ICA: new{g,u}idmap (shadow) differ between first and second pass

[Bruce Dubbs]

Using objdump -T, it is found that on second pass, those programs may call three more subprograms: prctl, seteuid, and capset. capset is from libcap, so is not linked on first build because libcap is built after shadow

Solution Move libcap before shadow. Actually, it is logical to have attr, acl and libcap grouped.

Possible side effect None yet.

Question The use of capset is morelikely to be used by pam or systemd. In both cases, we rebuild shadow in blfs, so this problem (and actually the one described in #4632 disappears then. So, is it useful to cure this? OTOH, it seems innocuous.

[Pierre Labastie]

Fixed at r11812

[Bruce Dubbs]

Milestone renamed