Blame SOURCES/shadow-4.3.1-manfix.patch

4fb1b2
Index: shadow-4.5/man/groupmems.8.xml
4fb1b2
===================================================================
4fb1b2
--- shadow-4.5.orig/man/groupmems.8.xml
4fb1b2
+++ shadow-4.5/man/groupmems.8.xml
4fb1b2
@@ -179,20 +179,10 @@
4fb1b2
   <refsect1 id='setup'>
4fb1b2
     <title>SETUP</title>
4fb1b2
     <para>
4fb1b2
-      The <command>groupmems</command> executable should be in mode
4fb1b2
-      <literal>2770</literal> as user <emphasis>root</emphasis> and in group
4fb1b2
-      <emphasis>groups</emphasis>. The system administrator can add users to
4fb1b2
-      group <emphasis>groups</emphasis> to allow or disallow them using the
4fb1b2
-      <command>groupmems</command> utility to manage their own group
4fb1b2
-      membership list.
4fb1b2
+      In this operating system the <command>groupmems</command> executable
4fb1b2
+      is not setuid and regular users cannot use it to manipulate
4fb1b2
+      the membership of their own group.
4fb1b2
     </para>
4fb1b2
-
4fb1b2
-    <programlisting>
4fb1b2
-	$ groupadd -r groups
4fb1b2
-	$ chmod 2770 groupmems
4fb1b2
-	$ chown root.groups groupmems
4fb1b2
-	$ groupmems -g groups -a gk4
4fb1b2
-    </programlisting>
4fb1b2
   </refsect1>
4fb1b2
 
4fb1b2
   <refsect1 id='configuration'>
4fb1b2
Index: shadow-4.5/man/chage.1.xml
4fb1b2
===================================================================
4fb1b2
--- shadow-4.5.orig/man/chage.1.xml
4fb1b2
+++ shadow-4.5/man/chage.1.xml
4fb1b2
@@ -102,6 +102,9 @@
4fb1b2
 	    Set the number of days since January 1st, 1970 when the password
4fb1b2
 	    was last changed. The date may also be expressed in the format
4fb1b2
 	    YYYY-MM-DD (or the format more commonly used in your area).
4fb1b2
+	    If the <replaceable>LAST_DAY</replaceable> is set to
4fb1b2
+	    <emphasis>0</emphasis> the user is forced to change his password
4fb1b2
+	    on the next log on.
4fb1b2
 	  </para>
4fb1b2
 	</listitem>
4fb1b2
       </varlistentry>
4fb1b2
@@ -119,6 +122,13 @@
4fb1b2
 	    system again.
4fb1b2
 	  </para>
4fb1b2
 	  <para>
4fb1b2
+	    For example the following can be used to set an account to expire
4fb1b2
+	    in 180 days:
4fb1b2
+	  </para>
4fb1b2
+	  <programlisting>
4fb1b2
+	    chage -E $(date -d +180days +%Y-%m-%d)
4fb1b2
+	  </programlisting>
4fb1b2
+	  <para>
4fb1b2
 	    Passing the number <emphasis remap='I'>-1</emphasis> as the
4fb1b2
 	    <replaceable>EXPIRE_DATE</replaceable> will remove an account
4fb1b2
 	    expiration date.
4fb1b2
Index: shadow-4.5/man/ja/man5/login.defs.5
4fb1b2
===================================================================
4fb1b2
--- shadow-4.5.orig/man/ja/man5/login.defs.5
4fb1b2
+++ shadow-4.5/man/ja/man5/login.defs.5
4fb1b2
@@ -147,10 +147,6 @@ PASS_MAX_DAYS, PASS_MIN_DAYS, PASS_WARN_
4fb1b2
 shadow パスワード機能のどのプログラムが
4fb1b2
 どのパラメータを使用するかを示したものである。
4fb1b2
 .na
4fb1b2
-.IP chfn 12
4fb1b2
-CHFN_AUTH CHFN_RESTRICT
4fb1b2
-.IP chsh 12
4fb1b2
-CHFN_AUTH
4fb1b2
 .IP groupadd 12
4fb1b2
 GID_MAX GID_MIN
4fb1b2
 .IP newusers 12
4fb1b2
Index: shadow-4.5/man/login.defs.5.xml
4fb1b2
===================================================================
4fb1b2
--- shadow-4.5.orig/man/login.defs.5.xml
4fb1b2
+++ shadow-4.5/man/login.defs.5.xml
4fb1b2
@@ -162,6 +162,17 @@
4fb1b2
       long numeric parameters is machine-dependent.
4fb1b2
     </para>
4fb1b2
 
