Commit Graph

353 Commits

Author SHA1 Message Date
Iker Pedrosa
7e58402a2a tests: add CI user creation to simulate cloud VM environments
Create a 'ci' user to match upstream behaviour. This simulates cloud VM
environments where ID 1000 is already taken. This ensures that test
users start the ID assignment at 1001, making container tests consistent
with cloud CI environments.

Link: <https://github.com/shadow-maint/shadow/pull/1615>
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2026-05-15 10:29:35 +02:00
Iker Pedrosa
895c2a92c0 Various fixes
- groupmod.c: delete gr_free_members(&grp) to avoid double free
- subordinateio.c: list_owner_ranges(): Fix duplicate range when
  username matches ID

Resolves: RHEL-135902
Resolves: RHEL-114226
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2026-05-15 09:34:25 +02:00
aborah-sudo
7e2553d035 Point the new tests and replace the old ones
Replace https://github.com/aborah-sudo/shadow-cs.git with https://github.com/shadow-maint/shadow
2026-04-22 12:24:20 +00:00
Iker Pedrosa
ac982f2f05 passwd.c: lock, open, close and unlock passwd database
Resolves: RHEL-151055
Resolves: RHEL-150955
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2026-02-23 16:08:11 +01:00
Iker Pedrosa
8d1821d0ed passwd.c: add audit messages for passwd
Resolves: RHEL-141919
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2026-02-13 16:08:42 +01:00
Iker Pedrosa
0e718c2d05 groupmod.c: --help wfix
Resolves: RHEL-105779
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2025-11-27 10:46:44 +01:00
Iker Pedrosa
32f719ad89 spec: fix missing references to /usr/sbin
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2025-11-27 10:24:15 +01:00
Iker Pedrosa
4e39b89c14 Revert "login.defs: disable default subid assignment"
This reverts commit c6102cdd46.

Resolves: RHEL-105943
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2025-08-05 13:02:27 +02:00
Iker Pedrosa
c6102cdd46 login.defs: disable default subid assignment
Resolves: RHEL-104546 and CVE-2024-56433
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2025-07-21 10:49:22 +02:00
Iker Pedrosa
5cf0fed2af vipw: restore the original terminal pgrp after editing
Resolves: RHEL-93172

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2025-05-26 12:10:33 +02:00
Iker Pedrosa
aa026f4313 - Disable nscd. Resolves: RHEL-56355
- useradd: fix write_full() return value

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-11-04 09:44:53 +01:00
Troy Dawson
b397976c6c Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
2024-10-29 09:14:08 -07:00
Troy Dawson
d56d4183f2 Bump release for June 2024 mass rebuild 2024-06-24 09:24:25 -07:00
Iker Pedrosa
693d5061e5 Fix static analyzer detected issues
Resolves: RHEL-35383

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-06-18 12:10:46 +02:00
Iker Pedrosa
fd50fe1eda - Rebase to version 4.15.0
- getdef: avoid spurious error messages about unknown configuration options

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-04-03 10:11:50 +02:00
Jakub Vavra
875366386d Add gating for c10s. 2024-04-02 13:26:57 +02:00
Iker Pedrosa
07607754df Build linking libpam
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-02-12 15:57:19 +01:00
Iker Pedrosa
91360f25a8 passwd: Provide binary from this package
Provide binary from this package. Enable libpam and disable
account-tools-setuid. Provide passwd PAM service file. Finally, provide
--stdin option in passwd.

Resolves: #2233275

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-02-06 17:16:37 +01:00
Iker Pedrosa
1820858d26 Disable SSSD support
Resolves: #2253182

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2024-01-29 10:10:18 +01:00
Fedora Release Engineering
d5da1a5785 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-27 02:49:28 +00:00
Iker Pedrosa
b2b4416387 useradd: Set proper SELinux labels for def_usrtemplate
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-10-03 09:59:47 +02:00
Iker Pedrosa
799aaaa508 Rebase to version 4.14.0
Resolves: #2229000

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-08-16 10:55:53 +02:00
Petr Lautrbach
5cab3439c8 Use %autosetup instead of obsoleted %patchX macros
Also use -S git instead of suffixes, see

https://rpm-software-management.github.io/rpm/manual/autosetup.html

Fixes:
RPM build warnings:
    %patchN is deprecated (9 usages found), use %patch N (or %patch -P N)

