rpms/shadow-utils
6
0
Fork 0
Code Issues Pull Requests Releases Activity

login.defs: disable default subid assignment

Browse Source 
Resolves: RHEL-104546 and CVE-2024-56433
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
This commit is contained in:
Iker Pedrosa 2025-07-21 10:36:50 +02:00
parent 5cf0fed2af
commit c6102cdd46
2 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
shadow-utils.login.defs
View File

@ -148,7 +148,7 @@ SYS_UID_MAX 999
# Extra per user uids # Extra per user uids
SUB_UID_MIN 524288 SUB_UID_MIN 524288
SUB_UID_MAX 600100000 SUB_UID_MAX 600100000
SUB_UID_COUNT 65536 SUB_UID_COUNT 0
# #
# Min/max values for automatic gid selection in groupadd(8) # Min/max values for automatic gid selection in groupadd(8)
@ -161,7 +161,7 @@ SYS_GID_MAX 999
# Extra per user group ids # Extra per user group ids
SUB_GID_MIN 524288 SUB_GID_MIN 524288
SUB_GID_MAX 600100000 SUB_GID_MAX 600100000
SUB_GID_COUNT 65536 SUB_GID_COUNT 0
# #
# Max number of login(1) retries if password is bad # Max number of login(1) retries if password is bad

6
shadow-utils.spec
View File

@ -1,7 +1,7 @@
Summary: Utilities for managing accounts and shadow password files Summary: Utilities for managing accounts and shadow password files
Name: shadow-utils Name: shadow-utils
Version: 4.15.0 Version: 4.15.0
Release: 6%{?dist} Release: 7%{?dist}
Epoch: 2 Epoch: 2
License: BSD-3-Clause AND GPL-2.0-or-later License: BSD-3-Clause AND GPL-2.0-or-later
URL: https://github.com/shadow-maint/shadow URL: https://github.com/shadow-maint/shadow
@ -282,6 +282,10 @@ rm -f $RPM_BUILD_ROOT/%{_libdir}/libsubid.a
%{_libdir}/libsubid.so %{_libdir}/libsubid.so
%changelog %changelog
* Mon Jul 21 2025 Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-7
- login.defs: disable default subid assignment.
Resolves: RHEL-104546 and CVE-2024-56433
* Mon May 26 2025 Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-6 * Mon May 26 2025 Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-6
- vipw: restore the original terminal pgrp after editing. Resolves: RHEL-93172 - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-93172