4fb1b2
+    <para>
4fb1b2
+      Please note that the parameters in this configuration file control the
4fb1b2
+      behavior of the tools from the shadow-utils component. None of these
4fb1b2
+      tools uses the PAM mechanism, and the utilities that use PAM (such as the
4fb1b2
+      passwd command) should be configured elsewhere. The only values that
4fb1b2
+      affect PAM modules are <emphasis>ENCRYPT_METHOD</emphasis> and <emphasis>SHA_CRYPT_MAX_ROUNDS</emphasis>
4fb1b2
+      for pam_unix module, <emphasis>FAIL_DELAY</emphasis> for pam_faildelay module,
4fb1b2
+      and <emphasis>UMASK</emphasis> for pam_umask module. Refer to
4fb1b2
+      pam(8) for more information.
4fb1b2
+    </para>
4fb1b2
+
4fb1b2
     <para>The following configuration items are provided:</para>
4fb1b2
 
4fb1b2
     <variablelist remap='IP'>
4fb1b2
@@ -252,16 +263,6 @@
4fb1b2
 	</listitem>
4fb1b2
       </varlistentry>
4fb1b2
       <varlistentry>
4fb1b2
-	<term>chfn</term>
4fb1b2
-	<listitem>
4fb1b2
-	  <para>
4fb1b2
-	    <phrase condition="no_pam">CHFN_AUTH</phrase>
4fb1b2
-	    CHFN_RESTRICT
4fb1b2
-	    <phrase condition="no_pam">LOGIN_STRING</phrase>
4fb1b2
-	  </para>
4fb1b2
-	</listitem>
4fb1b2
-      </varlistentry>
4fb1b2
-      <varlistentry>
4fb1b2
 	<term>chgpasswd</term>
4fb1b2
 	<listitem>
4fb1b2
 	  <para>
4fb1b2
@@ -282,14 +283,6 @@
4fb1b2
 	  </para>
4fb1b2
 	</listitem>
4fb1b2
       </varlistentry>
4fb1b2
-      <varlistentry condition="no_pam">
4fb1b2
-	<term>chsh</term>
4fb1b2
-	<listitem>
4fb1b2
-	  <para>
4fb1b2
-	    CHSH_AUTH LOGIN_STRING
4fb1b2
-	  </para>
4fb1b2
-	</listitem>
4fb1b2
-      </varlistentry>
4fb1b2
       
4fb1b2
       
4fb1b2
       <varlistentry>
4fb1b2
@@ -350,34 +343,6 @@
4fb1b2
       </varlistentry>
4fb1b2
       
