Summary: Utilities for managing accounts and shadow password files

Name: shadow-utils

Version: 4.1.5.1

Release: 25%{?dist}.1

Epoch: 2

URL: http://pkg-shadow.alioth.debian.org/

Source0: http://pkg-shadow.alioth.debian.org/releases/shadow-%{version}.tar.bz2

Source3: http://pkg-shadow.alioth.debian.org/releases/shadow-%{version}.tar.bz2.sig

Source1: shadow-utils.login.defs

Source2: shadow-utils.useradd

Patch0: shadow-4.1.5-redhat.patch

Patch1: shadow-4.1.5.1-goodname.patch

Patch2: shadow-4.1.5.1-info-parent-dir.patch

Patch3: shadow-4.1.5-uflg.patch

Patch6: shadow-4.1.5.1-selinux.patch

Patch7: shadow-4.1.5-2ndskip.patch

Patch8: shadow-4.1.5.1-backup-mode.patch

Patch9: shadow-4.1.5.1-merge-group.patch

Patch10: shadow-4.1.5.1-orig-context.patch

Patch11: shadow-4.1.5.1-logmsg.patch

Patch12: shadow-4.1.5.1-errmsg.patch

Patch13: shadow-4.1.5.1-audit-owner.patch

Patch14: shadow-4.1.5.1-default-range.patch

Patch15: shadow-4.1.5.1-manfix.patch

Patch16: shadow-4.1.5.1-crypt-null.patch

Patch17: shadow-4.1.5.1-userdel-helpfix.patch

Patch18: shadow-4.1.5.1-date-parsing.patch

Patch19: shadow-4.1.5.1-ingroup.patch

Patch20: shadow-4.1.5.1-move-home.patch

Patch21: shadow-4.1.5.1-audit-update.patch

Patch22: shadow-4.1.5.1-ja-translation.patch

Patch23: shadow-4.1.5.1-usermod-passwd.patch

Patch24: shadow-4.1.5.1-id-alloc.patch

Patch25: shadow-4.1.5.1-lastlog-unexpire.patch

Patch26: shadow-4.1.5.1-chgrp-guard.patch

Patch27: shadow-4.1.5.1-selinux-perms.patch

Patch28: shadow-4.1.5.1-null-tm.patch

Patch29: shadow-4.1.5.1-long-entry.patch

License: BSD and GPLv2+

Group: System Environment/Base

BuildRequires: libselinux-devel >= 1.25.2-1

BuildRequires: audit-libs-devel >= 1.6.5

BuildRequires: libsemanage-devel

BuildRequires: libacl-devel libattr-devel

BuildRequires: gnome-doc-utils docbook-style-xsl gettext

#BuildRequires: autoconf, automake, libtool, gettext-devel

Requires: libselinux >= 1.25.2-1

Requires: audit-libs >= 1.6.5

Requires: setup

Requires(pre): coreutils

Requires(post): coreutils

Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

%description

The shadow-utils package includes the necessary programs for

converting UNIX password files to the shadow password format, plus

programs for managing user and group accounts. The pwconv command

converts passwords to the shadow password format. The pwunconv command

unconverts shadow passwords and generates a passwd file (a standard

UNIX password file). The pwck command checks the integrity of password

and shadow files. The lastlog command prints out the last login times

for all users. The useradd, userdel, and usermod commands are used for

managing user accounts. The groupadd, groupdel, and groupmod commands

are used for managing group accounts.

