shadow (1:4.2-3.2ubuntu1) yakkety; urgency=medium * Merge with Debian; remaining changes: - debian/passwd.upstart: Add an upstart job to clear locks on [shadow-]passwd/group. - debian/login.defs: + Update documentation of USERGROUPS_ENAB: with pam_umask, the UPG handling does not only apply to "former (pre-PAM) uses". + Update documentation of UMASK: Explain that USERGROUPS_ENAB will modify this default for UPGs. - debian/{source_shadow.py,rules}: Add apport hook - Pass noupdate to pam_motd call for /run/motd.dynamic, to avoid running /etc/update-motd.d/* scripts twice. - debian/patches/1010_extrausers.patch: Add support to passwd for libnss-extrausers - debian/patches/1011_extrausers_toggle.patch: extrausers support for useradd and groupadd - debian/patches/userns/subuids-nonlocal-users: Don't limit subuid/subgid support to local users. * Dropped changes, included in Debian: - Allow LXC devices (lxc/console, lxc/tty[1234]), used from precise on. - Add uidmap package based on upstream patches that introduce newuidmap/newgidmap as well as /etc/subuid and /etc/subgid. Additional updates on those to widen the default allocation to 65536 uids and gids and only assign ranges to non-system users. - debian/patches/1020_fix_user_busy_errors: Call sub_uid_close in all error cases. * Dropped changes, included upstream: - debian/patches/495_stdout-encrypted-password: chpasswd can report password hashes on stdout. - debian/patches/496_su_kill_process_group: Kill the child process group, rather than just the immediate child. * Fix pam_motd calls so that the second pam_motd is the noupdate one rather than the first, ensuring /run/motd.dynamic is always populated and shown on the first login after boot. LP: #1368864. * Don't call 'pam_exec uname', a change adopted in Debian without coordination with the Debian PAM maintainer * Use dh_installinit now for installing the upstart job, as we no longer generate a dependency on upstart-job. * Include /etc/sub[ug]id in the list of files to clear locks for on boot. LP: #1304505 * Add a systemd unit to go with the upstart job, so that lock clearing works on newer Ubuntu releases. * add support for "chfn --extrausers" (LP: #1495580) * debian/patches/1010_extrausers.patch: - Fix usermod to handle a readonly /etc gracefully (LP: #1562872) * debian/patches/1010_extrausers.patch: - Fix usermod to look in extrausers location for basic changes to a user's passwd info. Fixes changing user's real name in Touch via AccountsService. (Does not address updating groups yet, since that's less useful now, as we can't update any system groups.) * d/p/1021_no_subuids_for_system_users.patch: fix the not creating subuids for system users. (LP: #1545884) * Replace debian/passwd.service with debian/passwd.tmpfile, systemd tmpfile handling has support for removing files for us on boot. Thanks to Martin Pitt <pi...@ubuntu.com> for the hint.
shadow (1:4.2-3.2) unstable; urgency=medium * Non-maintainer upload. * Use HTTPS in Vcs-Git. * Stop using hardening-wrapper and instead use /usr/share/dpkg/buildflags.mk. Closes: #836653 Date: Tue, 20 Sep 2016 09:43:54 +0200 Changed-By: Matthias Klose <d...@ubuntu.com> Maintainer: Ubuntu Developers <ubuntu-devel-disc...@lists.ubuntu.com> https://launchpad.net/ubuntu/+source/shadow/1:4.2-3.2ubuntu1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 20 Sep 2016 09:43:54 +0200 Source: shadow Binary: passwd login uidmap Architecture: source Version: 1:4.2-3.2ubuntu1 Distribution: yakkety Urgency: medium Maintainer: Ubuntu Developers <ubuntu-devel-disc...@lists.ubuntu.com> Changed-By: Matthias Klose <d...@ubuntu.com> Description: login - system login tools passwd - change and administer password and group data uidmap - programs to help use subuids Closes: 836653 Launchpad-Bugs-Fixed: 1304505 1368864 1495580 1545884 1562872 Changes: shadow (1:4.2-3.2ubuntu1) yakkety; urgency=medium . * Merge with Debian; remaining changes: - debian/passwd.upstart: Add an upstart job to clear locks on [shadow-]passwd/group. - debian/login.defs: + Update documentation of USERGROUPS_ENAB: with pam_umask, the UPG handling does not only apply to "former (pre-PAM) uses". + Update documentation of UMASK: Explain that USERGROUPS_ENAB will modify this default for