4fb1b2
       
4fb1b2
-      <varlistentry>
4fb1b2
-	<term>login</term>
4fb1b2
-	<listitem>
4fb1b2
-	  <para>
4fb1b2
-	    <phrase condition="no_pam">CONSOLE</phrase>
4fb1b2
-	    CONSOLE_GROUPS DEFAULT_HOME
4fb1b2
-	    <phrase condition="no_pam">ENV_HZ ENV_PATH ENV_SUPATH
4fb1b2
-	    ENV_TZ ENVIRON_FILE</phrase>
4fb1b2
-	    ERASECHAR FAIL_DELAY
4fb1b2
-	    <phrase condition="no_pam">FAILLOG_ENAB</phrase>
4fb1b2
-	    FAKE_SHELL
4fb1b2
-	    <phrase condition="no_pam">FTMP_FILE</phrase>
4fb1b2
-	    HUSHLOGIN_FILE
4fb1b2
-	    <phrase condition="no_pam">ISSUE_FILE</phrase>
4fb1b2
-	    KILLCHAR
4fb1b2
-	    <phrase condition="no_pam">LASTLOG_ENAB</phrase>
4fb1b2
-	    LOGIN_RETRIES
4fb1b2
-	    <phrase condition="no_pam">LOGIN_STRING</phrase>
4fb1b2
-	    LOGIN_TIMEOUT LOG_OK_LOGINS LOG_UNKFAIL_ENAB
4fb1b2
-	    <phrase condition="no_pam">MAIL_CHECK_ENAB MAIL_DIR MAIL_FILE
4fb1b2
-	    MOTD_FILE NOLOGINS_FILE PORTTIME_CHECKS_ENAB
4fb1b2
-	    QUOTAS_ENAB</phrase>
4fb1b2
-	    TTYGROUP TTYPERM TTYTYPE_FILE
4fb1b2
-	    <phrase condition="no_pam">ULIMIT UMASK</phrase>
4fb1b2
-	    USERGROUPS_ENAB
4fb1b2
-	  </para>
4fb1b2
-	</listitem>
4fb1b2
-      </varlistentry>
4fb1b2
       
4fb1b2
       <varlistentry>
4fb1b2
 	<term>newgrp / sg</term>
4fb1b2
@@ -405,17 +370,6 @@
4fb1b2
 	</listitem>
4fb1b2
       </varlistentry>
4fb1b2
       
