2.3.76, Repoman-2.3.16 Signed-off-by: William Hubbs <williamh@gentoo.org>
* sys-apps/shadow: Removed Debian's alioth HOMEPAGE URILars Wendler2019-10-282-2/+2
| | | | | | | Thanks-to: Wim Muskee <wimmuskee@gmail.com> Closes: https://bugs.gentoo.org/698710 Package-Manager: Portage-2.3.78, Repoman-2.3.17 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: migrate to sys-libs/pamMikle Kolyada2019-10-122-2/+2
| | | | | Package-Manager: Portage-2.3.76, Repoman-2.3.16 Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* sys-apps/shadow: add support for /usr mergeMatija Skala2019-07-192-10/+14
| | | | | | Closes: https://github.com/gentoo/gentoo/pull/12477 Signed-off-by: Matija Skala <mskala@gmx.com> Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* sys-apps/shadow: Bump to version 4.7Lars Wendler2019-06-172-0/+213
| | | | | Package-Manager: Portage-2.3.67, Repoman-2.3.14 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* sys-apps/shadow: Add ~riscv keywordMikle Kolyada2019-05-041-1/+1
| | | | | Signed-off-by: Mikle Kolyada <zlogene@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11
* */*: Remove pam-bugs@ from maintainersMichał Górny2019-03-281-5/+1
| | | | | Bug: https://bugs.gentoo.org/627640 Signed-off-by: Michał Górny <mgorny@gentoo.org>
* sys-apps/shadow: Drop unused inheritMikle Kolyada2019-01-181-2/+2
| | | | | Signed-off-by: Mikle Kolyada <zlogene@gentoo.org> Package-Manager: Portage-2.3.51, Repoman-2.3.11
* sys-apps/shadow: Ensure /bin is present before moving file into itSargun Dhillon2018-10-081-0/+1
| | | | | | | | | | | | | When building with a new prefix, sometimes the /bin directory does not exist at install time. Therefore, we need to create it before using it. You can recreate if you try to run: emerge --prefix=/test shadow Closes: https://github.com/gentoo/gentoo/pull/10107 Signed-off-by: Sargun Dhillon <sargun@sargun.me> Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* sys-apps/shadow: remove unused patchMichael Mair-Keimberger2018-05-241-180/+0
|
* sys-apps/shadow: Drop oldMikle Kolyada2018-05-233-422/+0
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* sys-apps/shadow: hppa/ppc64 stable wrt bug #647790Mikle Kolyada2018-05-231-1/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* sys-apps/shadow: mark 4.5/4.6 m68k/s390/sh stableMike Frysinger2018-05-212-2/+2
|
* sys-apps/shadow-4.6-r0: alpha stableTobias Klausmann2018-05-141-1/+1
| | | | Gentoo-Bug: http://bugs.gentoo.org/647790
* sys-apps/shadow: stable 4.6 for ppc, bug #647790Sergei Trofimovich2018-05-111-1/+1
| | | | | | Bug: https://bugs.gentoo.org/647790 Package-Manager: Portage-2.3.36, Repoman-2.3.9 RepoMan-Options: --include-arches="ppc"
* sys-apps/shadow: stable 4.6 for sparcRolf Eike Beer2018-05-081-1/+1
| | | | | | Bug: https://bugs.gentoo.org/647790 Package-Manager: Portage-2.3.24, Repoman-2.3.6 RepoMan-Options: --include-arches="sparc"
* sys-apps/shadow: arm stable wrt bug #647790Mikle Kolyada2018-05-051-1/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* sys-apps/shadow: x86 stable (bug #647790)Thomas Deutschmann2018-05-021-1/+1
