Request 765745 (accepted)

This request supersedes: request 764969 (Show diff)

Overview

Request 765745 accepted

- Set 0755 for chpasswd, groupadd, groupdel, groupmod, newusers,
useradd, userdel, usermod explicitly.

- bsc#1160729: Make valid shell check only a warning
* Add shadow-4.8-shell-check.patch

- Update to 4.8:
* Initial optional bcrypt support.
* Make build/install of 'su' optional.
* Fix for vipw not resuming correctly when suspended
* Sync password field descriptions in manpages
* Check for valid shell argument in useradd
* Allow translation of new strings through POTFILES.in
* Migrate to itstool for translations
* Migrate to new SELinux api
* Support --enable-vendordir
* pwck: Only check homedir if set and not a system user
* Support nonstandard usernames
* sget{pw,gr}ent: check for data at EOL
* Add YYY-MM-DD support in chage
* Fix failing chmod calls for suidubins
* Fix --sbindir and --bindir for binary installations
* Fix LASTLOG_UID_MAX in login.defs
* Fix configure error with dash
- Remove because upstreamed:
* libeconf.patch
* shadow-usermod-variable.patch
- Rebase:
* shadow-login_defs-unused-by-pam.patch
* chkname-regex.patch

Created by jubalh almost 5 years ago
In state accepted
Supersedes 764969

Submit shadow

Comments for request 765745 0
Comments for request 764969 2

Dominique Leuenberger (dimstar) - almost 5 years ago

reviewer

[  120s] shadow.x86_64: E: permissions-file-setuid-bit (Badness: 10000) /usr/sbin/chpasswd is packaged with setuid/setgid bits (04755)
[  120s] shadow.x86_64: E: permissions-file-setuid-bit (Badness: 10000) /usr/sbin/groupadd is packaged with setuid/setgid bits (04755)
[  120s] shadow.x86_64: E: permissions-file-setuid-bit (Badness: 10000) /usr/sbin/groupdel is packaged with setuid/setgid bits (04755)
[  120s] shadow.x86_64: E: permissions-file-setuid-bit (Badness: 10000) /usr/sbin/groupmod is packaged with setuid/setgid bits (04755)
[  120s] shadow.x86_64: E: permissions-file-setuid-bit (Badness: 10000) /usr/sbin/newusers is packaged with setuid/setgid bits (04755)
[  120s] shadow.x86_64: E: permissions-file-setuid-bit (Badness: 10000) /usr/sbin/useradd is packaged with setuid/setgid bits (04755)
[  120s] shadow.x86_64: E: permissions-file-setuid-bit (Badness: 10000) /usr/sbin/userdel is packaged with setuid/setgid bits (04755)
[  120s] shadow.x86_64: E: permissions-file-setuid-bit (Badness: 10000) /usr/sbin/usermod is packaged with setuid/setgid bits (04755)

Please link-up with sec team about that