4fb1b2
-      <varlistentry condition="no_pam">
4fb1b2
-	<term>passwd</term>
4fb1b2
-	<listitem>
4fb1b2
-	  <para>
4fb1b2
-	    ENCRYPT_METHOD MD5_CRYPT_ENAB OBSCURE_CHECKS_ENAB
4fb1b2
-	    PASS_ALWAYS_WARN PASS_CHANGE_TRIES PASS_MAX_LEN PASS_MIN_LEN
4fb1b2
-	    <phrase condition="sha_crypt">SHA_CRYPT_MAX_ROUNDS
4fb1b2
-	    SHA_CRYPT_MIN_ROUNDS</phrase>
4fb1b2
-	  </para>
4fb1b2
-	</listitem>
4fb1b2
-      </varlistentry>
4fb1b2
       <varlistentry>
4fb1b2
 	<term>pwck</term>
4fb1b2
 	<listitem>
4fb1b2
@@ -442,32 +396,6 @@
4fb1b2
 	  </para>
4fb1b2
 	</listitem>
4fb1b2
       </varlistentry>
4fb1b2
-      <varlistentry>
4fb1b2
-	<term>su</term>
4fb1b2
-	<listitem>
4fb1b2
-	  <para>
4fb1b2
-	    <phrase condition="no_pam">CONSOLE</phrase>
4fb1b2
-	    CONSOLE_GROUPS DEFAULT_HOME
4fb1b2
-	    <phrase condition="no_pam">ENV_HZ ENVIRON_FILE</phrase>
4fb1b2
-	    ENV_PATH ENV_SUPATH
4fb1b2
-	    <phrase condition="no_pam">ENV_TZ LOGIN_STRING MAIL_CHECK_ENAB
4fb1b2
-	    MAIL_DIR MAIL_FILE QUOTAS_ENAB</phrase>
4fb1b2
-	    SULOG_FILE SU_NAME
4fb1b2
-	    <phrase condition="no_pam">SU_WHEEL_ONLY</phrase>
4fb1b2
-	    SYSLOG_SU_ENAB
4fb1b2
-	    <phrase condition="no_pam">USERGROUPS_ENAB</phrase>
4fb1b2
-	  </para>
4fb1b2
-	</listitem>
4fb1b2
-      </varlistentry>
4fb1b2
-      <varlistentry>
4fb1b2
-	<term>sulogin</term>
4fb1b2
-	<listitem>
4fb1b2
-	  <para>
4fb1b2
-	    ENV_HZ
4fb1b2
-	    <phrase condition="no_pam">ENV_TZ</phrase>
4fb1b2
-	  </para>
4fb1b2
-	</listitem>
4fb1b2
-      </varlistentry>
4fb1b2
       <varlistentry>
4fb1b2
 	<term>useradd</term>
4fb1b2
 	<listitem>
4fb1b2
Index: shadow-4.5/man/shadow.5.xml
4fb1b2
===================================================================
4fb1b2
--- shadow-4.5.orig/man/shadow.5.xml
4fb1b2
+++ shadow-4.5/man/shadow.5.xml
4fb1b2
@@ -129,7 +129,7 @@
4fb1b2
 	<listitem>
4fb1b2
 	  <para>
4fb1b2
 	    The date of the last password change, expressed as the number
4fb1b2
-	    of days since Jan 1, 1970.
4fb1b2
+	    of days since Jan 1, 1970 00:00 UTC.
4fb1b2
 	  </para>
4fb1b2
 	  <para>
4fb1b2
 	    The value 0 has a special meaning, which is that the user
4fb1b2
@@ -208,8 +208,8 @@
4fb1b2
 	  </para>
4fb1b2
 	  <para>
4fb1b2
 	    After expiration of the password and this expiration period is
4fb1b2
-	    elapsed, no login is possible using the current user's
4fb1b2
-	    password.  The user should contact her administrator.
4fb1b2
+	    elapsed, no login is possible for the user.
4fb1b2
+	    The user should contact her administrator.
4fb1b2
 	  </para>
4fb1b2
 	  <para>
4fb1b2
 	    An empty field means that there are no enforcement of an
4fb1b2
@@ -224,7 +224,7 @@
4fb1b2
 	<listitem>
4fb1b2
 	  <para>
4fb1b2
 	    The date of expiration of the account, expressed as the number
4fb1b2
-	    of days since Jan 1, 1970.
4fb1b2
+	    of days since Jan 1, 1970 00:00 UTC.
4fb1b2
 	  </para>
4fb1b2
 	  <para>
4fb1b2
 	    Note that an account expiration differs from a password
4fb1b2
Index: shadow-4.5/man/useradd.8.xml
4fb1b2
===================================================================
4fb1b2
--- shadow-4.5.orig/man/useradd.8.xml
4fb1b2
+++ shadow-4.5/man/useradd.8.xml
4fb1b2
@@ -347,6 +347,11 @@
4fb1b2
 	    <option>CREATE_HOME</option> is not enabled, no home
4fb1b2
 	    directories are created.
4fb1b2
 	  </para>
4fb1b2
+	  <para>
4fb1b2
+	    The directory where the user's home directory is created must
4fb1b2
+	    exist and have proper SELinux context and permissions. Otherwise
4fb1b2
+	    the user's home directory cannot be created or accessed.
4fb1b2
+	  </para>
4fb1b2
 	</listitem>
4fb1b2
       </varlistentry>
4fb1b2
       <varlistentry>
4fb1b2
Index: shadow-4.5/man/usermod.8.xml
4fb1b2
===================================================================
4fb1b2
--- shadow-4.5.orig/man/usermod.8.xml
4fb1b2
+++ shadow-4.5/man/usermod.8.xml
4fb1b2
@@ -132,7 +132,8 @@
4fb1b2
 	    If the <option>-m</option>
4fb1b2
 	    option is given, the contents of the current home directory will
4fb1b2
 	    be moved to the new home directory, which is created if it does
4fb1b2
-	    not already exist.
4fb1b2
+	    not already exist. If the current home directory does not exist
4fb1b2
+	    the new home directory will not be created.
4fb1b2
 	  </para>
4fb1b2
 	</listitem>
4fb1b2
       </varlistentry>
4fb1b2
@@ -256,7 +257,8 @@
4fb1b2
 	<listitem>
4fb1b2
 	  <para>
4fb1b2
 	    Move the content of the user's home directory to the new
4fb1b2
-	    location.
4fb1b2
+	    location. If the current home directory does not exist
4fb1b2
+	    the new home directory will not be created.
4fb1b2
 	  </para>
4fb1b2
 	  <para>
4fb1b2
 	    This option is only valid in combination with the