summaryrefslogtreecommitdiffstats
path: root/debian/changelog
diff options
context:
space:
mode:
Diffstat (limited to 'debian/changelog')
-rw-r--r--debian/changelog4102
1 files changed, 4102 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..c7566f0
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,4102 @@
+shadow (1:4.13+dfsg1-4) unstable; urgency=medium
+
+ [ Helmut Grohne ]
+ * DEP17: Move login and shadowconfig to /usr. (Closes: #1059915)
+
+ -- Serge Hallyn <serge@hallyn.com> Sun, 04 Feb 2024 20:28:27 +0000
+
+shadow (1:4.13+dfsg1-3) unstable; urgency=medium
+
+ * Team upload
+ * Remove myself from uploaders
+
+ -- Balint Reczey <balint@balintreczey.hu> Sun, 15 Oct 2023 19:10:52 +0200
+
+shadow (1:4.13+dfsg1-2) unstable; urgency=medium
+
+ [ Balint Reczey ]
+ * debian/gitlab-ci.yml: Use sudo to fix reprotest test
+ * debian/login.pam: Drop reference to Debian Etch (Closes: #1040064)
+ * debian/NEWS: Fix false claim about PREVENT_NO_AUTH affecting authentication.
+ Also drop setting PREVENT_NO_AUTH in shipped login.defs. (Closes: #1041547)
+ * Cherry-pick upstream patch to fix gpasswd passwd leak
+ (CVE-2023-4641) (Closes: #1051062)
+ * Cherry-pick upstream patch to fix chfn vulnerability allowing injection of
+ control characters into some /etc/passwd fields.
+ (CVE-2023-29383) (Closes: #1034482)
+
+ [ Gioele Barabucci ]
+ * Support <nodoc> build profile
+ `xsltproc`, `docbook` and all other XML-related packages are not needed
+ when the `<nodoc>` build profile is active, as long as `./configure` is
+ called with `--disable-man`. (Closes: #1051827)
+
+
+ -- Balint Reczey <balint@balintreczey.hu> Tue, 26 Sep 2023 22:01:52 +0200
+
+shadow (1:4.13+dfsg1-1) unstable; urgency=medium
+
+ [ Balint Reczey ]
+ * debian/watch: Make watch file work with new GitHub UI
+ * debian/control: Mark libsubid-dev as Multi-Arch: same
+ * New upstream version 4.13
+ - fix typo in useradd(8) (Closes: #1021380)
+ * Refresh patches
+
+ [ Debian Janitor ]
+ * Remove constraints unnecessary since buster (oldstable)
+ * login: Drop versioned constraint on util-linux in Breaks.
+ Changes-By: deb-scrub-obsolete
+
+ -- Balint Reczey <balint@balintreczey.hu> Fri, 11 Nov 2022 09:28:15 +0100
+
+shadow (1:4.12.3+dfsg1-3) unstable; urgency=medium
+
+ [ Debian Janitor ]
+ * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository-Browse.
+
+ [ Balint Reczey ]
+ * Fix tree copying regressions introduced in 4.12.2. (Closes: #1023132)
+
+ -- Balint Reczey <balint@balintreczey.hu> Sat, 05 Nov 2022 14:47:01 +0100
+
+shadow (1:4.12.3+dfsg1-2) unstable; urgency=medium
+
+ * Cherry-pick upstream patch to fix regression in expiration date handling
+ (Closes: #1021697)
+
+ -- Balint Reczey <balint@balintreczey.hu> Sat, 22 Oct 2022 20:23:10 +0200
+
+shadow (1:4.12.3+dfsg1-1) unstable; urgency=medium
+
+ [ Balint Reczey ]
+ * New upstream release (Closes: #1004242, #1006848)
+ * Refresh patches
+ * debian/patches: Reorder patches in series to make it look sane
+ * Fix Lintian elevated-privileges tag rename
+
+ [ Johannes Schauer Marin Rodrigues ]
+ * debian/shadowconfig: Support DPKG_ROOT without using chroot()
+ (Closes: #1007758)
+ * useradd: cherry-pick patch from upstream to avoid creating several GB worth
+ of sparse lastlog and faillog files for users with high uid values
+ (Closes: #1019245)
+
+ [ Debian Janitor ]
+ * Update renamed lintian tag names in lintian overrides.
+ * Update standards version to 4.6.1, no changes needed.
+
+ -- Balint Reczey <balint@balintreczey.hu> Tue, 04 Oct 2022 22:09:04 +0200
+
+shadow (1:4.11.1+dfsg1-2) unstable; urgency=medium
+
+ [ Balint Reczey ]
+ * debian/README.source: Recommend submitting translations upstream
+ * debian/tests/control: Mark smoke test as superficial
+ * useradd: Restore defaults used up to 4.8.1 version.
+ Also fix /etc/default/useradd to state that mail spool directories are
+ not created.
+ * login.defs:
+ - List default value of HOME_MODE
+ - Warn about weak cryptographic choices, like upstream
+ - include HMAC_CRYPTO_ALGO key
+ - Fix typo
+
+ [ Jenkins ]
+ * Trim trailing whitespace.
+ Changes-By: lintian-brush
+ Fixes: lintian: trailing-whitespace
+ * Use canonical URL in Vcs-Git.
+ Changes-By: lintian-brush
+ Fixes: lintian: vcs-field-not-canonical
+ * Fix day-of-week for changelog entry 1:4.1.4.2+svn3283-3.
+ Changes-By: lintian-brush
+ Fixes: lintian: debian-changelog-has-wrong-day-of-week
+
+ -- Balint Reczey <balint@balintreczey.hu> Thu, 03 Mar 2022 20:41:41 +0100
+
+shadow (1:4.11.1+dfsg1-1) unstable; urgency=medium
+
+ * debian/NEWS: Fix version and release of latest entry
+
+ -- Balint Reczey <balint@balintreczey.hu> Mon, 31 Jan 2022 10:33:28 +0100
+
+shadow (1:4.11.1+dfsg1-0exp1) experimental; urgency=medium
+
+ * login: Don't list su command as shipped (Closes: #960637)
+ * Install nologin /usr/sbin without patching makefiles
+ * debian/copyright: Fully rewrite the file based on upstream license update
+ and exclude contrib/atudel from upstream tarball
+ * debian/watch: Repack upstream tarball with +dfsg1 suffix
+ * debian/upstream/signing-key.asc: Update upstream signing key
+ * New upstream version 4.11.1+dfsg1
+ * Refresh patches
+ * Set NONEXISTENT to /nonexistent in shipped login.defs (Closes: #960318)
+ * Enable newly added yescrypt support
+ * Include YESCRYPT options in shipped login.defs (Closes: #991914)
+ * debian/rules: Stop using --disable-shared to build shared libraries
+ * Ship the libsubid4 and libsubid-dev packages and ship getsubids in uidmap
+ * debian/rules: Drop obsolete variable setting
+ * debian/login.lintian-overrides: Drop unused override
+ * debian/control: Make the Vcs-Browser URL canonical
+ * debian/login.defs: List new GRANT_AUX_GROUP_SUBIDS option in shipped login.defs
+ * debian/NEWS: Mention new login behaviour regarding empty password field.
+ Also set PREVENT_NO_AUTH in shipped login.defs accordingly.
+ * debian/tests: Cherry-pick part of autopkgtest from Ubuntu.
+ Thanks to Michael Vogt for the more extensive suite in Ubuntu
+ * debian/login.defs: Set default subuid and subgid ranges
+
+ -- Balint Reczey <balint@balintreczey.hu> Sat, 22 Jan 2022 21:03:44 +0100
+
+shadow (1:4.8.1-2) unstable; urgency=medium
+
+ * debian/control: Switch to libsemanage-dev from libsemanage1-dev
+ (Closes: #998633)
+ * ACK NMU, thanks for all the changes
+ * Make passwd recommend sensible-utils because vipw uses sensible-editor
+ * Add files to debian/not-installed or install them when they were missed
+ This change ships a few more man page translations
+ * debian/control: Bump debhelper-compat version to 13
+ * List man pages to install in debian/*.manpages instead of in
+ debian/*.install
+ * Clean up debian/control using 'cme fix dpkg-control'
+ * Rename deprecated debian/passwd.tmpfile to debian/passwd.tmpfiles
+ * debian/control: Revert to my personal email address in the Maintainer field
+
+ -- Balint Reczey <balint@balintreczey.hu> Wed, 10 Nov 2021 10:39:04 +0100
+
+shadow (1:4.8.1-1.1) unstable; urgency=medium
+
+ [ Johannes Schauer Marin Rodrigues ]
+ * Non-maintainer upload.
+
+ [ Niels Thykier ]
+ * Remove obsolete login.preinst
+ * Remove obsolete code from passwd maintscripts
+
+ [ Helmut Grohne ]
+ * logoutd is gone since at least buster (closes: #989712)
+ * Delete duplicate subuid/subgid creation.
+ * login.postinstd support for DPKG_ROOT (closes: #992578)
+
+ -- Johannes Schauer Marin Rodrigues <josch@debian.org> Sat, 23 Oct 2021 21:04:57 +0200
+
+shadow (1:4.8.1-1) unstable; urgency=medium
+
+ * debian/default/useradd: Fix typo DHSELL -> DSHELL (Closes: #897028)
+ * New upstream version 4.8.1
+ - Update Dutch translation (Closes: #946608)
+ * Refresh patches
+
+ -- Balint Reczey <rbalint@ubuntu.com> Fri, 07 Feb 2020 15:54:14 +0100
+
+shadow (1:4.8-1) unstable; urgency=medium
+
+ [ Laurent Bigonville ]
+ * Move the call to pam_motd before pam_selinux open
+
+ [ Justin B Rye ]
+ * login: Update package description (Closes: #808301)
+
+ [ Yuriy M. Kaminskiy ]
+ * Mark uidmap and login as Multi-Arch: foreign (Closes: #934473)
+
+ [ Andreas Henriksson ]
+ * New upstream release.