Signed-off-by: Petr Lautrbach <lautrbach@redhat.com>
2023-08-02 16:35:52 +02:00
Fedora Release Engineering
874ece9028 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-22 01:31:45 +00:00
Yaakov Selkowitz
14b1f3518c Remove unused libbsd-devel dependency
libbsd is unwanted in RHEL, but the resulting binaries show no
dependency on libbsd anyway.
2023-06-06 19:31:04 -04:00
Iker Pedrosa
fd05b1cb1a Add build dependencies
Add libbsd-devel and libeconf-devel as build dependencies

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-03-06 12:05:17 +01:00
Iker Pedrosa
c0c2ea7769 newuidmap and newgidmap: support passing pid as fd
Resolves: #2174752

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2023-03-02 14:36:39 +01:00
Fedora Release Engineering
f7089c062f Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-21 03:07:17 +00:00
Iker Pedrosa
8779239933 Change SUB_UID_MIN and SUB_GID_MIN to 524288
Resolves: #2144558

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-11-23 15:57:56 +01:00
Florian Weimer
bb5dc8ec04 Fix gshadow configure check (switching to glibc implementation)
Related to:

  <https://fedoraproject.org/wiki/Changes/PortingToModernC>
  <https://fedoraproject.org/wiki/Toolchain/PortingToModernC>
2022-11-21 11:56:22 +01:00
Iker Pedrosa
d3e12503af - Rebase to version 4.13
- SPDX license migration

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-11-09 15:19:52 +01:00
Iker Pedrosa
47d965b5dc chage: Fix regression in print_date
Resolves: #2129336

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-10-05 13:04:29 +02:00
Iker Pedrosa
d491f14619 useradd: Do not reset non-existent data in {last,fail}log
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-09-09 15:04:49 +02:00
Iker Pedrosa
cd421e05ae Rebase to version 4.12.3
Resolves: #2117809

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-08-23 09:25:47 +02:00
Iker Pedrosa
97547bc00a useradd: modify check ID range for system users
Resolves: #2093692

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-08-01 11:13:56 +02:00
Fedora Release Engineering
71c99ba5b1 Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-23 08:29:04 +00:00
Iker Pedrosa
5ba2bc90cc Fix explicit subid requirement for subid-devel
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-02-10 17:46:56 +01:00
Iker Pedrosa
a986f4a036 Add forgotten sources
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-01-26 09:39:55 +01:00
Iker Pedrosa
2b851f7e96 - Rebase to version 4.11.1 (#2034038)
- Fix release sources
- Add explicit subid requirement for subid-devel

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-01-26 09:30:07 +01:00
Fedora Release Engineering
bfa562aaf2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-22 00:46:50 +00:00
Iker Pedrosa
77cc4a7c14 - nss: get shadow_logfd with log_get_logfd() (#2038811)
- lib: make shadow_logfd and Prog not extern
- lib: rename Prog to shadow_progname
- lib: provide default values for shadow_progname
- libsubid: use log_set_progname in subid_init

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2022-01-17 10:00:50 +01:00
Iker Pedrosa
957f0eb09e - getsubids: provide system binary and man page (#1980780)
- pwck: fix segfault when calling fprintf() (#2021339)
- newgrp: fix segmentation fault (#2019553)
- groupdel: fix SIGSEGV when passwd does not exist (#1986111)

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-11-19 09:44:08 +01:00
Iker Pedrosa
a2d5d3dbda useradd: change SELinux labels for home files (#2022658)
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-11-12 15:47:43 +01:00
Iker Pedrosa
4a03ec740c useradd: revert fix memleak of grp (#2018697)
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-11-04 12:47:10 +01:00
Iker Pedrosa
11164c2c0a useradd: generate home and mail directories with selinux user attribute
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-10-27 12:02:57 +02:00
Iker Pedrosa
981bd7a093 - login.defs: include HMAC_CRYPTO_ALGO key
- Clean spec file: organize dependencies and move License location

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-09-23 09:48:39 +02:00
Iker Pedrosa
fbc8eba072 libmisc: fix default value in SHA_get_salt_rounds()
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-08-17 09:49:01 +02:00
Iker Pedrosa
3a32832856 useradd: avoid generating an empty subid range (#1990653)
Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-08-11 14:58:12 +02:00
Iker Pedrosa
94f04f9e71 Rebase to version 4.9
usermod: allow all group types with -G option (#1975327)
Clean spec file

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
2021-08-04 10:14:14 +02:00
Fedora Release Engineering
58090e11f1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-23 17:27:44 +00:00