RHEL 9.0.0 Alpha bootstrap

The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/sssd#65e3d07e6456a10b607f4b72e040e8fab1d09fbd

.gitignore

@@ -0,0 +1,91 @@
+sssd-1.2.91.tar.gz
+/sssd-1.3.0.tar.gz
+/sssd-1.4.0.tar.gz
+/sssd-1.4.1.tar.gz
+/sssd-1.5.0.tar.gz
+/sssd-1.5.1.tar.gz
+/sssd-1.5.2.tar.gz
+/sssd-1.5.3.tar.gz
+/sssd-1.5.4.tar.gz
+/sssd-1.5.5.tar.gz
+/sssd-1.5.6.tar.gz
+/sssd-1.5.6.1.tar.gz
+/sssd-1.5.7.tar.gz
+/sssd-1.5.8.tar.gz
+/sssd-1.5.9.tar.gz
+/sssd-1.5.10.tar.gz
+/sssd-1.5.11.tar.gz
+/sssd-1.6.0.tar.gz
+/sssd-1.6.1.tar.gz
+/sssd-1.6.2.tar.gz
+/sssd-1.6.3.tar.gz
+/sssd-1.6.4.tar.gz
+/sssd-1.7.0.tar.gz
+/sssd-1.8.0beta1.tar.gz
+/sssd-1.8.0beta2.tar.gz
+/sssd-1.8.0beta3.tar.gz
+/sssd-1.8.0.tar.gz
+/sssd-1.8.1.tar.gz
+/sssd-1.8.2.tar.gz
+/sssd-1.8.3.tar.gz
+/sssd-1.9.0beta1.tar.gz
+/sssd-1.9.0beta2.tar.gz
+/sssd-1.9.0beta3.tar.gz
+/sssd-1.9.0beta4.tar.gz
+/sssd-1.9.0beta5.tar.gz
+/sssd-1.9.0beta6.tar.gz
+/sssd-1.9.0beta7.tar.gz
+/sssd-1.9.0rc1.tar.gz
+/sssd-1.9.0.tar.gz
+/sssd-1.9.1.tar.gz
+/sssd-1.9.2.tar.gz
+/sssd-1.9.3.tar.gz
+/sssd-1.9.4.tar.gz
+/sssd-1.10.0alpha1.tar.gz
+/sssd-1.10.0beta1.tar.gz
+/sssd-1.10.0beta2.tar.gz
+/sssd-1.10.0.tar.gz
+/sssd-1.10.1.tar.gz
+/sssd-1.11.0beta2.tar.gz
+/sssd-1.11.0.tar.gz
+/sssd-1.11.1.tar.gz
+/sssd-1.11.2.tar.gz
+/sssd-1.11.3.tar.gz
+/sssd-1.11.4.tar.gz
+/sssd-1.11.5.tar.gz
+/sssd-1.11.5.1.tar.gz
+/sssd-1.12.0beta1.tar.gz
+/sssd-1.12.0beta2.tar.gz
+/sssd-1.12.0.tar.gz
+/sssd-1.12.1.tar.gz
+/sssd-1.12.2.tar.gz
+/sssd-1.12.3.tar.gz
+/sssd-1.12.4.tar.gz
+/sssd-1.12.5.tar.gz
+/sssd-1.13.0alpha.tar.gz
+/sssd-1.13.0.tar.gz
+/sssd-1.13.1.tar.gz
+/sssd-1.13.2.tar.gz
+/sssd-1.13.3.tar.gz
+/sssd-1.13.4.tar.gz
+/sssd-1.14.0alpha.tar.gz
+/sssd-1.14.0beta1.tar.gz
+/sssd-1.14.0.tar.gz
+/sssd-1.14.1.tar.gz
+/sssd-1.14.2.tar.gz
+/sssd-1.15.0.tar.gz
+/sssd-1.15.1.tar.gz
+/sssd-1.15.2.tar.gz
+/sssd-1.15.3.tar.gz
+/sssd-1.16.0.tar.gz
+/sssd-1.16.1.tar.gz
+/sssd-1.16.2.tar.gz
+/sssd-2.0.0.tar.gz
+/sssd-2.1.0.tar.gz
+/sssd-2.2.0.tar.gz
+/sssd-2.2.1.tar.gz
+/sssd-2.2.2.tar.gz
+/sssd-2.2.3.tar.gz
+/sssd-2.3.0.tar.gz
+/sssd-2.3.1.tar.gz
+/sssd-2.4.0.tar.gz