+ - man: generate translations using itstool instead of xml2po
+ * Replace gnome-doc-utils build-dep with itstool (Closes: #881889)
+ * Use explicit --without-su configure flag
+ * Refresh and massage patches to apply
+ * Cherry-pick upstream patch reverting bindir/sbindir
+ * Fix lintian warning useless-autoreconf-build-depends
+
+ [ Balint Reczey ]
+ * debian/login.su.pam: Drop unused file
+
+ -- Balint Reczey <rbalint@ubuntu.com> Fri, 20 Dec 2019 16:39:40 +0100
+
+shadow (1:4.7-2) unstable; urgency=medium
+
+ [ Balint Reczey ]
+ * Remove obsolete /etc/cron.daily/passwd in maintainer scripts
+ (Closes: #932017)
+ * Remove Christian Perrier from Uploaders according to his request.
+ Thank you for maintaining shadow for long years! (Closes: #893944, #927576)
+
+ [ Gaudenz Steinlin ]
+ * Improve NEWS entry about securetty.
+
+ -- Balint Reczey <rbalint@ubuntu.com> Tue, 16 Jul 2019 18:48:12 +0200
+
+shadow (1:4.7-1) unstable; urgency=medium
+
+ [ Ondřej Nový ]
+ * d/changelog: Remove trailing whitespaces
+
+ [ Niels Thykier ]
+ * Declare the explicit requirement for (fake)root.
+ The shadow package currently requires (fake)root to produce the debs
+ due to static non-root:root ownerships in the debs.
+
+ [ Bryan Quigley ]
+ * Remove cron daily backup.
+ It was added in 2010 (#554170) as a split off from a previous cron
+ job. I haven't seen an argument for why it's useful to keep.
+ Depending on when a mistake occurs in one of the files it backups
+ it will provide variable recovery time of 0 to 24hours.
+
+ [ Balint Reczey ]
+ * Add Salsa CI configuration
+ * Drop Lintian override for su, it is not shipped in login anymore
+ * Stop shipping and honoring /etc/securetty
+ (Closes: #731656, #830255, #879903, #920764, #771675, #917893, #607073)
+ * Migrate to dh from cdbs
+ * Ship some missing man files
+ * Fix checking upstream tarball's OpenPGP signature
+ * New upstream version 4.7
+ * Refresh patches
+ * Run autopkgtest in Salsa CI when it exists
+ * debian/NEWS: Fix version of latest entry
+ * Clean up /etc/securetty properly on upgrade
+
+ -- Balint Reczey <rbalint@ubuntu.com> Mon, 08 Jul 2019 15:58:46 +0200
+
+shadow (1:4.5-1.1) unstable; urgency=medium
+
+ * Non-maintainer upload (greetings from DebCamp/DebConf Taiwan).
+ * Stop shipping su and break old util-linux version. (See #833256)
+ - Breaks on old version to force lockstep upgrade, which should
+ really be a depends-new-version (and can be switched around
+ together with util-linux once the transition is finished).
+ Using Breaks/Depends the 'wrong' way around is to make apt
+ unpack things in the 'right' order (avoiding any gaps where
+ /bin/su is not available during the upgrade phase).
+
+ -- Andreas Henriksson <andreas@fatal.se> Fri, 27 Jul 2018 10:07:37 +0200
+
+shadow (1:4.5-1) unstable; urgency=medium
+
+ * New upstream version 4.5
+ - Fix buffer overflow if NULL line is present in db (CVE-2017-12424)
+ (Closes: #756630)
+ - Make the sp_lstchg shadow field reproducible (Closes: #857803)
+ - Fix regression in useradd not loading defaults properly.
+ (Closes: #865762)
+ * Refresh patches
+ * Drop patches manipulating su argument concatenation:
+ * Cut redundant information from Debian-specific README files
+ * Revert adding pts/0 and pts/1 to securetty.
+ Adding pts/* defeats the purpose of securetty. Let containers add it if
+ needed as described in #830255.
+ * Use my @ubuntu.com email address in Maintainer field
+
+ -- Balint Reczey <rbalint@ubuntu.com> Wed, 27 Sep 2017 12:45:23 -0400
+
+shadow (1:4.4-4.1) unstable; urgency=high
+
+ * Non-maintainer upload.
+ * Reset pid_child only if waitpid was successful.
+ This is a regression fix for CVE-2017-2616. If su receives a signal like
+ SIGTERM, it is not propagated to the child. (Closes: #862806)
+
+ -- Salvatore Bonaccorso <carnil@debian.org> Wed, 17 May 2017 13:59:59 +0200
+
+shadow (1:4.4-4) unstable; urgency=high
+
+ * su: properly clear child PID (CVE-2017-2616) (Closes: #855943)
+
+ -- Balint Reczey <balint@balintreczey.hu> Fri, 24 Feb 2017 01:33:25 +0100
+
+shadow (1:4.4-3) unstable; urgency=medium
+
+ [ Balint Reczey ]
+ * Clean up stale locks on boot (Closes: #478771)
+ * Sync motd handling with sshd.
+ Using patch from Ubuntu (Closes: #757148)
+
+ [ Stéphane Graber ]
+ * Add missing /etc/{subgid|subuid} in postinst
+
+ -- Balint Reczey <balint@balintreczey.hu> Wed, 25 Jan 2017 16:43:09 +0100
+
+shadow (1:4.4-2) unstable; urgency=medium
+
+ [ Balint Reczey ]
+ * Update homepage to new upstream
+ * Always use /bin/sh shell in the build (Closes: #817971)
+ * Replace user´s -> user's to make login.def file valid ASCII
+ (Closes: #850338)
+ * Update patch naming docmentation
+ * Fix typos in German man pages (Closes: #734609)
+ * Send 1000_configure_userns patch upstream
+ * Add call to pam_keyinit for login pam service.
+ This module is linux-any only, so copy what openssh has already done and
+ remove the call at build time for other architectures.
+ The call to this module is needed to have proper per-session kernel
+ keyring. (Closes: #734671)
+ * Add pts/0 and pts/1 to securetty (Closes: #830255)
+ * Add ttySAC* to securetty (Closes: #824391)
+ * Add ttySC[4-9] to securetty (Closes: #768020)
+
+ [ Laurent Bigonville ]
+ * Move pam_selinux open call higher in the session stack (Closes: #747313)
+
+ [ Christian Perrier ]
+ * Fix typos in login.pam (thanks to Jakub Wilk for reporting)
+ (Closes: #747115)
+ * Include groupmems(8) in the passwd package (Closes: #663117)
+
+ [ Frans Spiesschaert ]
+ * Dutch translation update (Closes: #772470)
+
+ [ Trần Ngọc Quân ]
+ * Update Vietnamese translation (Closes: #777107)
+
+ [ Miroslav Kuře ]
+ * Updated Czech translation. (Closes: #759113)
+
+ [ Holger Wansing ]
+ * Update for German man pages
+
+ [ Thomas Blein ]
+ * French manpage translation (Closes: #805182)
+
+ [ Lars Bahner ]
+ * Fix some spelling issues in the Norwegian translation (Closes: #800553)
+
+ -- Balint Reczey <balint@balintreczey.hu> Thu, 19 Jan 2017 18:22:49 +0100
+
+shadow (1:4.4-1) unstable; urgency=medium
+
+ [ Christian Perrier ]
+ * Imported Upstream version 4.2
+ * Debian patch: Fix typo in su.1.xml
+ * Configure userns
+ * Vietnamese translation update
+ * French translation update (Closes: #725793)
+ * German translation update
+ * Update NEWS file
+ * Issue a warning if no manpages have been generated
+ * Regenerate PO files
+ * Regenerate manpages PO files
+ * Imported Upstream version 4.2.1
+
+ [ Serge Hallyn ]
+ * Import new upstream
+ * Patch changes:
+ - Update 501_commonio_group_shadow to work with upstream changes
+ - Update 1010_vietnamese_translation
+ - Drop userns patches which are now all upstream
+
+ [ Balint Reczey ]
+ * Update debian/watch to use GitHub releases
+ * Imported Upstream version 4.4
+ - Fix incorrect integer handling (CVE-2016-6252) (Closes: #832170)
+ * Disable Vietnamese translation patch because it does not apply cleanly
+ * Bump debhelper compat level to 10
+ * ACK NMU by Samuel Thibault dropping the patch which is integrated
+ upstream
+ * Stop build-depending on build-essential dpkg-dev
+ * Tag login package as essential properly
+ * Adopt the package under the Shadow Team's umbrella (Closes: #801707)
+
+ -- Balint Reczey <balint@balintreczey.hu> Fri, 06 Jan 2017 16:19:18 +0100
+
+shadow (1:4.2-3.3) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Apply upstream patch to fix build on hurd-i386. (Closes: #750480)
+
+ -- Samuel Thibault <sthibault@debian.org> Tue, 22 Nov 2016 18:31:28 +0000
+
+shadow (1:4.2-3.2) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Use HTTPS in Vcs-Git.
+ * Stop using hardening-wrapper and instead use /usr/share/dpkg/buildflags.mk.
+ Closes: #836653
+
+ -- Mattia Rizzolo <mattia@debian.org> Sun, 18 Sep 2016 14:42:16 +0000
+
+shadow (1:4.2-3.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Fix error handling in busy user detection. (Closes: #778287)
+
+ -- Bastian Blank <bastian.blank@credativ.de> Thu, 12 Nov 2015 14:33:33 +0000
+
+shadow (1:4.2-3) unstable; urgency=low
+
+ * Enforce hardened builds to workaround cdbs sometimes not building
+ with hardening flags as in 1:4.2-2+b1
+ Thanks to Dr. Markus Waldeck for pointing the issue and Simon Ruderich
+ For providing a working patch.