UPGs. - debian/{source_shadow.py,rules}: Add apport hook - Pass noupdate to pam_motd call for /run/motd.dynamic, to avoid running /etc/update-motd.d/* scripts twice. - debian/patches/1010_extrausers.patch: Add support to passwd for libnss-extrausers - debian/patches/1011_extrausers_toggle.patch: extrausers support for useradd and groupadd - debian/patches/userns/subuids-nonlocal-users: Don't limit subuid/subgid support to local users. * Dropped changes, included in Debian: - Allow LXC devices (lxc/console, lxc/tty[1234]), used from precise on. - Add uidmap package based on upstream patches that introduce newuidmap/newgidmap as well as /etc/subuid and /etc/subgid. Additional updates on those to widen the default allocation to 65536 uids and gids and only assign ranges to non-system users. - debian/patches/1020_fix_user_busy_errors: Call sub_uid_close in all error cases. * Dropped changes, included upstream: - debian/patches/495_stdout-encrypted-password: chpasswd can report password hashes on stdout. - debian/patches/496_su_kill_process_group: Kill the child process group, rather than just the immediate child. * Fix pam_motd calls so that the second pam_motd is the noupdate one rather than the first, ensuring /run/motd.dynamic is always populated and shown on the first login after boot. LP: #1368864. * Don't call 'pam_exec uname', a change adopted in Debian without coordination with the Debian PAM maintainer * Use dh_installinit now for installing the upstart job, as we no longer generate a dependency on upstart-job. * Include /etc/sub[ug]id in the list of files to clear locks for on boot. LP: #1304505 * Add a systemd unit to go with the upstart job, so that lock clearing works on newer Ubuntu releases. * add support for "chfn --extrausers" (LP: #1495580) * debian/patches/1010_extrausers.patch: - Fix usermod to handle a readonly /etc gracefully (LP: #1562872) * debian/patches/1010_extrausers.patch: - Fix usermod to look in extrausers location for basic changes to a user's passwd info. Fixes changing user's real name in Touch via AccountsService. (Does not address updating groups yet, since that's less useful now, as we can't update any system groups.) * d/p/1021_no_subuids_for_system_users.patch: fix the not creating subuids for system users. (LP: #1545884) * Replace debian/passwd.service with debian/passwd.tmpfile, systemd tmpfile handling has support for removing files for us on boot. Thanks to Martin Pitt <pi...@ubuntu.com> for the hint. . shadow (1:4.2-3.2) unstable; urgency=medium . * Non-maintainer upload. * Use HTTPS in Vcs-Git. * Stop using hardening-wrapper and instead use /usr/share/dpkg/buildflags.mk. Closes: #836653 Checksums-Sha1: a083b982ab2ebd4c70ed6ad70d537ef352891378 2432 shadow_4.2-3.2ubuntu1.dsc 440b3c40b3f18983e11e86ac17a5b055f97723dc 504272 shadow_4.2-3.2ubuntu1.debian.tar.xz Checksums-Sha256: a5d12dae23f17fa0ab7360b7164f1069e2df885a6d5139aead3ffac706b1c5b1 2432 shadow_4.2-3.2ubuntu1.dsc 8cf6c74b2c41c436e98ca63e229002363a5f62b31f3c5698cfdee49361a7bdf5 504272 shadow_4.2-3.2ubuntu1.debian.tar.xz Files: 5c7eef9b04271408507bdf51dba630c5 2432 admin required shadow_4.2-3.2ubuntu1.dsc 2e395183ee42941aa7c56e549bea0157 504272 admin required shadow_4.2-3.2ubuntu1.debian.tar.xz Original-Maintainer: Shadow package maintainers <pkg-shadow-de...@lists.alioth.debian.org> -----BEGIN PGP SIGNATURE----- iQItBAEBCAAXBQJX4Oo0EBxkb2tvQHVidW50dS5jb20ACgkQvX6qYHePpvUvkRAA ojqs5HBBFqjxMAtM3hHnYwBJquwK3RGfeOuZEVDZzZ4zSWKL0y3a9QKZ8W9rp9Ce g9DYLQGQu3BxZaHO2Ub1XEdQsP5Fz/mFkkpOtE7/aH84BZ67iG7QJZvO29wNMpnl ZlZ8hTbPvZSwnWxi/AXSl5hIr7yUIFfDpTpM6hw7juXsIS7TkjLchFfzQ0BnuZEf Tv2tGwOOjfeKtq7bFjHP/WKyelHA2VrAVq8jVNx4U7dYyREEDlqfv3qIv45OBxi6 kYK5QsXLpqNl8L7auEYz74a9CvSZSgV/GsU7lFK2XuiJaSol/2Y0WW4NRHsg0OvT BExt4qV77YbCF2cr0ryap5dpIK2VQq/EoCpmGorRcxWZfwmzZLSU/Lw5xLt9hUWV su3oW3nPSVR1Nwjf6P6UWoQ7S2q0UEyslAsBRYR8t9u+t6p64fqI4hwht15HIDkj CZegNSNLLqvJwJe0QNwxDj6KXl3ONkxdk/fny2GPT6dPtz7y8vluKcWnrEViUbOZ Mz9BC9CEwAl28M+VetEr3x5otvCmbqXOqwPuYrtXpmTeiLJBwH90bn0NnuUcXAZ1 HXzQ2P7BSefCzv1GYSCCDDHGvfj1hH+HA3b9eGhO71ElSXfqGpsjZ89B+1OgJKsj XU2eKOYPt6beDaAFqI57HhnXZpXqpUDHLQjByfirO40= =w3j6 -----END PGP SIGNATURE-----
-- Yakkety-changes mailing list Yakkety-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/yakkety-changes