%prep

%setup -q -n shadow-%{version}

%patch0 -p1 -b .redhat

%patch1 -p1 -b .goodname

%patch2 -p1 -b .info-parent-dir

%patch3 -p1 -b .uflg

%patch6 -p1 -b .selinux

%patch7 -p1 -b .2ndskip

%patch8 -p1 -b .backup-mode

%patch9 -p1 -b .merge-group

%patch10 -p1 -b .orig-context

%patch11 -p1 -b .logmsg

%patch12 -p1 -b .errmsg

%patch13 -p1 -b .audit-owner

%patch14 -p1 -b .default-range

%patch15 -p1 -b .manfix

%patch16 -p1 -b .crypt-null

%patch17 -p1 -b .userdel

%patch18 -p1 -b .date-parsing

%patch19 -p1 -b .ingroup

%patch20 -p1 -b .move-home

%patch21 -p1 -b .audit-update

%patch22 -p1 -b .ja-translation

%patch23 -p1 -b .usermod-passwd

%patch24 -p1 -b .id-alloc

%patch25 -p1 -b .unexpire

%patch26 -p1 -b .chgrp-guard

%patch27 -p1 -b .selinux-perms

%patch28 -p1 -b .null-tm

%patch29 -p1 -b .long-entry

iconv -f ISO88591 -t utf-8  doc/HOWTO > doc/HOWTO.utf8

cp -f doc/HOWTO.utf8 doc/HOWTO

#rm po/*.gmo

#rm po/stamp-po

#aclocal

#libtoolize --force

#automake -a

#autoconf

%build

%ifarch sparc64

#sparc64 need big PIE

export CFLAGS="$RPM_OPT_FLAGS -fPIE"

export LDFLAGS="-pie -Wl,-z,relro -Wl,-z,now"

%else

export CFLAGS="$RPM_OPT_FLAGS -fpie"

export LDFLAGS="-pie -Wl,-z,relro -Wl,-z,now"

%endif

export LC_ALL=C

%configure \

        --enable-shadowgrp \

        --enable-man \

        --with-audit \

        --with-sha-crypt \

        --with-selinux \

        --without-libcrack \

        --without-libpam \

        --disable-shared \

        --with-group-name-max-length=32

# update the japanese translation

(cd po; make ja.gmo)

make

%install

rm -rf $RPM_BUILD_ROOT

make install DESTDIR=$RPM_BUILD_ROOT gnulocaledir=$RPM_BUILD_ROOT/%{_datadir}/locale MKINSTALLDIRS=`pwd`/mkinstalldirs

install -d -m 755 $RPM_BUILD_ROOT/%{_sysconfdir}/default

install -p -c -m 0644 %{SOURCE1} $RPM_BUILD_ROOT/%{_sysconfdir}/login.defs

install -p -c -m 0600 %{SOURCE2} $RPM_BUILD_ROOT/%{_sysconfdir}/default/useradd

ln -s useradd $RPM_BUILD_ROOT%{_sbindir}/adduser

#ln -s %{_mandir}/man8/useradd.8 $RPM_BUILD_ROOT/%{_mandir}/man8/adduser.8

ln -s useradd.8 $RPM_BUILD_ROOT/%{_mandir}/man8/adduser.8

for subdir in $RPM_BUILD_ROOT/%{_mandir}/{??,??_??,??_??.*}/man* ; do

        test -d $subdir && test -e $subdir/useradd.8 && echo ".so man8/useradd.8" > $subdir/adduser.8

done

# Remove binaries we don't use.

rm $RPM_BUILD_ROOT/%{_bindir}/chfn

rm $RPM_BUILD_ROOT/%{_bindir}/chsh

rm $RPM_BUILD_ROOT/%{_bindir}/expiry

rm $RPM_BUILD_ROOT/%{_bindir}/groups

rm $RPM_BUILD_ROOT/%{_bindir}/login

rm $RPM_BUILD_ROOT/%{_bindir}/passwd

rm $RPM_BUILD_ROOT/%{_bindir}/su

rm $RPM_BUILD_ROOT/%{_bindir}/faillog

rm $RPM_BUILD_ROOT/%{_sysconfdir}/login.access

rm $RPM_BUILD_ROOT/%{_sysconfdir}/limits

rm $RPM_BUILD_ROOT/%{_sbindir}/logoutd

rm $RPM_BUILD_ROOT/%{_sbindir}/nologin

rm $RPM_BUILD_ROOT/%{_sbindir}/chgpasswd

rm $RPM_BUILD_ROOT/%{_mandir}/man1/chfn.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man1/chfn.*