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 19 Nov 2014 21:59:09 +0100
+
+shadow (1:4.2-2) unstable; urgency=low
+
+ * The "Soumaintrain" release
+ * The "Rigotte de Condrieu" release was 4.2-1
+ * Upload to unstable
+ * Last upload integrates the use of dh_autoreconf which has the same
+ effect then Eric Dorland's patch in 1:4.1.5.1-1.1 NMU to drop the
+ use of automake1.9. Closes: #724434
+
+ [ Samuel Thibault ]
+ * Enable the login package on hurd-any, but without /bin/login, still provided
+ by the hurd package. Closes: #737805.
+ This fix was accidentally forgotten in 1:4.2-1
+
+ [ Josh Triplett ]
+ * use the new pam_exec functionality from pam 1.1.8-1 to implement the
+ dynamic motd, rather than using /run/motd.dynamic from initscripts.
+ This will allow initscripts to drop /etc/init.d/motd.
+ Closes: #741129
+
+ [ Laurent Bigonville ]
+ * Enable libaudit support. Closes: #745774
+
+ [ Trần Ngọc Quân ]
+ * Vietnamese translation update.
+
+ [ Christian Perrier ]
+ * Add a lintian override for newuidmap and newgidmap setuid binaries
+ * Add upstream signing key as debian/upstream-signing-key.asc
+ * Check upstream signing key in debian/watch
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 04 May 2014 19:39:07 +0200
+
+shadow (1:4.2-1) experimental; urgency=low
+
+ [ Nicolas FRANCOIS (Nekral) ]
+ * New upstream release. Fixes:
+ - Invalid free() in su fixed by using strdup(). Thanks to Serge
+ Hallyn for the patch. Closes: #691459
+ - Kill the child process group, rather than just the
+ immediate child; this is needed now that su no
+ longer starts a controlling terminal when not running an
+ interactive shell. Thanks to Colin Watson for the patch.
+ Closes: #713979
+ - German manpages translation update. Closes: #679152
+ - Improve login.defs (typographic errors and better format).
+ Closes: #685415
+ - Russian translation update. Closes: #718356
+ - Do not assume random() is limited by RAND_MAX. Closes: #677275
+ - Support C libraries with unknown fields in struct passwd.
+ Closes: #675824
+ - su: child cleanup is performed before terminating PAM sessions. This
+ avoids anoying "...terminated" messages when PAM module send signal to
+ su during session close. Closes: #670132
+ - vipw/vigr is checking arguments provided after options. Closes: #677812
+ - Updated Japanese translation. Closes: #720004
+ - vipw: Fix error reporting when editor fails. Closes: #688260
+ * Moved to git: replace Vcs-Git in place of Vcs-Svn and adapt
+ Vcs-Browser.
+ * Add pam_loginuid to login PAM settings. Closes: #677441
+ * passwd.install: add new subuid.5 and subgid.5 manpages
+ * debian/rules, debian/control, debian/uidmap.install: create new uidmap
+ package containing the new setuid-root binaries newuidmap and newgidmap
+ Set uidmap as priority optional.
+ * debian/login.su.pam: Enable pam_limits by default. Closes: #705301
+ * debian/rules: Set default editor to sensible-editor for vipw.
+ Closes: #688252
+
+ [ Micah Anderson ]
+ * added debian/patches/userns to enable use of subuids, plus some bugfix
+ patches on top of them, patches from Eric Biederman, pulled from
+ Ubuntu. Closes: #739981
+ * Allow LXC devices (lxc/console, lxc/tty[1234]) in securetty.linux
+ * Update documentation of UMASK: Explain that USERGROUPS_ENAB will modify
+ this default for UPGs. (Closes: #583971)
+ * login.postinst: install a default /etc/subuid and /etc/subgid
+ * fix installation of setuid/setgid/newuidmap/newgid/map man pages
+
+ [ Laurent Bigonville ]
+ * Switch to dpkg-source 3.0 (quilt) format
+ * Add build-dependency against bison
+ * Call dh-autoreconf since we need to regenerate all the autofoo files
+
+ [ Philippe Grégoire ]
+ * Fix 1000_configure_userns to avoid dropping a needed #endif
+ Closes: #744877
+
+ [ Christian Perrier ]
+ * Bump Standards to 3.9.5 (checked)
+ * Use 'set -e' in postinst scripts and not in thei shebang line
+ * Explicitly point to GPL-2 document in debian/copyright
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 22 Apr 2014 09:01:42 +0200
+
+shadow (1:4.1.5.1-1.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+
+ [ Eric Dorland ]
+ * Switch to automake1.11. (Closes: #724434)
+
+ [ Samuel Thibault ]
+ * Enable the login package on hurd-any, but without /bin/login, still provided
+ by the hurd package. Closes: #737805.
+
+ -- Samuel Thibault <sthibault@debian.org> Sun, 16 Mar 2014 20:58:24 +0100
+
+shadow (1:4.1.5.1-1) unstable; urgency=low
+
+ * The "Gruyère" release.
+
+ [ Nicolas FRANCOIS (Nekral) ]
+ * New upstream release:
+ - login: log into utmp(x) but not into wtmp (this is done by pam_lastlog).
+ Log to utmp(x) was broken by the fix for #605329. Closes: 659957
+ - userdel: Fix segfault when userdel removes the user's group.
+ Closes: #660406
+ - manpages: .so links point to paths relative to the top-level manual
+ hierarchy. Closes: #661025
+ - useradd(8): Return code 13 no more documented. Closes: #661802
+ * debian/patches/series, debian/patches/428_grpck_add_prune_option: Removed.
+ The -p option was not documented and was meant to fix consequences of a
+ bug now fixed more than 10 years ago.
+ * debian/shadowconfig.sh: Display issues, but dot not prompt interactively
+ to fix passwd/group/shadow/gshadow issues. Closes: #638263
+ * debian/control: Bump Standards-Version to 3.9.3 (no changes needed).
+ * debian/rules: Simplify setting of hardening flags. cdbs 0.4.103 needed to
+ get hardened version of shadow-utils. Restore previous requirement on
+ dpkg-dev to 1.13.5.
+
+ [ Christian Perrier ]
+ * Complete Polish translation of logoutd(8). Closes: #668880
+ * German translation of manpages completed. Closes: #673234
+
+ [ Roger Leigh ]
+ * Separation of static and dynamic motd components in login PAM module
+ Closes: #669698
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Fri, 25 May 2012 15:42:01 +0200
+
+shadow (1:4.1.5-1) unstable; urgency=low
+
+ * The "Charolais" release.
+
+ [ Nicolas FRANCOIS (Nekral) ]
+ * New upstream release:
+ - su: Fix possible tty hijacking by dropping the controlling terminal when
+ executing a command (CVE-2005-4890). Closes: #628843
+ - userdel: Check the existence of the user's mail spool before trying to
+ remove it. If it does not exist, a warning is issued, but no failure.
+ Closes: #617295
+ - userdel: Do not remove a group with the same name as the user
+ (usergroup) if this group isn't the user's primary group.
+ Closes: #584868
+ - su: Close the PAM session as root (fix issues with pam_mount and
+ pam_systemd). Closes: #580434
+ - Fix several typos in manpages. Thanks to Simon Brandmair.
+ Closes: #628776
+ - userdel error message has been clarified when the user is still
+ executing processes (it used to complain that the user is logged in).
+ Closes: #603315
+ - passwd(1) references chpasswd(8). Closes: #609117
+ - Spaces have been added between options and arguments in the Russian
+ manpages. Closes: #606159
+ - Fix handling of numerical dates in usermod -e. Closes: #621810
+ - usermod: When the shadow file exists but there are no shadow entries, an
+ entry is created if the password is changed and passwd requires a shadow
+ entry, or if aging features are used (-e or -f). Closes: 632461
+ - Added diagnosis for lock failures. Closes: #616167
+ - grpck/pwck: NIS entries were dropped by -s (sort). Closes: #622765
+ - login does not log into utmp(x) and wtmp. This is already done by
+ pam_lastlog. Closes: #605329
+ - groupmod: document that /etc/passwd can be modified by groupmod -g.
+ Closes: #647308
+ - Updated patches
+ + debian/patches/008_login_log_failure_in_FTMP
+ + debian/patches/401_cppw_src.dpatch
+ + debian/patches/402_cppw_selinux
+ + debian/patches/428_grpck_add_prune_option
+ + debian/patches/429_login_FAILLOG_ENAB
+ + debian/patches/463_login_delay_obeys_to_PAM
+ + debian/patches/501_commonio_group_shadow
+ + debian/patches/505_useradd_recommend_adduser
+ + debian/patches/506_relaxed_usernames
+ + debian/patches/508_nologin_in_usr_sbin
+ + debian/patches/523_su_arguments_are_concatenated
+ + debian/patches/523_su_arguments_are_no_more_concatenated_by_default
+ + debian/patches/542_useradd-O_option
+ + debian/patches/900_testsuite_groupmems
+ - debian/patches/008_su_get_PAM_username: Removed, feature supported
+ upstream.
+ - debian/patches/300_CVE-2011-0721: Removed, applied upstream.
+ - Upstream translation updates from Debian BTS:
+ + Brazilian Portuguese. Closes: #622834
+ + Catalan. Closes: #627526, #657763
+ + Danish. Closes: #621330, #657514
+ + German. Closes: #622908, #656503
+ + French. Closes: #623608, #657621
+ + Japanese. Closes: #620978
+ + Kazakh. Closes: #620930
+ + Portuguese. Closes: #623722, #656686
+ + Russian. Closes: #622106, #655194
+ + Spanish (Closes: #630618)
+ + Swedish. Closes: #621126
+ + Simplified Chinese. Closes: #655858
+ - Upstream manpages translation updates from Debian BTS:
+ + French. Closes: #630250, #657622
+ + German. Closes: #628777
+ + Simplified Chinese. Closes: #602264, #655858
+ + Danish added. Closes: #657516
+ + Russian. Closes: #657710
+ * debian/control: mark passwd as 'Multi-Arch: foreign'. Closes: #614321
+ * debian/securetty.linux: Add IBM pSeries console ports. Closes: #597661
+ * debian/securetty.linux: Add serial Console for MIPS Swarm.