0002-DEBUG-TESTS-Fix-warnings-format-not-a-string-literal.patch

@@ -0,0 +1,293 @@
+From cb9ad222358a84e2b2ea148c2950c2389f81de2c Mon Sep 17 00:00:00 2001
+From: Lukas Slebodnik <lslebodn@redhat.com>
+Date: Mon, 27 Jul 2020 04:01:19 +0000
+Subject: [PATCH] DEBUG-TESTS: Fix warnings format not a string literal and no
+ format arguments
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+e.g.
+src/tests/resolv-tests.c: In function ‘test_timeout’:
+src/tests/resolv-tests.c:942:5: error: format not a string literal and no format arguments [-Werror=format-security]
+  942 |     ck_leaks_pop(tmp_ctx);
+      |
+
+src/tests/debug-tests.c:413:9: error: format not a string literal and no format arguments [-Werror=format-security]
+  413 |         fail_if(result == DEBUG_TEST_NOK_TS, msg);
+      |         ^~~~~~~
+
+src/tests/debug-tests.c: In function ‘test_debug_is_notset_timestamp_microseconds_fn’:
+src/tests/debug-tests.c:603:13: error: format not a string literal and no format arguments [-Werror=format-security]
+  603 |             fail(error_msg);
+      |
+
+src/tests/debug-tests.c: In function ‘test_debug_is_set_false_fn’:
+src/tests/debug-tests.c:671:9: error: format not a string literal and no format arguments [-Werror=format-security]
+  671 |         fail_unless(result == 0, msg);
+      |
+---
+ src/tests/common_check.h |   2 +-
+ src/tests/debug-tests.c  | 128 +++++++++++++++------------------------
+ 2 files changed, 49 insertions(+), 81 deletions(-)
+
+diff --git a/src/tests/common_check.h b/src/tests/common_check.h
+index 51c3c3f49..ac92d0a74 100644
+--- a/src/tests/common_check.h
++++ b/src/tests/common_check.h
+@@ -31,6 +31,6 @@ void ck_leak_check_setup(void);
+ void ck_leak_check_teardown(void);
+ 
+ #define ck_leaks_push(ctx) check_leaks_push(ctx)
+-#define ck_leaks_pop(ctx) fail_unless(check_leaks_pop(ctx) == true, check_leaks_err_msg())
++#define ck_leaks_pop(ctx) fail_unless(check_leaks_pop(ctx) == true, "%s", check_leaks_err_msg())
+ 
+ #endif /* __TESTS_COMMON_CHECK_H__ */
+diff --git a/src/tests/debug-tests.c b/src/tests/debug-tests.c
+index 1e78f506e..092ccf684 100644
+--- a/src/tests/debug-tests.c
++++ b/src/tests/debug-tests.c
+@@ -55,10 +55,8 @@ START_TEST(test_debug_convert_old_level_old_format)
+     for (old_level = 0; old_level < N_ELEMENTS(levels); old_level++) {
+         expected_level |= levels[old_level];
+ 
+-        char *msg = NULL;
+-        msg = talloc_asprintf(NULL, "Invalid conversion of %d", old_level);
+-        fail_unless(debug_convert_old_level(old_level) == expected_level, msg);
+-        talloc_free(msg);
++        fail_unless(debug_convert_old_level(old_level) == expected_level,
++                    "Invalid conversion of %d", old_level);
+     }
+ }
+ END_TEST
+@@ -343,7 +341,6 @@ START_TEST(test_debug_is_set_single_no_timestamp)
+         SSSDBG_TRACE_ALL,
+         SSSDBG_TRACE_LDB
+     };
+-    char *error_msg;
+ 
+     debug_timestamps = 0;
+     debug_microseconds = 0;
+@@ -357,15 +354,13 @@ START_TEST(test_debug_is_set_single_no_timestamp)
+         errno = 0;
+         result = test_helper_debug_check_message(levels[i]);
+ 
+-        if (result == DEBUG_TEST_ERROR) {
+-            error_msg = strerror(errno);
+-            fail(error_msg);
+-        }
++        fail_if(result == DEBUG_TEST_ERROR,
++                "Expecting DEBUG_TEST_ERROR, got: %d, error: %s",
++                result, strerror(errno));
+ 
+-        char *msg = NULL;
+-        msg = talloc_asprintf(NULL, "Test of level %#.4x failed - message don't match", levels[i]);
+-        fail_unless(result == EOK, msg);
+-        talloc_free(msg);
++        fail_unless(result == EOK,
++                    "Test of level %#.4x failed - message don't match",
++                    levels[i]);
+     }
+ }
+ END_TEST
+@@ -387,7 +382,6 @@ START_TEST(test_debug_is_set_single_timestamp)
+         SSSDBG_TRACE_ALL,
+         SSSDBG_TRACE_LDB
+     };
+-    char *error_msg;
+ 
+     debug_timestamps = 1;
+     debug_microseconds = 0;
+@@ -402,20 +396,16 @@ START_TEST(test_debug_is_set_single_timestamp)
+         errno = 0;
+         result = test_helper_debug_check_message(levels[i]);
+ 
+-        if (result == DEBUG_TEST_ERROR) {
+-            error_msg = strerror(errno);
+-            fail(error_msg);
+-        }
+-
+-        char *msg = NULL;
++        fail_if(result == DEBUG_TEST_ERROR,
++                "Expecting DEBUG_TEST_ERROR, got: %d, error: %s",
++                result, strerror(errno));
+ 
+-        msg = talloc_asprintf(NULL, "Test of level %#.4x failed - invalid timestamp", levels[i]);
+-        fail_if(result == DEBUG_TEST_NOK_TS, msg);
+-        talloc_free(msg);
++        fail_if(result == DEBUG_TEST_NOK_TS,
++                "Test of level %#.4x failed - invalid timestamp", levels[i]);
+ 
+-        msg = talloc_asprintf(NULL, "Test of level %#.4x failed - message don't match", levels[i]);
+-        fail_unless(result == EOK, msg);
+-        talloc_free(msg);
++        fail_unless(result == EOK,
++                    "Test of level %#.4x failed - message don't match",
++                    levels[i]);
+     }
+ }
+ END_TEST
+@@ -437,7 +427,6 @@ START_TEST(test_debug_is_set_single_timestamp_microseconds)
+         SSSDBG_TRACE_ALL,
+         SSSDBG_TRACE_LDB
+     };
+-    char *error_msg;
+ 
+     debug_timestamps = 1;
+     debug_microseconds = 1;
+@@ -452,20 +441,16 @@ START_TEST(test_debug_is_set_single_timestamp_microseconds)