rm $RPM_BUILD_ROOT/%{_mandir}/man1/chsh.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man1/chsh.*

rm $RPM_BUILD_ROOT/%{_mandir}/man1/expiry.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man1/expiry.*

rm $RPM_BUILD_ROOT/%{_mandir}/man1/groups.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man1/groups.*

rm $RPM_BUILD_ROOT/%{_mandir}/man1/login.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man1/login.*

rm $RPM_BUILD_ROOT/%{_mandir}/man1/passwd.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man1/passwd.*

rm $RPM_BUILD_ROOT/%{_mandir}/man1/su.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man1/su.*

rm $RPM_BUILD_ROOT/%{_mandir}/man5/limits.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man5/limits.*

rm $RPM_BUILD_ROOT/%{_mandir}/man5/login.access.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man5/login.access.*

rm $RPM_BUILD_ROOT/%{_mandir}/man5/passwd.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man5/passwd.*

rm $RPM_BUILD_ROOT/%{_mandir}/man5/porttime.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man5/porttime.*

rm $RPM_BUILD_ROOT/%{_mandir}/man5/suauth.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man5/suauth.*

rm $RPM_BUILD_ROOT/%{_mandir}/man8/logoutd.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man8/logoutd.*

rm $RPM_BUILD_ROOT/%{_mandir}/man8/nologin.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man8/nologin.*

rm $RPM_BUILD_ROOT/%{_mandir}/man8/chgpasswd.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man8/chgpasswd.*

rm $RPM_BUILD_ROOT/%{_mandir}/man3/getspnam.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man3/getspnam.*

rm $RPM_BUILD_ROOT/%{_mandir}/man5/faillog.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man5/faillog.*

rm $RPM_BUILD_ROOT/%{_mandir}/man8/faillog.*

rm $RPM_BUILD_ROOT/%{_mandir}/*/man8/faillog.*

find $RPM_BUILD_ROOT%{_mandir} -depth -type d -empty -delete

%find_lang shadow

for dir in $(ls -1d $RPM_BUILD_ROOT%{_mandir}/{??,??_??}) ; do

    dir=$(echo $dir | sed -e "s|^$RPM_BUILD_ROOT||")

    lang=$(basename $dir)

#   echo "%%lang($lang) $dir" >> shadow.lang

#   echo "%%lang($lang) $dir/man*" >> shadow.lang

    echo "%%lang($lang) $dir/man*/*" >> shadow.lang

done

%clean

rm -rf $RPM_BUILD_ROOT

%files -f shadow.lang

%defattr(-,root,root)