+ (http://lists.debian.org/debian-release/2011/02/msg00320.html)
+ * debian/securetty.linux: Add s390/s390x ports ttysclp0. Closes: #647469
+ * debian/securetty.linux: Fixed typo: ttyama -> ttyAMA. Closes: #544184
+ * debian/rules, debian/man.insert, debian/man.insert.sed: Bug #507673 has
+ been closed. It is no more needed to patch the generated manpages. This
+ also fix failures to build twice is a row. Closes: #636047
+ * debian/patches/401_cppw_src.dpatch: Replace progname by Prog. Rename
+ create_backup_file to create_copy. The lock functions do not set errno.
+ Do not report the error string on cppwexit.
+ * debian/patches/401_cppw_src.dpatch, debian/patches/402_cppw_selinux:
+ Synchronize with coding style.
+ * debian/patches/401_cppw_src.dpatch: Detect as well too many and too
+ few arguments.
+ * debian/patches/506_relaxed_usernames: Really check if the user/group
+ name starts with a dash. Also forbid names starting with '+' or '~'.
+ Document the naming policy in useradd.8 / groupadd.8.
+ * debian/patches/506_relaxed_usernames: Also forbid names containing a
+ comma.
+ * debian/patches/901_testsuite_gcov: Do not revert the locale when testing
+ with gcov to avoid coverage false negatives. This does not impact the
+ debian binary package, only the test package.
+ * debian/control: Add Build-Depends on libsemanage1-dev [linux-any]
+ * debian/rules: Do not hard-code CFLAGS and LDFLAGS. Build with all
+ hardening flags set. Closes: #657010
+ * debian/control: depends on dpkg-dev (>= 1.16.1~) for including
+ /usr/share/dpkg/buildflags.mk
+ * debian/control: Standards-Version: bumped to 3.9.2. No changes.
+ * debian/login.defs: Set the default encryption method to SHA512.
+ Closes: #657717
+
+ [ Christian Perrier ]
+ * Use "linux-any" instead of a negated list of architectures in
+ Build-Depends. Closes: #634465
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Sun, 12 Feb 2012 22:27:03 +0100
+
+shadow (1:4.1.4.2+svn3283-3) unstable; urgency=high
+
+ * The "Trappe d'Echourgnac" release.
+ * Fix typo in /etc/pam.d/login comments. Thanks to Ferenc Wagner.
+ Closes: #598717
+ * debian/patches/300_CVE-2011-0721: Fix insufficient input sanitation
+ leading to possible user or group creation in NIS environments.
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Sun, 13 Feb 2011 23:20:05 +0100
+
+shadow (1:4.1.4.2+svn3283-2) unstable; urgency=low
+
+ * The "Bleu du Vercors-Sassenage" release.
+ * Fix backup command line in cron.daily script. Closes: #596283
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Sat, 25 Sep 2010 23:38:39 +0200
+
+shadow (1:4.1.4.2+svn3283-1) unstable; urgency=low
+
+ * The "Bleu de Gex" release.
+ * New upstream unreleased version:
+ - Fix formatting of the login.defs.5 manpage. Closes: #542804
+ - Updated Czech translation. Closes: #548407
+ - Updated Vietnamese translation. Closes: #548065
+ - Remove patches applied upstream:
+ + debian/patches/008_su_no_sanitize_env
+ + debian/patches/483_su_fakelogin_wrong_arg0
+ - Updated patches:
+ + debian/patches/523_su_arguments_are_no_more_concatenated_by_default
+ + debian/patches/542_useradd-O_option
+ - Added support for dates already specified as a number of days since
+ Epoch in useradd, usermod and chage. Closes: #562221
+ - This also allows, in the chage interactive mode, to specify -1 as the
+ expiration date to disable it. Closes: #573018
+ - Fixed parsing of gshadow. This fix password support in newgrp.
+ Closes: #569899
+ - pwck and grpck stop sorting at the first line which begins with a '+'.
+ This will avoid messing up with NIS entries. Closes: #567836
+ - Fix interruption of su, newgrp, vipw with Ctrl-Z. Closes: 530231
+ - mail checking is no more mentioned in login(1) since it is done by PAM.
+ Closes: #470059
+ - The -e (and -c and -m) option was restored in chpasswd (which still uses
+ PAM by default). Closes: #539354
+ - Kazakh translation updated. Closes: #586994
+ - Fixed comma splice in chsh(1). Closes: #582166
+ * debian/securetty.kfreebsd: On GNU/kFreeBSD the serial devices have change
+ from /dev/cuuaX to /dev/ttydX in kernel 6.0. Closes: #544523
+ * debian/securetty.linux: Added support for embedded ARM AMBA PL011 ports
+ (e.g. emulated by QEMU). Closes: #544184
+ * debian/control: Removed Martin Quinson from the Uploaders, on his request.
+ * debian/login.defs: Improve documentation of USERGROUPS_ENAB.
+ Closes: #572687
+ * debian/rules: Added DEB_AUTO_UPDATE_LIBTOOL = pre. Closes: #560633
+ * debian/login.pam: return back to mostly "requisite" for the pam_securetty
+ PAM module, but ignore PAM_USER_UNKNOWN. This will avoid root from
+ entering a password, and will also avoid user enumeration attacks.
+ Mis-typed root login are not protected, only root can be blamed for
+ mis-typing and entering a password on an insecure line. Users willing to
+ protect against mis-typed root login can use "requisite", but will be
+ vulnerable to user enumeration attacks on insecure lines, and should use
+ pam 1.1.0-4 at least. Closes: #574082, #531341
+ * debian/passwd.cron.daily: Handle the backups of the user and group
+ databases so that it can be removed from the standard daily cron job.
+ Closes: #554170
+ * debian/login.defs: Updated description of UMASK (used by pam_umask).
+ * debian/securetty.linux: Reorganize and synchronize with
+ Documentation/devices.txt. This added a lot of TTYs, including the
+ ttyPZ0..3. Closes: #576203
+ * debian/rules, debian/man.insert, debian/man.insert.sed: Hack to avoid bug
+ 507673, causing missing apostrophes in the manpages generated by
+ docbook-xsl (see debian bug 507673).
+ * debian/control: Standards-Version: bumped to 3.8.4. No changes.
+ * debian/passwd.lintian-overrides: Remove old entries relevant for
+ passwd.config.
+ * debian/control: Do not repeat the Section and Priority fields for the
+ binary packages.
+ * debian/rules: Disable new features: --without-acl --without-attr
+ --without-tcb
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Sun, 29 Aug 2010 21:14:12 +0200
+
+shadow (1:4.1.4.2-1) unstable; urgency=low
+
+ * The "Tome des Bauges" release.
+ * New upstream release:
+ - Updated Basque translation. Closes: #535553
+ - Fixed some translatable string. Closes: #525726
+ - Fixed documentation of the short option for --mindays in passwd(1).
+ Closes: #531983
+ - Added support for shells being shell scripts without a shebang.
+ Closes: #479406
+ * debian/securetty.linux: Added Embedded Renesas SuperH ports.
+ Closes: #535927
+ * debian/securetty.linux: Added ttyS2 to ttyS5. Some extension card provide
+ more serial ports, but that should be sufficient until there is a support
+ for regular expressions. Closes: #534244
+ * debian/patches/506_relaxed_usernames: Fixed typo. groupadd(8) should
+ document the restriction on groupnames, not usernames.
+ * debian/login.pam: pam_securetty included as a required module instead of
+ requisite to avoid leak of user name information. Closes: #531341
+ * debian/shadowconfig.sh: Do not run shadowoff() and shadowon() in subshell.
+ This also remove a dependency on bash (even though /bin/sh would have been
+ sufficient). Thanks to Luk for spotting this.
+ * debian/login.dirs, debian/passwd.dirs: Removed usr/share/linda/overrides.
+ * debian/control: Standards-Version: bumped to 3.8.2. No changes.
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Fri, 24 Jul 2009 05:03:23 +0200
+
+shadow (1:4.1.4.1-1) unstable; urgency=low
+
+ * The "Chevrotin" release.
+ * New upstream release:
+ - Fixed typo in the French vipw usage. Closes: #528486
+ - Fixed failure to delete an user (wrongly detected as still logged in).
+ On Linux, userdel checks if the user has some running processes.
+ Otherwise, it still check with utmp if the user is logged in and check
+ if the process indicated by utmp is still running to avoid
+ mis-detection of logged-in users. Closes: #528060
+ - newgrp and sg return the exit status of their child. Closes: #529897
+ - Updated patches:
+ + debian/patches/506_relaxed_usernames
+ * debian/login.defs: Removed comment about MD5_CRYPT. MD5_CRYPT_ENAB is no
+ more used by chpasswd and newusers.
+ * debian/patches/*: Updated patches to the new quilt and shadow versions.
+ * debian/patches/506_relaxed_usernames: usernames with a slash will not only
+ break one option. Move to the discussion on the usernames.
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Fri, 22 May 2009 16:29:58 +0200
+
+shadow (1:4.1.4-3) unstable; urgency=low
+
+ * The "Banonet" release.
+ * debian/login.pam: Really ignore pam_selinux.so failures when the module do
+ not exist. Closes: #528673
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Sat, 16 May 2009 12:11:15 +0200
+
+shadow (1:4.1.4-2) unstable; urgency=low
+
+ * The "Banon" release.