+         errno = 0;
+         result = test_helper_debug_check_message(levels[i]);
+ 
+-        if (result == DEBUG_TEST_ERROR) {
+-            error_msg = strerror(errno);
+-            fail(error_msg);
+-        }
+-
+-        char *msg = NULL;
++        fail_if(result == DEBUG_TEST_ERROR,
++                "Expecting DEBUG_TEST_ERROR, got: %d, error: %s",
++                result, strerror(errno));
+ 
+-        msg = talloc_asprintf(NULL, "Test of level %#.4x failed - invalid timestamp", levels[i]);
+-        fail_if(result == DEBUG_TEST_NOK_TS, msg);
+-        talloc_free(msg);
++        fail_if(result == DEBUG_TEST_NOK_TS,
++                "Test of level %#.4x failed - invalid timestamp", levels[i]);
+ 
+-        msg = talloc_asprintf(NULL, "Test of level %#.4x failed - message don't match", levels[i]);
+-        fail_unless(result == EOK, msg);
+-        talloc_free(msg);
++        fail_unless(result == EOK,
++                    "Test of level %#.4x failed - message don't match",
++                    levels[i]);
+     }
+ }
+ END_TEST
+@@ -488,7 +473,6 @@ START_TEST(test_debug_is_notset_no_timestamp)
+         SSSDBG_TRACE_ALL,
+         SSSDBG_TRACE_LDB
+     };
+-    char *error_msg;
+ 
+     debug_timestamps = 0;
+     debug_microseconds = 0;
+@@ -503,17 +487,13 @@ START_TEST(test_debug_is_notset_no_timestamp)
+         errno = 0;
+         result = test_helper_debug_is_empty_message(levels[i]);
+ 
+-        if (result == DEBUG_TEST_ERROR) {
+-            error_msg = strerror(errno);
+-            fail(error_msg);
+-        }
++        fail_if(result == DEBUG_TEST_ERROR,
++                "Expecting DEBUG_TEST_ERROR, got: %d, error: %s",
++                result, strerror(errno));
+ 
+-        char *msg = NULL;
+-        msg = talloc_asprintf(NULL,
+-                              "Test of level %#.4x failed - message has been written",
+-                              levels[i]);
+-        fail_unless(result == EOK, msg);
+-        talloc_free(msg);
++        fail_unless(result == EOK,
++                    "Test of level %#.4x failed - message has been written",
++                    levels[i]);
+     }
+ }
+ END_TEST
+@@ -536,7 +516,6 @@ START_TEST(test_debug_is_notset_timestamp)
+         SSSDBG_TRACE_ALL,
+         SSSDBG_TRACE_LDB
+     };
+-    char *error_msg;
+ 
+     debug_timestamps = 0;
+     debug_microseconds = 0;
+@@ -551,17 +530,13 @@ START_TEST(test_debug_is_notset_timestamp)
+         errno = 0;
+         result = test_helper_debug_is_empty_message(levels[i]);
+ 
+-        if (result == DEBUG_TEST_ERROR) {
+-            error_msg = strerror(errno);
+-            fail(error_msg);
+-        }
++        fail_if(result == DEBUG_TEST_ERROR,
++                "Expecting DEBUG_TEST_ERROR, got: %d, error: %s",
++                result, strerror(errno));
+ 
+-        char *msg = NULL;
+-        msg = talloc_asprintf(NULL,
+-                        "Test of level %#.4x failed - message has been written",
+-                        levels[i]);
+-        fail_unless(result == EOK, msg);
+-        talloc_free(msg);
++        fail_unless(result == EOK,
++                    "Test of level %#.4x failed - message has been written",
++                    levels[i]);
+     }
+ }
+ END_TEST
+@@ -584,7 +559,6 @@ START_TEST(test_debug_is_notset_timestamp_microseconds)
+         SSSDBG_TRACE_ALL,
+         SSSDBG_TRACE_LDB
+     };
+-    char *error_msg;
+ 
+     debug_timestamps = 0;
+     debug_microseconds = 1;
+@@ -598,17 +572,13 @@ START_TEST(test_debug_is_notset_timestamp_microseconds)
+         errno = 0;
+         result = test_helper_debug_is_empty_message(levels[i]);
+ 
+-        if (result == DEBUG_TEST_ERROR) {
+-            error_msg = strerror(errno);
+-            fail(error_msg);
+-        }
++        fail_if(result == DEBUG_TEST_ERROR,
++                "Expecting DEBUG_TEST_ERROR, got: %d, error: %s",
++                result, strerror(errno));
+ 
+-        char *msg = NULL;
+-        msg = talloc_asprintf(NULL,
+-                        "Test of level %#.4x failed - message has been written",
+-                        levels[i]);
+-        fail_unless(result == EOK, msg);
+-        talloc_free(msg);
++        fail_unless(result == EOK,
++                    "Test of level %#.4x failed - message has been written",
++                    levels[i]);
+     }
+ }
+ END_TEST
+@@ -635,10 +605,9 @@ START_TEST(test_debug_is_set_true)
+ 
+     for (i = 0; i < N_ELEMENTS(levels); i++) {
+         result = DEBUG_IS_SET(levels[i]);
+-        char *msg = NULL;
+-        msg = talloc_asprintf(NULL, "Test of level %#.4x failed - result is 0x%.4x", levels[i], result);
+-        fail_unless(result > 0, msg);
+-        talloc_free(msg);
++        fail_unless(result > 0,
++                    "Test of level %#.4x failed - result is 0x%.4x",
++                    levels[i], result);
+     }
+ }
+ END_TEST
+@@ -666,10 +635,9 @@ START_TEST(test_debug_is_set_false)
+         debug_level = all_set & ~levels[i];
+ 
+         result = DEBUG_IS_SET(levels[i]);
+-        char *msg = NULL;
+-        msg = talloc_asprintf(NULL, "Test of level %#.4x failed - result is 0x%.4x", levels[i], result);
+-        fail_unless(result == 0, msg);
+-        talloc_free(msg);
++        fail_unless(result == 0,
++                    "Test of level %#.4x failed - result is 0x%.4x",
++                    levels[i], result);
+     }
+ }
+ END_TEST
+-- 
+2.28.0.rc2
+