%doc NEWS doc/HOWTO README

%attr(0644,root,root)   %config(noreplace) %{_sysconfdir}/login.defs

%attr(0644,root,root)   %config(noreplace) %{_sysconfdir}/default/useradd

%{_bindir}/sg

%attr(4755,root,root) %{_bindir}/chage

%attr(4755,root,root) %{_bindir}/gpasswd

%{_bindir}/lastlog

%attr(4755,root,root) %{_bindir}/newgrp

%{_sbindir}/adduser

%attr(0750,root,root)   %{_sbindir}/user*

%attr(0750,root,root)   %{_sbindir}/group*

%{_sbindir}/grpck

%{_sbindir}/pwck

%{_sbindir}/*conv

%{_sbindir}/chpasswd

%{_sbindir}/newusers

%{_sbindir}/vipw

%{_sbindir}/vigr

%{_mandir}/man1/chage.1*

%{_mandir}/man1/gpasswd.1*

%{_mandir}/man1/sg.1*

%{_mandir}/man1/newgrp.1*

%{_mandir}/man3/shadow.3*

%{_mandir}/man5/shadow.5*

%{_mandir}/man5/login.defs.5*

%{_mandir}/man5/gshadow.5*

%{_mandir}/man8/adduser.8*

%{_mandir}/man8/group*.8*

%{_mandir}/man8/user*.8*

%{_mandir}/man8/pwck.8*

%{_mandir}/man8/grpck.8*

%{_mandir}/man8/chpasswd.8*

%{_mandir}/man8/newusers.8*

%{_mandir}/man8/*conv.8*

%{_mandir}/man8/lastlog.8*

%{_mandir}/man8/vipw.8*

%{_mandir}/man8/vigr.8*

%changelog

* Fri Feb  1 2019 Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-25.1

- re-allow all numeric usernames when SHADOW_ALLOW_ALL_NUMERIC_USER

  environment variable is set (#1651450)

* Tue Apr 24 2018 Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-25

- prevent creating users ".." or "." or with all numeric usernames (#1373645)

- raise limit for passwd and shadow entry length but also prevent

  writing longer entries (#1422497)

- consider also supplementary group membership in newgrp (#1425078)

* Tue Jun 28 2016 Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-24

- useradd: fix typo in japanese translation (#1202629)

* Tue Jun 14 2016 Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-23

- guard for localtime() and gmtime() failure (#1341167)

* Mon May 30 2016 Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-22

- chpasswd: add selinux_check_access() call (#1336902)

* Wed May  4 2016 Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-20

- usermod: guard against unsafe change of ownership of

  special home directories (#1225560)

* Thu Apr 28 2016 Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-19

- documentation fixes (#1292820)

- usermod: make password unlocking compatible with passwd (#1185425)

- usermod: disallow ':' in raw password setting (#1292815)

- improve the gid and uid allocation mechanism (#1279321)

- lastlog: add options to unexpire unused accounts (#1285547)

* Tue Nov 25 2014 Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-18

- properly audit modification of gshadow

* Fri Oct 17 2014 Tomáš Mráz <tmraz@redhat.com> - 2:4.1.5.1-16

- update auditing to cover more events and fix some incorrect audit

  records - patch by Steve Grubb (#1151580)

* Wed Sep 10 2014 Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-15

- discard obsolete matchpathcon cache after semanage_commit()

* Fri Aug 29 2014 Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-14

- label the newly created home dir correctly (#1077809)

- mention that chage -d 0 forces password change (#1135010)

- improve date parsing and error detecting in chage

- avoid full group database scanning in newgrp in most common case

- report error if usermod asked for moving homedir and it does not exist

* Wed Feb 12 2014 Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-13

- clean up login.defs manpage

- properly document userdel -f behavior

* Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 2:4.1.5.1-11

- Mass rebuild 2014-01-24

* Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 2:4.1.5.1-10

- Mass rebuild 2013-12-27

* Fri Oct 18 2013 Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-9

- document that the directory where user's home is created must exist

* Thu Jul 25 2013 Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-8

- slightly more meaningful error messages if crypt() returns NULL (#988184)

- explicit suid permissions

* Fri Jul 19 2013 Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-7

- fix useradd man page bugs

* Fri Jun 14 2013 Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-6

- report error to stdout when SELinux context for home directory

  cannot be determined (#973647)

- audit the changing home directory owner (#885797)

- do not set the default SELinux MLS range (#852676)

* Tue Mar 19 2013 Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-5

- improve the failure syslog message in useradd (#830617)

* Wed Feb 20 2013 Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-4

- keep the original context if matchpathcon() fails (#912399)

* Tue Jan 29 2013 Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-3

- fix bugs in merge_group_entries()

* Fri Jan 11 2013 Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-2

- /etc/default is owned by glibc-common now (#894194)

* Wed Sep 19 2012 Tomas Mraz <tmraz@redhat.com> - 2:4.1.5.1-1

- new upstream version

- use the original file permissions when creating backup (#853102)

* Wed Jul 25 2012 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.5-5

- make /etc/default/useradd world-readable (#835137)

* Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2:4.1.5-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Mon Jun 18 2012 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.5-3

- pwconv/grpconv skipped 2nd of consecutive failures (#832995)

* Thu Mar 22 2012 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.5-2

- fix selinux context handling

- reset selinux context on files copied from skel

* Mon Mar 19 2012 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.5-1

- upgrade

* Tue Feb 07 2012 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-14

- compile with PIE and RELRO flags (#784349)

* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2:4.1.4.3-13

- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

* Tue Dec 20 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-12

- fix leaks in .IDs patch (#734340)

* Wed Nov 16 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-11

- free memory associated with SELinux security contexts

* Wed Nov 09 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-10

- replace semanage call by library call

- useradd man page (#739147)

* Tue Aug 02 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-9

- man page adjustment (userdel -Z)

* Tue Aug 02 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-8

- fixing semanage issue (#701355)

* Fri Jul 22 2011 Miloslav Trmač <mitr@redhat.com> - 2:4.1.4.3-7

- Make sure /etc/login.defs is not changed on upgrades from Fedora 1[345].

* Wed Jun 29 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-6

- man page fixes (#696213 #674878)

* Tue Jun 28 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-5

- userdel option to remove Linux login <-> SELinux login mapping (#639900)

- useradd special exit value if SELinux user mapping is invalid (#639975)

- usermod special exit value if SELinux user mapping is invalid (#639976)

* Mon Jun 27 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-4

- refer to PAM in /etc/login.defs (#629277)

* Mon Jun 06 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-3

- fix shadow-4.1.4.2-underflow.patch

* Tue May 31 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-2

- fix integer underflow in laslog (#706321)

* Fri May 20 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.3-1

- upgrade

- change UID/GID_MIN to #1000

- fix find_new_uid/gid for big UID/GID_MAX

* Wed Feb 09 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-11

- useradd man page (-m option)

- create home directory on fs with noacl

- remove faillog app (pam_tally.so is no longer shipped)

  Resolves: #523265, #622320

* Tue Feb 01 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-10

- do not use  gshadow functions from glibc, there is a bug

  in glibc sgetsgent(#674361)

  Resolves: #674234

* Wed Jan 05 2011 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-9

- fix gshadow functions from shadow utils

- make shadow utils use gshadow functions from glibc

  Resolves: #665780

* Tue Jul 20 2010 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-8

- fix pwck/grpck hang

  Resolves: #586322

* Mon Jun 14 2010 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-7

- fix integer underflow in faillog (#603683)

- use preferred GID for reserved static IDs

* Thu Apr 29 2010 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-6

- preserve ACL's on files in /etc/skel

  Resolves: #513055

* Wed Apr 28 2010 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-5

- newusers man page more informative

- userdel should not need to run semanage

  Resolves: #586330 #586408

* Thu Apr 01 2010 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-4

- fix man directories ownership (#569418)

* Fri Mar 26 2010 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-3

- max group name length set to 32 characters

* Wed Nov 18 2009 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-2

- apply patches{1,2,3}

- enable SHA512 in /etc/login.defs

* Mon Sep 07 2009 Peter Vrabec <pvrabec@redhat.com> - 2:4.1.4.2-1

- upgrade

* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 2:4.1.4.1-7

- rebuilt with new audit

* Wed Aug 05 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.4.1-6

- increase threshold for uid/gid reservations to 200 (#515667)

* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2:4.1.4.1-5

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Thu Jul 16 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.4.1-4

- fix a list of owned directories (#510366)

* Thu Jul 16 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.4.1-3

- reduce the reuse of system IDs

* Wed Jul 15 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.4.1-2

- speed up sys users look up on LDAP boxes (#511813)