+ * debian/rules, debian/passwd.linda-overrides, debian/login.linda-overrides:
+ Removed linda-overrides files.
+ * debian/rules: Install the lintian overrides with dh_lintian.
+ * debian/control: Raised dependency on debhelper (>= 6.0.7~) for dh_lintian.
+ * debian/compat: Raised to 6
+ * debian/login.postinst: Install /var/log/faillog during initial installs
+ only. This permits admins to disable failed logins recording.
+ Closes: #488420
+ * debian/login.pam: Ignore pam_selinux.so failures when the module do not
+ exist. A required pam_selinux.so makes login fail when the module does not
+ exist (e.g. on architecture without SE Linux support). Closes: #528673
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Thu, 14 May 2009 22:36:34 +0200
+
+shadow (1:4.1.4-1) unstable; urgency=low
+
+ * The "Chambérat" release.
+ * New upstream release:
+ - Updated Czech translation. Closes: #525658
+ - Updated French translation.
+ - Updated German translation. Closes: #527131
+ - Updated Japanese translation.
+ - Updated Korean translation. Closes: #524719
+ - Updated Portuguese translation. Closes: #525531
+ - Updated Russian translation. Closes: #527636
+ - passwd: Report password properties changes if the password is not
+ actually changed. Closes: #525967
+ - Fixed lastlog. 4.1.3 only reported empty logs. Closes: #524873
+ - Remove patches applied upstream:
+ + debian/patches/403_fix_PATH-MAX_hurd
+ - Updated patches:
+ + debian/patches/008_login_log_failure_in_FTMP
+ + debian/patches/401_cppw_src.dpatch
+ + debian/patches/429_login_FAILLOG_ENAB
+ + debian/patches/463_login_delay_obeys_to_PAM
+ - pwck and grpck warn when the shadowed and non-shadowed files contain
+ an entry for the same user or group and the non shadowed file password
+ field is not 'x'. Closes: #501869
+ Other topics raised in this bug were fixed previously.
+ * debian/securetty.linux: Added Freescale i.MX ports. Closes: #527095
+ * debian/securetty.linux: Added some local X displays. See LP #104957. But
+ only a limited set of displays were added.
+ * debian/rules, debian/passwd.newusers.pam, debian/passwd.chpasswd.pam:
+ Install the newusers and chpasswd PAM service configuration files.
+ newusers and chpasswd now use PAM to update the passwords.
+ Closes: #525153
+ * debian/login.pam: Updated support for SELinux. Closes: #527106
+ * debian/control: Standards-Version bumped to 3.8.1. No changes.
+ * debian/control: Changed gnome-doc-utils dependency to >= 0.4.3 (instead
+ of >= 0.4.3-1)
+ * debian/control: Added ${misc:Depends} to the passwd's Depends and login's
+ Pre-Depends.
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Mon, 11 May 2009 00:25:11 +0200
+
+shadow (1:4.1.3.1-1) unstable; urgency=low
+
+ * The "Le Puant Macéré" release.
+ Sorry for the lack of cheese name in 1:4.1.3-1. At least this one should
+ count for two.
+ * New upstream release:
+ - Fixed wrong parsing of octal permissions. This impacted login (permission
+ of the TTYs, UMASK, ERASECHAR or KILLCHAR) in release 1:4.1.3-1 only.
+ Closes: #524139, #524258
+ - removed debian/patches/200_bin_nb: Applied upstream.
+ - removed debian/patches/302_vim_selinux_support: Applied upstream.
+ - Fixed login segfault when called without a username. Closes: #524193
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Wed, 15 Apr 2009 23:59:06 +0200
+
+shadow (1:4.1.3-1) unstable; urgency=low
+
+ * The "" release.
+ * New upstream release:
+ - Fix possible login DOS. Closes: #505071
+ - Fix gpasswd and username with 32 characters. Closes: #508785
+ - Fix typo in nologin(8). Closes: #513252
+ - Remove old features from passwd(1). Closes: #499578
+ - login: Close passwd while waiting for exit. Closes: #474318
+ - login: fix the count of login failures. Closes: #498788
+ - Remove patches applied upstream (4.1.2):
+ + debian/patches/434_login_stop_checking_args_after--
+ + debian/patches/491_configure.in_friendly_selinux_detection
+ + debian/patches/487_passwd_chauthtok_failed_message
+ + debian/patches/406_vipw_resume_properly
+ + debian/patches/414_remove-unwise-advices
+ + debian/patches/300_SHA_crypt_method
+ + debian/patches/301_manpages_missing_options
+ + debian/patches/415_login_put-echoctl-back
+ + debian/patches/431_su_uid_0_not_root
+ - Remove patches applied upstream (4.1.3):
+ + debian/patches/200_Czech_binary_translation
+ + debian/patches/302_remove_non_translated_polish_manpages
+ + debian/patches/494_passwd_lock-no_account_lock
+ + debian/patches/200_Czech_binary_translation
+ + debian/patches/494_passwd_lock-no_account_lock
+ - Updated patches:
+ + debian/patches/431_su_uid_0_not_root
+ + debian/patches/463_login_delay_obeys_to_PAM
+ + debian/patches/008_su_get_PAM_username
+ + debian/patches/302_vim_selinux_support
+ + debian/patches/008_login_log_failure_in_FTMP
+ + debian/patches/429_login_FAILLOG_ENAB
+ + debian/patches/428_grpck_add_prune_option
+ + debian/patches/401_cppw_src.dpatch
+ + debian/patches/506_relaxed_usernames
+ + debian/patches/463_login_delay_obeys_to_PAM
+ + debian/patches/542_useradd-O_option
+ - Translations
+ + New Kazakh translation. Closes: #517809
+ + Updated Slovak translation. Closes: #523621
+ * debian/patches/454_userdel_no_MAIL_FILE: Patch removed. If MAIL_FILE is
+ defined, the mailbox is not in MAIL_SPOOL_DIR.
+ * debian/patches/506_relaxed_usernames: Use an extra paragraph for the note
+ on username with a '/'.
+ * debian/patches/504_undef_USE_PAM.nolibpam,
+ debian/patches/504_undef_USE_PAM.dpatch, debian/rules: Patches removed.
+ Replaced by the --disable-account-tools-setuid configure option.
+ * debian/control: changed the "Replaces" on manpages-zh to a versioned
+ one on 1.5.1-1
+ * debian/control: drop all Replaces on manpages-* when the version is
+ prior to Etch
+ * Versioned Replaces on manpages-tr (<<1..5) as conflicting manpages have
+ been removed in that package
+ * debian/patches/402_cppw_selinux: Add SE Linux support for cppw / cpgr.
+ * debian/patches/900_testsuite_groupmems, debian/patches/901_testsuite_gcov:
+ Added patches, only intended to be used in the testsuite.
+ * debian/securetty.linux: Added ttyPZ0, ttyPZ1, ttyPZ2, ttyPZ3 for PowerMac
+ machines. Closes: #511739
+ * debian/patches/579_chowntty_debug: Removed. With the fix for 505071 and
+ 505271, this additional debug information is no more needed.
+ * debian/patches/507_32char_grnames.dpatch: Patch removed. Replaced by the
+ --with-group-name-max-length=32 configure option.
+ * debian/patches/592_manpages_typos: No more needed.
+ * debian/patches/401_cppw_src.dpatch: Call fsync before closing the backup
+ file descriptor. This ensures that the backup file will be available on
+ the storage medium.
+ * debian/securetty.linux: Removed devfs devices. Usage of devfs enabled
+ kernel in Lenny was not supported. Closes: #511961
+ * debian/login.defs: Added /usr/local/games/ to ENV_PATH (for regular
+ users). Closes: #487379
+ * debian/patches/200_bin_nb: Updated Norwegian Bokmål translation.
+ Closes: #523798
+ * debian/login.defs: Update GID_MIN to 1000. This is more consistent with
+ UID_MIN, SYS_GID_MAX and the usage of the same ID for UID and GIDs. This
+ should also be more consistent with the assignment of system group IDs
+ starting from GID_MAX and going down.
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Tue, 14 Apr 2009 23:33:22 +0200
+
+shadow (1:4.1.1-4) unstable; urgency=low
+
+ * The "Rocamadour" release.
+ * debian/patches/302_remove_non_translated_polish_manpages,
+ debian/patches/series: Remove the (untranslated) su.1 and login.1 polish
+ translation. Closes: #491460
+ * debian/patches/506_relaxed_usernames: Document that the naming policy is
+ also used for the group names policy. Differentiate the Debian
+ constraints in a separate paragraph. Added documentation of the username
+ length restriction. Closes: #493230
+ * debian/patches/507_32char_grnames.dpatch: Update the documentation of the
+ group length restriction. Closes: #493230
+ * debian/login.pam: Replace the "multiple" option of pam_selinux by
+ "select_context". This requires PAM 1.0.1, but is commented.
+ Closes: #493181
+ * debian/patches/494_passwd_lock-no_account_lock: Fix typo (missing
+ parenthesis). Thanks to Moray Allan.
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Fri, 15 Aug 2008 12:36:15 -0300
+
+shadow (1:4.1.1-3) unstable; urgency=low
+
+ * The "Morbier" release.
+ * debian/patches/302_vim_selinux_support: Add SE Linux support to vipw/vigr.
+ Thanks to Russell Coker. Closes: #491907
+ * debian/patches/494_passwd_lock-no_account_lock: Restore the previous
+ behavior of passwd -l (which changed in #389183): only lock the user's
+ password, not the user's account. Also explicitly document the
+ differences. This restores a behavior common with the previous versions of
+ passwd and with other implementations. Closes: #492307
+ * debian/patches/494_passwd_lock-no_account_lock: Add a reference to
+ usermod(8) in passwd(1). Closes: #412234
+ * debian/login.pam: Enforce a fail delay to avoid login brute-force.
