Changeset 922e013 for postlfs/security/shadow.xml

Timestamp:

01/01/2022 05:25:35 PM (2 years ago)

Author:

Bruce Dubbs <bdubbs@…>

Branches:

11.1, 11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

f9b7052

Parents:

c365a72

Message:

Package Updates.
Update to iso-codes-4.8.0.
Update to libgsf-1.14.48.
Update to shadow-4.10.

File:

• postlfs/security/shadow.xml (modified) (6 diffs)

postlfs/security/shadow.xml

@@ -7 +7 @@
   <!ENTITY shadow-download-http "https://github.com/shadow-maint/shadow/releases/download/v&shadow-version;/shadow-&shadow-version;.tar.xz">
   <!ENTITY shadow-download-ftp  " ">
-  <!ENTITY shadow-md5sum        "126924090caf72f3de7e9261fd4e10ac">
+  <!ENTITY shadow-md5sum        "3a7936a9d0834243816fe0977c3b956e">
   <!ENTITY shadow-size          "1.6 MB">
-  <!ENTITY shadow-buildsize     "40 MB">
-  <!ENTITY shadow-time          "0.3 SBU">
+  <!ENTITY shadow-buildsize     "38 MB">
+  <!ENTITY shadow-time          "0.2 SBU">
 ]>
 
@@ -77 +77 @@
     </itemizedlist>
 
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing="compact">
+      <listitem>
+        <para>
+          Required patch:
+          <ulink url="&patch-root;/shadow-&shadow-version;-useradd_segfault-1.patch"/>
+        </para>
+      </listitem>
+    </itemizedlist>
+
     <bridgehead renderas="sect3">Shadow Dependencies</bridgehead>
 
@@ -118 +128 @@
     </para>
 
-<screen><userinput>sed -i.orig '/$(LIBTCB)/i $(LIBPAM) \\' libsubid/Makefile.am &amp;&amp;
-sed -i "224s/rounds/min_rounds/"        libmisc/salt.c       &amp;&amp;
-
-autoreconf -fiv &amp;&amp;
-
-sed -i 's/groups$(EXEEXT) //' src/Makefile.in &amp;&amp;
+<screen><userinput>patch -Np1 -i ../shadow-4.10--useradd_segfault-1.patch &amp;&amp;
+
+sed -i "224s/rounds/min_rounds/" libmisc/salt.c        &amp;&amp;
+sed -i 's/groups$(EXEEXT) //' src/Makefile.in          &amp;&amp;
 
 find man -name Makefile.in -exec sed -i 's/groups\.1 / /'   {} \; &amp;&amp;
@@ -135 +143 @@
 
 ./configure --sysconfdir=/etc               \
-            --with-group-name-max-length=32 \
-            --without-su                    &amp;&amp;
+            --with-group-name-max-length=32 &amp;&amp;
 make</userinput></screen>
 
@@ -198 +205 @@
       when <application>Linux-PAM</application> is available.
     </para>
-
-    <!-- No longer needed as of 4.8
-    <para>
-      <command>mv -v /usr/bin/passwd /bin</command>: The
-      <command>passwd</command> program may be needed during times when the
-      <filename class='directory'>/usr</filename> filesystem is not mounted so
-      it is moved into the root partition.
-    </para>
-    -->
 
   </sect2>
@@ -419 +417 @@
 
 # End /etc/pam.d/passwd</literal>
+EOF</userinput></screen>
+      </sect4>
+
+      <sect4>
+        <title>'su'</title>
+
+<screen role="root"><userinput>cat &gt; /etc/pam.d/chage &lt;&lt; "EOF"
+<literal># Begin /etc/pam.d/su
+
+# always allow root
+auth      sufficient  pam_rootok.so
+
+# Allow users in the wheel group to execute su without a password
+# disabled by default
+#auth      sufficient  pam_wheel.so trust use_uid
+
+# include system auth settings
+auth      include     system-auth
+
+# limit su to users in the wheel group
+auth      required    pam_wheel.so use_uid
+
+# include system account settings
+account   include     system-account
+
+# Set default environment variables for the service user
+session   required    pam_env.so
+
+# include system session settings
+session   include     system-session
+
+# End /etc/pam.d/su</literal>
 EOF</userinput></screen>
       </sect4>