* Tue Jun 16 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.4.1-1

- upgrade

* Fri May 15 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.4-1

- upgrade

* Wed Apr 22 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.3.1-2

- lastlog fix

* Fri Apr 17 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.3.1-1

- upgrade

* Tue Apr 14 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.3-2

- get "-n" option back

- fix selinux issues

* Tue Apr 14 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.3-1

- upgrade

* Tue Mar 24 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-12

- don not allow UID/GID = 4294967295 (#484040)

* Mon Jan 19 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-11

- fix license tag (#226416)

- get rid of tabs in spec file (#226416)

- convert HOWTO to UTF8 (#226416)

* Mon Jan 05 2009 Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-10

- Add policycoreutils as Requires, because of restorecon (#478494)

* Sun Dec 21 2008 Jesse Keating <jkeating@redhat.com> - 2:4.1.2-9

- Add setup as a Requires. Perhaps this should be a files requires. (#477529)

* Wed Sep 24 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-8

- groupmems: check username for valid character (#455603)

- groupmems: don't segfault on nonexistent group (#456088)

* Thu Sep 11 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-7

- fix usermod SELinux user mappings change (#458766)

* Tue Sep 02 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-6

- audit improvements, thnx. to sgrubb@redhat.com

* Tue Sep 02 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-5

- fix groupmems issues (#459825)

* Mon Jul 28 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-4

- fix configure options (#456748)

* Thu Jul 24 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-3

- recreate selinux patch

* Tue Jul 22 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-2

- provide getspnam by man-pages

* Mon May 26 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.2-1

- upgrade

* Tue May 20 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.1-2

- fix salt size problem (#447136)

* Mon Apr 07 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.1-1

- upgrade

* Fri Mar 07 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.0-5

- improve newgrp audit patch

* Mon Mar 03 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.0-4

- fix selinux labeling  (#433757)

* Tue Feb 19 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.0-3

- fix groupmems segmentation fault (#430813)

* Wed Feb 13 2008 Peter Vrabec <pvrabec@redhat.com> 2:4.1.0-2

- fix newgrp audit event

* Wed Dec 12 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.1.0-1

- new upgrade release from new upstream

- provide vipw and vigr

* Thu Nov 29 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-20

- do not create mail spool entries for system accounts (#402351)

* Thu Oct 18 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-19

- fix timestamps when moving home dirs to another file system (#278571)

* Mon Oct 08 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-18

- mark localized man pages with %%lang

* Wed Aug 22 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-17

- rebuild

* Tue Jun 26 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-16

- fix "CAVEATS" section of groupadd man page (#245590)

* Wed Jun 06 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-15

- fix infinitive loop if there are duplicate entries

  in /etc/group (#240915)

* Wed Jun 06 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-14

- do not run find_new_uid() twice and use getpwuid() to check

  UID uniqueness (#236871)

* Tue Apr 10 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-13

- fix useradd dump core when build without WITH_SELINUX (#235641)

* Mon Mar 26 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-12

- create user's mailbox file by default (#231311)

* Fri Mar 16 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-11

- assign system dynamic UID/GID from the top of available UID/GID (#190523)

* Wed Feb 28 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-10

- spec file fixes to meet fedora standarts.

- fix useless call of restorecon(). (#222159)

* Sun Jan 14 2007 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-9

- fix append option in usermod (#222540).

* Thu Dec 21 2006 Dan Walsh <dwalsh@redhat.com> 2:4.0.18.1-8

- Fix execution and creation of Home Directories under SELinux

- Resolves: rhbz#217441

* Thu Dec 14 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-7

- fix rpmlint issues

* Wed Dec 06 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-6

- use MD5 encryption by default (#218629).

* Thu Nov 30 2006 Steve Grubb <sgrubb@redhat.com> 2:4.0.18.1-5

- Fix SELinux context on home directories created with useradd (#217441)

* Tue Nov 14 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-4

- fix chpasswd and chgpasswd stack overflow (#213052)

* Sat Nov 04 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-3

- fix "-g" and "-G" option.