+ Closes: #443322
+ * debian/login.pam: Indicate why the pam_securetty module is used as a
+ requisite module and mentions the possible drawbacks. Closes: #482352
+ * debian/login.defs: Do not mention the libpam-umask package (the module is
+ now provided by libpam-modules). Closes: #492410
+ * debian/patches/200_Czech_binary_translation: Updated Czech translation.
+ Thanks to Miroslav Kure. Closes: #482823
+ * debian/securetty.linux: Add the PA-RISC mux ports (ttyB0, ttyB1).
+ Closes: #488515
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Sat, 26 Jul 2008 10:12:46 +0200
+
+shadow (1:4.1.1-2) unstable; urgency=low
+
+ * The "Brie de Meaux" and "Brie de Melun" double cheese release.
+ * Backported patches from upstream
+ - debian/patches/300_SHA_crypt_method:
+ This fixes bugs in the SHA encryption method that force the salt to have
+ 8 bytes (instead of a random length between 8 and 16 bytes), and force
+ the number of SHA rounds to be equal to the lowest limit (at least 1000
+ SHA rounds).
+ - debian/patches/301_manpages_missing_options:
+ This add the missing documentation of options in useradd, groupadd, and
+ newusers.
+ * Tag patches already applied upstream
+ - debian/patches/487_passwd_chauthtok_failed_message
+ - debian/patches/406_vipw_resume_properly
+ - debian/patches/008_su_get_PAM_username
+ - debian/patches/491_configure.in_friendly_selinux_detection
+ - debian/patches/434_login_stop_checking_args_after--
+ - debian/patches/414_remove-unwise-advices
+ * Added description of new variables in /etc/login.defs:
+ - SYS_UID_MIN, SYS_UID_MAX, SYS_GID_MIN, SYS_GID_MAX
+ - ENCRYPT_METHOD
+ - SHA_CRYPT_MIN_ROUNDS, SHA_CRYPT_MAX_ROUNDS
+ * New Debian Policy:
+ - debian/control: Bump Standards-Version to 3.8.0 (no changes needed).
+ - debian/README.source: Document how to patch the upstream source, how to
+ use quilt, how to package a new upstream and how to use the testsuite.
+ * debian/patches/505_useradd_recommend_adduser: Fix typo: userdel is used to
+ remove an user, not to add one. Closes: #475795
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Fri, 13 Jun 2008 01:27:16 +0200
+
+shadow (1:4.1.1-1) unstable; urgency=low
+
+ * New upstream release. This closes the following bugs:
+ - Fix errors when gpasswd is called without a gshadow file.
+ Closes: #467236, #467488
+ - Fix newgrp segfault when the primary group is not listed in /etc/groups.
+ Closes: #461670
+ - Fix infinite loop in usermod when two groups have the same name.
+ Closes: #470745
+ - Make SE Linux tests more strict, when the real UID is 0 SE Linux checks
+ will be performed. Closes: #472575
+ - Option --password added to groupadd / groupmod (like useradd / usermod).
+ Closes: #445484
+ - Remove patches applied upstream:
+ + debian/patches/451_login_PATH
+ + debian/patches/462_warn_to_edit_shadow
+ + debian/patches/467_useradd_-r_LSB
+ + debian/patches/466_fflush-prompt
+ + debian/patches/480_getopt_args_reorder
+ + debian/patches/496_login_init_session
+ + debian/patches/408_passwd_check_arguments
+ + debian/patches/412_lastlog_-u_numerical_range
+ + debian/patches/407_adduser_disable_PUG_with-n
+ - Updated patches:
+ + debian/patches/504_undef_USE_PAM.nolibpam
+ $(LIBCRYPT) $(LIBSKEY) $(LIBMD) are no more included in libshadow.la.
+ Avoid link to unneeded libraries (spotted by dpkg-shlibdeps).
+ + debian/patches/501_commonio_group_shadow
+ + debian/patches/429_login_FAILLOG_ENAB
+ + debian/patches/542_useradd-O_option
+ + debian/patches/401_cppw_src.dpatch
+ + debian/patches/428_grpck_add_prune_option
+ - Updated translations:
+ + Basque. Closes: #473555
+ + German. Closes: #473646
+ + Italian. Closes: #472951
+ + Korean. Closes: #471935
+ + Portuguese. Closes: #472244
+ + Russian. Closes: #472506
+ + Slovak. Closes: #471802
+ + Turkish. Closes: #473279
+ * debian/watch: Add a watch file for shadow.
+ * debian/rules, debian/recode_manpages.sh: Do not recode the manpages.
+ Keep them in UTF-8.
+ * debian/rules, debian/control: login (>= 970502-1) was already provided
+ by login in Hamm. libpam-modules (>= 0.72-5) was already provided by
+ libpam-modules in Potato. libpam-runtime (>= 0.76-14) was already provided
+ by libpam-runtime in Sarge (now oldstable). Simplify the dependencies.
+ * debian/control: Move the dependency on libpam-modules from Depends to
+ Pre-Depends. The login package is Essential, and without libpam-modules,
+ login or su are not functional. Thanks to Steve Langasek for pointing this
+ out.
+ * debian/control: There's no need for a dependency on login (now that it is
+ unversionned; see above) in the passwd package.
+ * debian/control: The passwd's Replaces on manpages-de can be versionned
+ again. The su(1) manpage was removed from manpages-de.
+ * debian/securetty.linux: Added ttyUSB0, ttyUSB1, ttyUSB2, and MPC5200
+ serial ports (ttyPSC0, ttyPSC1, ttyPSC2, ttyPSC3, ttyPSC4, ttyPSC5).
+ Closes: #461374
+ * debian/control: Change XS-X-Vcs-Svn to Vcs-Svn. Update the link to the
+ new repository layout. Add a Vcs-Browser field.
+ * debian/control: Added Homepage field.
+ * debian/passwd.postrm: Removed (was empty).
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Thu, 03 Apr 2008 01:31:10 +0200
+
+shadow (1:4.1.0-2) unstable; urgency=low
+
+ * The "Bleu des Causses" release
+ * Unversion the conflict with manpages-de for login, as it also provides
+ a German manpage for su(1). Closes: #460508
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 13 Jan 2008 18:52:46 +0100
+
+shadow (1:4.1.0-1) unstable; urgency=low
+
+ [ Nicolas FRANCOIS (Nekral) ]
+ * The "Bleu d'Auvergne" release
+ * New upstream release. This closes the following bugs:
+ - usermod: Make usermod options independent of the argument order.
+ Closes: #451518
+ - login: Improve logging of login when the user's passwd entry could not
+ be retrieved. Closes: #451521
+ - Updated Russian translations. Thanks to Yuri Kozlov <kozlov.y@gmail.com>.
+ Closes: #452291, #452296
+ - Section of newgrp fixed in the gshadow manpage. Closes: #454485
+ - Remove patches applied upstream:
+ + 468_duplicate_passwd_struct_before_usage
+ + 495_salt_stack_smash
+ + 397_non_numerical_identifier
+ + 405_su_no_pam_end_before_exec
+ + 493_pwck_no_SHADOWPWD
+ + 497_newgrp_primary_group
+ + 409_man_generate_from_PO
+ + 410_newgrp_man_mention_sg
+ + 411_chpasswd_document_no_pam
+ + 494_passwd_lock
+ + 417_passwd_warndays
+ - Updated patches:
+ + debian/patches/504_undef_USE_PAM.dpatch
+ MD5_CRYPT_ENAB is back in login.defs to define the default crypt
+ algorithm. It is tagged as deprecated and ENCRYPT_METHOD is
+ recommended instead. New algorithms are also available.
+ Closes: #447747
+ * Debian packaging fixes:
+ - debian/rules: compile with -W -Wall
+ - debian/rules: large files are now supported by configure. Remove
+ -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 from
+ CFLAGS.
+ - 479_chowntty_debug was debian specific. Renamed to 579_chowntty_debug
+ - Remove (not applied patch) 419_time_structures.dpatch. All its chunks
+ are already applied upstream (with some differences), except one chunk
+ which comes from 008_login_log_failure_in_FTMP. Fix
+ 008_login_log_failure_in_FTMP. This should fix some bugs causing invalid
+ faillog entries on 64 bit architectures with 32 bit compatibility.
+ - debian/securetty.linux: Add ttyS1. Better comments for the ttyS and xen
+ consoles. Add a note for the devfs consoles. They are no more needed for
+ most users. Closes: #454584
+
+ [ Christian Perrier ]
+ * debian/control
+ - Updated to Standards: 3.7.3.0 (checked, no change needed)
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 12 Jan 2008 20:40:02 +0100
+
+shadow (1:4.0.18.2-1) unstable; urgency=low
+
+ * The "Vacherin" release.
+ * New upstream version. This closes the following bugs:
+ - gpasswd manpage improvements. Closes: #445480
+ - support for the resource limits "max nice value", and "max real time
+ priority" was added upstream. Note that it does not impact Debian
+ because shadow is compiled with PAM support on Debian. Closes: #442334
+ - Finnish translation. Closes: #448233
+ - Remove patches applied upstream:
+ + 438_su_GNU_origin
+ + 433_shadow.5-typo_312430
+ + 402-clarify_usermod_usage
+ + 498_man_nonpam_undefined
+ + 301_passwd-typo-383216
+ + 101_ja
+ + 102_de-fix-sorry
+ + 404_man-fr
+ + 103_man-de
+ + 104_man-sv
+ + 302_su_man_mention_sg
+ + 303_wording_fixes_in_su_man
+ + 201_fix_man_su_fr
+ + 202_it_man_uses_gettext
+ + 413_no-sorry-in-passwd
+ + 416_man-fr_newgrp
+ - The upstream tarball is now built with gettext 0.16. Remove
+ + 499_gettext-0.15
+ - Significant changes to patches
+ + 397_non_numerical_identifier
+ usermod.c was already patched upstream; useradd.c was not.