| | | | Package-Manager: Portage-2.3.31, Repoman-2.3.9
* sys-apps/shadow-4.6: arm64 stable (bug #647790)Mart Raudsepp2018-05-011-1/+1
| | | | Package-Manager: Portage-2.3.28, Repoman-2.3.9
* sys-apps/shadow: amd64 stable wrt bug #647790Mikle Kolyada2018-05-011-1/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* sys-apps/shadow: stable 4.6 for ia64, bug #647790Sergei Trofimovich2018-05-011-1/+1
| | | | | | Bug: https://bugs.gentoo.org/647790 Package-Manager: Portage-2.3.31, Repoman-2.3.9 RepoMan-Options: --include-arches="ia64"
* sys-apps/shadow: Security bump to version 4.6Lars Wendler2018-04-302-0/+212
| | | | | | Bug: https://bugs.gentoo.org/647790 Bug: https://bugs.gentoo.org/635750 Package-Manager: Portage-2.3.31, Repoman-2.3.9
* sys-apps/shadow: remove unused patchesMichael Mair-Keimberger2018-04-124-170/+0
| | | | Closes: https://github.com/gentoo/gentoo/pull/7956
* sys-apps/shadow: drop vulnerableAaron Bauman2018-04-082-214/+0
| | | | | | Bug: https://bugs.gentoo.org/627044 Package-Manager: Portage-2.3.28, Repoman-2.3.9 Closes: https://github.com/gentoo/gentoo/pull/7882
* sys-apps/shadow-4.5: arm64 stable (bug #627044)Mart Raudsepp2018-03-051-1/+1
| | | | Package-Manager: Portage-2.3.19, Repoman-2.3.6
* sys-apps/shadow: EAPI-6 bump.Lars Wendler2018-02-171-30/+32
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* sys-apps/shadow: Fix CVE-2018-7169Michael Vetter2018-02-172-0/+390
| | | | | | | | | | Fix CVE-2018-7169 by applying upstream patch: https://github.com/shadow-maint/shadow/commit/fb28c99b8a66ff2605c5cb96abc0a4d975f92de0 Bug: https://bugs.gentoo.org/647790 Package-Manager: Portage-2.3.19, Repoman-2.3.6 Closes: https://github.com/gentoo/gentoo/pull/7203
* sys-apps/shadow: Remove linguas_* from IUSE.Ulrich Müller2018-01-062-6/+4
| | | | Package-Manager: Portage-2.3.19, Repoman-2.3.6
* sys-apps/shadow: set IUSE="+cracklib" default.Michael Orlitzky2017-12-282-2/+2
| | | | | Closes: https://bugs.gentoo.org/642570 Package-Manager: Portage-2.3.13, Repoman-2.3.3
* sys-apps: Update Manifest hashes.Ulrich Müller2017-12-091-2/+2
|
* sys-apps/shadow: stable 4.5 for sparc, bug #627044 (thanks to Rolf Eike Beer)Sergei Trofimovich2017-10-311-1/+1
| | | | | Package-Manager: Portage-2.3.13, Repoman-2.3.4 RepoMan-Options: --include-arches="sparc"
* sys-apps/shadow: stable 4.5 for hppa, bug #627044Sergei Trofimovich2017-10-131-1/+1
| | | | | Package-Manager: Portage-2.3.10, Repoman-2.3.3 RepoMan-Options: --include-arches="hppa"
* sys-apps/shadow: stable 4.5 for ppc, bug #627044Sergei Trofimovich2017-09-271-1/+1
| | | | | Package-Manager: Portage-2.3.10, Repoman-2.3.3 RepoMan-Options: --include-arches="ppc"
* sys-apps/shadow: stable 4.5 for ppc64, bug #627044Sergei Trofimovich2017-09-241-1/+1
| | | | | Package-Manager: Portage-2.3.10, Repoman-2.3.3 RepoMan-Options: --include-arches="ppc64"
* sys-apps/shadow-4.5: alpha stable, bug 627044Matt Turner2017-08-251-1/+1
|
* sys-apps/shadow: x86 stable (bug #627044)Thomas Deutschmann2017-08-181-1/+1
| | | | Package-Manager: Portage-2.3.5, Repoman-2.3.2