From 4e39b89c1483d18596447c80ba2cdaffa98bbc90 Mon Sep 17 00:00:00 2001 From: Iker Pedrosa Date: Tue, 5 Aug 2025 12:18:24 +0200 Subject: [PATCH] Revert "login.defs: disable default subid assignment" This reverts commit c6102cdd4646d5a89353d6261cc836c3947c9741. Resolves: RHEL-105943 Signed-off-by: Iker Pedrosa --- shadow-utils.login.defs | 4 ++-- shadow-utils.spec | 8 ++------ 2 files changed, 4 insertions(+), 8 deletions(-) diff --git a/shadow-utils.login.defs b/shadow-utils.login.defs index 1ba57d0..e84c7ab 100644 --- a/shadow-utils.login.defs +++ b/shadow-utils.login.defs @@ -148,7 +148,7 @@ SYS_UID_MAX 999 # Extra per user uids SUB_UID_MIN 524288 SUB_UID_MAX 600100000 -SUB_UID_COUNT 0 +SUB_UID_COUNT 65536 # # Min/max values for automatic gid selection in groupadd(8) @@ -161,7 +161,7 @@ SYS_GID_MAX 999 # Extra per user group ids SUB_GID_MIN 524288 SUB_GID_MAX 600100000 -SUB_GID_COUNT 0 +SUB_GID_COUNT 65536 # # Max number of login(1) retries if password is bad diff --git a/shadow-utils.spec b/shadow-utils.spec index 83612d7..187b323 100644 --- a/shadow-utils.spec +++ b/shadow-utils.spec @@ -1,7 +1,7 @@ Summary: Utilities for managing accounts and shadow password files Name: shadow-utils Version: 4.15.0 -Release: 7%{?dist} +Release: 8%{?dist} Epoch: 2 License: BSD-3-Clause AND GPL-2.0-or-later URL: https://github.com/shadow-maint/shadow @@ -282,11 +282,7 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/libsubid.a %{_libdir}/libsubid.so %changelog -* Mon Jul 21 2025 Iker Pedrosa - 2:4.15.0-7 -- login.defs: disable default subid assignment. - Resolves: RHEL-104546 and CVE-2024-56433 - -* Mon May 26 2025 Iker Pedrosa - 2:4.15.0-6 +* Mon May 26 2025 Iker Pedrosa - 2:4.15.0-8 - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-93172 * Mon Nov 4 2024 Iker Pedrosa - 2:4.15.0-5