0502-SYSTEMD-Use-capabilities.patch

@@ -0,0 +1,25 @@
+From 565ef3ffcaaef69a768b6a341777c339217bbbab Mon Sep 17 00:00:00 2001
+From: Lukas Slebodnik <lslebodn@fedoraproject.org>
+Date: Mon, 12 Dec 2016 21:56:16 +0100
+Subject: [PATCH] SYSTEMD: Use capabilities
+
+copied from selinux policy
+---
+ src/sysv/systemd/sssd.service.in | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/src/sysv/systemd/sssd.service.in b/src/sysv/systemd/sssd.service.in
+index 0c515d34caaa3ea397c4c7e95eef0188df170840..252889dbb2b7b1e651966258e7b76eab38357e76 100644
+--- a/src/sysv/systemd/sssd.service.in
++++ b/src/sysv/systemd/sssd.service.in
+@@ -11,6 +11,7 @@ ExecStart=@sbindir@/sssd -i ${DEBUG_LOGGER}
+ Type=notify
+ NotifyAccess=main
+ PIDFile=@pidpath@/sssd.pid
++CapabilityBoundingSet=CAP_IPC_LOCK CAP_CHOWN CAP_DAC_READ_SEARCH CAP_KILL CAP_NET_ADMIN CAP_SYS_NICE CAP_FOWNER CAP_SETGID CAP_SETUID CAP_SYS_ADMIN CAP_SYS_RESOURCE CAP_BLOCK_SUSPEND
+ Restart=on-failure
+ 
+ [Install]
+-- 
+2.15.1
+

sources

@@ -0,0 +1 @@
+SHA512 (sssd-2.4.0.tar.gz) = d9a4b17665ce3a1ea51cfe2fdb53818ac1e265a33c61f657f61699ecc716e1244e45b5b628aeae6c54e601383084f3cac327cb3edd7bea80bca397b1fbe4ab72