* Fri Nov 03 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-2

- improve audit logging (#211659)

- improve "-l" option. Do not reset faillog if it's used (#213450).

* Wed Nov 01 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.18.1-1

- upgrade

* Wed Oct 25 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-7

- add dist-tag

* Wed Oct 04 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-6

- fix regression. Permissions on user* group* binaries

  should be 0750, because of CAPP/LSPP certification

- fix groupdel man page

* Fri Aug 11 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-5

- fix bug introduced with UIG_GID.patch (#201991)

* Sat Aug 05 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-4

- fix userdel, it didn't delete user's group (#201379)

* Fri Aug 04 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-3

- fix UID/GID overflow in user* group* (#198920)

* Fri Aug 04 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-2

- do not inherit file desc. in execve(nscd)

* Mon Jul 17 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.17-1

- upgrade

* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2:4.0.16-3.1

- rebuild

* Tue Jun 13 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.16-3

- call "nscd -i" to flush nscd cache (#191464)

* Sat Jun 10 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.16-2

- "useradd -r" must create a system group (#194728)

* Tue Jun 06 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.16-1

- upgrade

- do not replace login.defs file (#190014)

* Sat Apr 08 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.15-3

- fix typo in shadow-4.0.15-login.defs (#188263)

* Tue Apr 04 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.15-2

- properly notify nscd to flush its cache(#186803)

* Mon Apr 03 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.15-1

- upgrade

* Fri Mar 10 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.14-4

- fix lrename() function to handle relative symlinks too

* Tue Mar 07 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.14-3

- set default umask to 077 in login.defs

* Mon Mar 06 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.14-2

- use lrename() function, which follow a destination symbolic link(#181977)

* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 2:4.0.14-1.2

- bump again for double-long bug on ppc(64)

* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 2:4.0.14-1.1

- rebuilt for new gcc4.1 snapshot and glibc changes

* Fri Jan 06 2006 Peter Vrabec <pvrabec@redhat.com> 2:4.0.14-1

- upgrade

* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>

- rebuilt

* Tue Nov 29 2005 Peter Vrabec <pvrabec@redhat.com> 2:4.0.13-4

- fix incorrect audit record in userdel (#174392)

* Wed Nov 16 2005 Peter Vrabec <pvrabec@redhat.com> 2:4.0.13-3

- fix useradd segfaults (#173241)

* Sat Nov 5 2005 Steve Grubb <sgrubb@redhat.com> 2:4.0.13-2

- Update audit communication to standard format messages

* Fri Oct 21 2005 Peter Vrabec <pvrabec@redhat.com> 2:4.0.13-1

- upgrade

* Fri Sep 23 2005 Peter Vrabec <pvrabec@redhat.com> 2:4.0.12-4

- add useradd -l option back, it was removed by mistake

* Tue Sep 20 2005 Peter Vrabec <pvrabec@redhat.com> 2:4.0.12-3

- provide login.defs man page

- adjust audit patch

* Tue Aug 30 2005 Peter Vrabec <pvrabec@redhat.com> 2:4.0.12-2

- audit support

* Sat Aug 27 2005 Peter Vrabec <pvrabec@redhat.com> 2:4.0.12-1

- upgrade

* Sat Aug 13 2005 Dan Walsh <dwalsh@redhat.com> 2:4.0.11.1-5

- Change to use new selinux api for selinux_check_passwd_access

* Tue Aug 09 2005 Peter Vrabec <pvrabec@redhat.com> 2:4.0.11.1-4

- change the password last changed field in the shadow file

  when "usermod -p" is used (#164943)

* Mon Aug 08 2005 Peter Vrabec <pvrabec@redhat.com> 2:4.0.11.1-3

- provide getspnam.3 man page(#162476)

- fix useradd man page(#97131)

* Mon Aug 08 2005 Peter Vrabec <pvrabec@redhat.com> 2:4.0.11.1-2

- do not copy files from skel directory if home directory

  already exist (#89591,#80242)