From 34fb76751d88d6d9ae98cda57f96e8ff4dc03462 Mon Sep 17 00:00:00 2001 From: Iker Pedrosa Date: Tue, 5 Aug 2025 12:29:57 +0200 Subject: [PATCH] Revert "login.defs: disable default subid assignment." This reverts commit 725c221b69609ca358e9f508e94fe9ce1bb56c1d. Resolves: RHEL-105945 Signed-off-by: Iker Pedrosa --- shadow-utils.login.defs | 4 ++-- shadow-utils.spec | 8 ++------ 2 files changed, 4 insertions(+), 8 deletions(-) diff --git a/shadow-utils.login.defs b/shadow-utils.login.defs index 1dd8728..0875b63 100644 --- a/shadow-utils.login.defs +++ b/shadow-utils.login.defs @@ -149,7 +149,7 @@ SYS_UID_MAX 999 # Extra per user uids SUB_UID_MIN 100000 SUB_UID_MAX 600100000 -SUB_UID_COUNT 0 +SUB_UID_COUNT 65536 # # Min/max values for automatic gid selection in groupadd(8) @@ -162,7 +162,7 @@ SYS_GID_MAX 999 # Extra per user group ids SUB_GID_MIN 100000 SUB_GID_MAX 600100000 -SUB_GID_COUNT 0 +SUB_GID_COUNT 65536 # # Max number of login(1) retries if password is bad diff --git a/shadow-utils.spec b/shadow-utils.spec index c94343b..7c3addf 100644 --- a/shadow-utils.spec +++ b/shadow-utils.spec @@ -1,7 +1,7 @@ Summary: Utilities for managing accounts and shadow password files Name: shadow-utils Version: 4.9 -Release: 14%{?dist} +Release: 15%{?dist} Epoch: 2 License: BSD and GPLv2+ URL: https://github.com/shadow-maint/shadow @@ -353,11 +353,7 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/libsubid.la %{_libdir}/libsubid.so %changelog -* Mon Jul 21 2025 Iker Pedrosa - 2:4.9-14 -- login.defs: disable default subid assignment. - Resolves: RHEL-103765 and CVE-2024-56433 - -* Mon May 26 2025 Iker Pedrosa - 2:4.9-13 +* Mon May 26 2025 Iker Pedrosa - 2:4.9-15 - nss.c: shadow_logfd to stderr. Resolves: RHEL-83431 - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940