+ + 467_useradd_-r_LSB
+ Simplifications. There should be no changes.
+ + 409_man_generate_from_PO
+ The Italian PO was added upstream. Patch the Italian Makefile.
+ * Upstream bugs not fixed in upstream's CVS:
+ - debian/securetty.linux: Added xvc0 and hvc0 consoles to the Linux's
+ consoles where root login is allowed. (triggered by #423389)
+ - debian/patches/417_passwd_warndays: Correct the long option name for
+ "-w" from "warning" to "warndays". Closes: #445481
+ * Upstream translation updates:
+ - debian/patches/105_zh_CN: Update Simplified Chinese translation
+ Closes: #431287
+ - debian/patches/416_man-fr_newgrp: Fix a typo in the French newgrp man
+ page. Thanks to Nicolas Aupetit. Closes: #439090
+ * Debian packaging fixes:
+ - Fix typos in useradd default file. Thanks to Justin Pryzby.
+ - Fix typos in cppw.8. Thanks to Justin Pryzby. Closes: #447757
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 30 Oct 2007 06:11:40 +0100
+
+shadow (1:4.0.18.1-11) unstable; urgency=low
+
+ * The "Baguette laonnaise" release
+ * Reactivate ECHOCTL in login after it disappeared in 4.0.8. Closes: #429758
+ * Disable audit support. This fixes a failure to build from source.
+ Reported by Sesse
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 22 Jun 2007 19:33:01 +0200
+
+shadow (1:4.0.18.1-10) unstable; urgency=low
+
+ * The "Trappe d'Échourgnac" release
+ * Upstream bugs fixed in upstream's CVS:
+ - 302_su_man_mention_sg: mention sg(1) in su man page. Closes: #396690
+ - 303_wording_fixes_in_su_man: minor wording fixes in su(1)
+ * Upstream bugs not fixed in upstream's CVS:
+ - 410_newgrp_man_mention_sg: mention sg(1) in newgrp man page
+ - 201_fix_man_su_fr: fix translation error in french translation for su(1)
+ - 202_it_man_uses_gettext: switch italian manpages to gettext. This will
+ fix missing paragraphs in translated manpages. Closes: #425689
+ - 411_chpasswd_document_no_pam: Document that chgpasswd do not use PAM to
+ update the passwords. Thus functionnalities provided by PAM modules are
+ not present in chgpasswd (e.g. writting the old password in
+ /etc/security/opasswd). Closes: #396726
+ - 412_lastlog_-u_numerical_range: allow numerical UID and range of IDs in
+ argument to lastog -u. Closes: #259494
+ - 413_no-sorry-in-passwd: No longer print 'Sorry' when something
+ fails in passwd, su and newgrp. Closes: #384164
+ - 414_remove-unwise-advices: Remove not so wise advices about choosing
+ passwords. Closes: #386818
+ - 494_passwd_lock: set the account expiry field when using
+ "passwd -l/-u". Closes: #389183
+ * Debian packaging fixes:
+ - 506_relaxed_usernames: do not allow spaces in usernames. This was at
+ least broken with username starting with a space or tabulation (the user
+ can be added but not removed). Closes: #400683
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 17 Jun 2007 07:38:14 +0200
+
+shadow (1:4.0.18.1-9) unstable; urgency=low
+
+ * The "Etorki" release
+ * Fix debian/copyright and mention that the upstream site
+ is "temporarily?) no longer available. Closes: #423956
+ Add the various copyrights from Marek, Andrzej and Tomasz
+ (deduced from the ChangeLog entries as upstream doesn't have an
+ explicit copyright file)
+ * Debian packaging fixes:
+ The 3 following entries fix the FTBFS when built twice in a row.
+ Closes: #424257
+ - 498_man_nonpam_undefined: Do not patch the generated man/it/Makefile.in.
+ - 409_man_generate_from_PO: Generate the translated man pages at build
+ time.
+ - 200_regenerate_manpages: No more needed.
+
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 15 May 2007 23:40:13 +0200
+
+shadow (1:4.0.18.1-8) unstable; urgency=low
+
+ * The "Feuille de Dreux" release
+ * New upstream version
+ * Debian packaging fixes:
+ - 505_useradd_recommend_adduser: Recommend using adduser and deluser for
+ regular operations. Closes: #406046
+ - Versioned Build-Depends on gnome-doc-utils as we use the "-l"
+ switch of xml2po. Closes: #390110
+ - Remove conflicts for packages that are only in Debian releases prior
+ to sarge:
+ - passwd: shadow-passwd, pam-apps, suidregister (<< 0.50), debconf (<< 0.5)
+ - login: shadow-login, pam-apps, secure-su, suidregister (<< 0.50)
+ - Remove all debconf configuration. This is now done in D-I and is
+ no longer useful on regular systems. Closes: #386529
+ - Remove Replaces for packages that are only in Debian releases prior
+ - passwd: manpages (<=1.15-2), manpages-pl (<= 20020406-1)
+ - login: shadow-login, shadow-passwd, shellutils (<< 2.0-2), manpages-pl (<= 20020406-1)
+ - Remove unneeded Build-Depends: bzip2, file, texinfo, libpam-runtime
+ - /etc/default/useradd: Mentions the creation of primary user groups is
+ neither -n nor -g are specified. See also 407_adduser_disable_PUG_with-n
+ - no longer include /usr/bin/X11 in defaults PATH variable. Closes: #395890
+ - set debhelper compatibility to 5 through debian/compat
+ - ignore a false positive lintian warning about
+ possible-missing-colon-in-closes in line 668 of the changelog
+ * Upstream bugs not yet fixed in upstream releases or CVS:
+ - 493_pwck_no_SHADOWPWD: SHADOWPWD no more exist.
+ pwck do not detect missing users in /etc/shadow.
+ - 466_fflush-prompt: Fix compilation error.
+ One call to yes_or_no was forgotten because it was in
+ commented code (which is now enabled).
+ - 406_vipw_resume_properly: Resume correctly after ^Z
+ Thanks to Dean Gaudet for the patch and report. Closes: #414542
+ - 497_newgrp_primary_group: Do not request a password when a user uses
+ newgrp to switch to her primary group. Closes: #396691
+ - 407_adduser_disable_PUG_with-n: Add option -n to useradd to disable the
+ creation of primary user groups. Closes: #416835
+ - 408_passwd_check_arguments: Check the passwd arguments and fail with the
+ usage message if there are more than one non option arguments (i.e.
+ usernames). Closes: #410268
+ * Upstream bugs fixed in upstream releases or CVS:
+ - 497_non_numerical_identifier moved as 397_non_numerical_identifier
+ because upstream applied it
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 07 May 2007 14:53:13 +0200
+
+shadow (1:4.0.18.1-7) unstable; urgency=low
+
+ * The "Pélardon" release
+ * Debian packaging fixes:
+ - debian/recode_manpages.sh: Recode the Swedish manpages to ISO-8859-1.
+ Closes: #403210
+ - 200_regenerate_manpages: Manually generate the man pages. This fixes the
+ formatting of some pages (e.g. passwd.5); permits to propagate the Debian
+ changes to the translated manpages; and to benefit from the fixes in the
+ Swedish manpages (see 104_man-sv).
+ * Upstream bugs fixed upstream:
+ - 104_man-sv: Fix Swedish manpages's PO encoding (some characters were
+ converted twice to UTF-8).
+ * Upstream bugs or fixes not yet fixed in upstream releases or CVS:
+ - 405_su_no_pam_end_before_exec: Avoid terminating the PAM library in the
+ forked child. This is done later in the parent after closing the PAM
+ session. With pam_krb5, this allow users to reuse the cached credential
+ in the forked shell. Closes: #412061
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 27 Feb 2007 06:51:44 +0100
+
+shadow (1:4.0.18.1-6) unstable; urgency=low
+
+ * The "Vieux Lille" release
+ * Upstream translation updates:
+ - debian/patches/404_man-fr: Fix the French translation of
+ passwd.1. Closes: #395537
+ * Upstream bugs or fixes not yet fixed in upstream releases or CVS:
+ - 403_fix_PATH-MAX_hurd: fixed glibc error on Hurd by not freeing f
+ unconditionnally. Thanks to Michael banck for the patch fix
+ Closes: #402002
+ * Upstream bugs fixed upstream:
+ - 103_man-de: early German translation of manpages. Updates
+ passwd manpage. Closes: #378899
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 7 Dec 2006 19:10:50 +0100
+
+shadow (1:4.0.18.1-5) unstable; urgency=high
+
+ * The "Chaource" release
+ * Debconf translation updates.
+ - Wolof.
+ * Debian packaging fixes:
+ - 401_cppw_src.dpatch:
+ Fix cppw, which copied to /etc/passwd even with the -s switch.
+ Closes: #394182
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 21 Oct 2006 23:33:20 +0200
+
+shadow (1:4.0.18.1-4) unstable; urgency=low
+
+ * The "Brocciu" release
+ * Debconf translation updates. Closes: #392193
+ - Brazilian Portuguese.
+ - Finnish.
+ - Hindi.
+ - Hungarian.
+ - Indonesian.
+ - Norwegian Bokmål.
+ - Slovak.
+ - Turkish.
+ - Vietnamese.
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 17 Oct 2006 22:52:54 +0200
+
+shadow (1:4.0.18.1-3) unstable; urgency=low
+
+ * The "Gris de Lille" release
+ * Debian packaging fixes:
+ - debian/control: Use XS-X-Vcs-Svn: field
+ - debian/login.pam: add (commented) SELinux enabling entry
+ to prepare the system for SELinux. Closes: #387480
+ * Upstream translation updates:
+ - debian/patches/102_de-fix-sorry: Fix the translation of "Sorry" in
+ German. Closes: #383045
+ * Debconf translation updates:
+ - Spanish. Closes: #383812
+ - Hebrew. Closes: #387635
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 17 Sep 2006 08:54:22 +0200
+
+shadow (1:4.0.18.1-2) unstable; urgency=low
+
+ * The "Picodon" release
+ * Upstream translation updates:
+ - debian/patches/101_ja: Japanese. Closes: #381873
+ * Debconf translation updates:
+ - Spanish. Closes: #383812
+ * Upstream bugs fixed in upstream releases or CVS:
+ - debian/patches/301_passwd-typo-383216: fix a typo in passwd.1
+ Closes: #383216
+ * Upstream bugs not yet fixed in upstream releases or CVS:
+ - build with new gettext 0.15. This requires building with automake 1.9
+ and a change in po/Makefile.in.in: 499_gettext-0.15. Closes: #384631
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 25 Aug 2006 19:12:25 +0200
+
+shadow (1:4.0.18.1-1) unstable; urgency=low
+
+ * The "Laguiole" release
+ * New upstream version.
+ * Upstream bugs not yet fixed in upstream releases or CVS:
+ - 497_non_numerical_identifier: In useradd and usermod, only numerical
+ group identifiers were supported.
+ Closes: #381394, #381399, #381404, #381408, #381448
+ - 498_man_nonpam_undefined: Fix a build failure.
+ * Debian specific fixes:
+ - 496_login_init_session: only start a new session if we are init.
+
+ -- Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net> Fri, 4 Aug 2006 18:50:53 +0200
+
+shadow (1:4.0.18-1) unstable; urgency=low
+
+ * The "Selles sur Cher" release
+ * New upstream version. This closes the following bugs:
+ - Fix the usermod's -a option. It should not take an
+ argument, -a it uses the -G argument. Closes: #380645
+ - Galician translation. Closes: #378793
+ - Basque translation. Closes: #378794
+ - Russian translation. Closes: #378911
+ * Debian packaging fixes:
+ - login.defs: do not mention GETPASS_ASTERISKS since it is no more used.
+ Thanks to Mike Frysinger for noticing it.
+ - 506_relaxed_usernames: Fix the regular expression of the accepted user
+ name in the useradd man page. Closes: #377844
+ - Add Nicolas FRANCOIS to the Uploaders.
+ - Remove the NEWS entry for version 1:4.0.17-1. It was meant to warn
+ testing's users and is not meant for Etch users.
+ - manpages-it 0.3.4-3 do not collides with passwd anymore. Update the
+ Replaces field accordingly.
+ * Debconf translation updates:
+ - Japanese translation updated. Closes: #379954
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 16 Jul 2006 11:41:24 +0200
+
+shadow (1:4.0.17-2) unstable; urgency=low
+
+ * The "La Marseillaise 2006" release
+ * Upstream bugs not yet fixed in upstream releases or CVS:
+ - 495_salt_stack_smash: chpasswd/chgpasswd does not break if compiled
+ with SSP. Closes: #377825
+ - 496_login_init_session: Make login initialize a session so that
+ ^C and ^Z work when used while booting with "init=/bin/login"
+ Closes: #374547
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 14 Jul 2006 13:05:53 +0200
+
+shadow (1:4.0.17-1) unstable; urgency=low
+
+ * The "Sainte-maure de Touraine" release
+ * New upstream version. This closes the following bugs:
+ - Russian translation. Closes: #374998
+ - Khmer translation. Closes: #375065
+ - Nepali translation. Closes: #375485
+ - Korean translation. Closes: #375243
+ - Vietnamese. Closes: #375086
+ * Debian specific fixes:
+ - 503_shadowconfig.8: fix a typo in the French manpage (README.debian
+ instead of README.Debian). Thanks to Mohammed Adnène Trojette.
+ - 508_nologin_in_usr_sbin: keep nologin in /usr/sbin.
+ * Debian packaging fixes:
+ - passwd.postinst: Modified call to shadowconfig as "install" is not
+ a documented argument to postinst. Thanks to Justin Pryzby for
+ spotting that one and proposing a fix. Closes: #374457
+ - passwd.templates: use "for internal use" as template for untranslatable
+ templates which will save some lintian warnings with future
+ versions of lintian
+ * Debconf translation updates:
+ - Lituanian translation updated. Closes: #374313
+ - Dutch translation updated. Closes: #377003
+ * Upstream bugs fixed upstream:
+ - debian/patches/301_useradd-375040: create the mail spool files during
+ user creation when CREATE_MAIL_SPOOL=yes. Closes: #375040
+ Thanks to Stephen Gran for helping out with the correct patch.
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 12 Jul 2006 22:55:13 +0200
+
+shadow (1:4.0.16-2) unstable; urgency=low
+
+ * The "Valençay" release
+ * Upstream bugs or fixes not yet fixed in upstream releases or CVS:
+ - 403_fix_PATH-MAX_hurd: fix FTBFS on Hurd. Thanks to Michael Banck
+ for the fix. Closes: #372155
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 10 Jun 2006 15:31:12 +0200
+
+shadow (1:4.0.16-1) unstable; urgency=low
+
+ * The "Cabécou" release
+ * New upstream release
+ * Added build dependency on gnome-doc-utils so that xml2po is available
+ for building
+ * Debian specific fixes:
+ - 504_undef_USE_PAM.dpatch: do not use PAM for chgpasswd
+ Closes: #369439
+ - debian/rules, debian/passwd.install: cleanup
+ The limits.5 man page is no more installed by upstream. (It wasn't
+ neither on Debian).
+ - no more distribute the login.access.5 and porttime.5 man pages.
+ (not used when login uses PAM)
+ - 592_manpages_typos: add another fix for the XML man pages (useradd.8)
+ It is needed by the current version of docbook-xsl in Debian (1.68).
+ Closes: #369806
+ * Debian packaging fixes:
+ - ignore some lintian warnings about templates writing style for
+ untranslatable templates
+ * Read /etc/default/locale in su PAM config file
+ Closes: #369391
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 7 Jun 2006 20:23:36 +0200
+
+shadow (1:4.0.15-10) unstable; urgency=high
+
+ * The "Emmental" release
+ * Upstream bugs or fixes fixed in upstream releases or CVS:
+ - Fix for CERT VU#312962
+ + check the return value of fchown before fchmod when the mailbox is
+ created by useradd
+ + The patch also uses login.defs::MAIL_DIR instead of /var/mail.
+ * Reading /etc/default/locale is back in login PAM config file
+ after brainstorming with Steve. Closes: #368102
+ * Debian specific fixes
+ - Patches cleanup:
+ + remove 004_configure.in.dpatch (not used since a long time).
+ + rename 404_undef_USE_PAM.nolibpam and 404_undef_USE_PAM.dpatch to
+ 504_xxx as they are debian specific.
+ + rename 407_32char_grnames.dpatch to 507_xxx for the same reason.
+ + rename 432_login_cancel_timout_after_authentication to 332_xxx,
+ because it is already applied upstream.
+ + Likewise for 461_keep_sticky_bit_for_dirs, 486_chgpasswd.8 and
+ 492_correct_exit_status_for_run_commands
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 18 May 2006 01:44:56 -0500
+
+shadow (1:4.0.15-9) unstable; urgency=low
+
+ * The "Coulommiers" release
+ * Debian specific fixes
+ - 506_relaxed_usernames: better wording of the explanations about
+ the constraints on usernames in Debian. Closes: #364909
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 17 May 2006 21:23:36 -0500
+
+shadow (1:4.0.15-8) unstable; urgency=low
+
+ * The "Tomme de Savoie" release
+ * Upstream bugs or fixes not yet fixed in upstream releases or CVS:
+ - 487_passwd_chauthtok_failed_message: Add an informative message
+ When password couldn't be changed in passwd when chauthok fails
+ Closes: #352137
+ * Debian packaging fixes:
+ - stop reading /etc/default/locale in addition to /etc/environment
+ in the PAM configuration file for login and su
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 16 May 2006 20:09:17 -0500
+
+shadow (1:4.0.15-7) unstable; urgency=low
+
+ * The "Abondance" release
+ * Fix UNRELEASED in the NEWS.Debian file. Closes: #364752
+ * debian/control
+ - Updated to Standards: 3.7.2.0 (checked, no change needed: we were
+ already compliant)
+ * Debconf translation updates:
+ - Dutch translation updated. Closes: #363690
+ * Debian specific fixes:
+ - 406_good_name: Better description of what usernames are recommanded or
+ allowed in useradd(8). Thanks to Reuben Thomas. Closes: #364909
+ * Upstream bugs or fixes fixed in upstream releases or CVS:
+ - 303_usermod_-a_in_man. Document -a in usermod man page. Closes: #365091
+ - 402-clarify_usermod_usage. Move -a close to -G. Closes: #363033
+ - Programs translation updates or fixes:
+ - 351_nl-359913: Fix typo in Dutch translation. Closes: #359913
+ - 352_id-361186: Complete Indonesian translation. Closes: #361186, #361187
+ - 353_hu-362749: New Hungarian translation. Closes: #362749
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 4 May 2006 20:53:35 +0200
+
+shadow (1:4.0.15-6) unstable; urgency=high
+
+ * The "Beaufort" release
+ * Debian packaging fixes:
+ - Change the Conflicts on backupninja from (<= 0.9.3-4) to (<< 0.9.3-5).
+ - Set a version Conflicts with gnunet.
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 17 Apr 2006 15:18:05 +0200
+
+shadow (1:4.0.15-5) unstable; urgency=high
+
+ * The "Ossau-Iraty" release
+ * Debian packaging fixes:
+ - Add a NEWS entry for the new su behavior introduced in 1:4.0.15-2
+ - explicitely set DEB_HOST_ARCH_OS to avoid FTBFS on autobuilder now
+ that sudo doesn't pass environment variables explicitely
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 15 Apr 2006 10:05:05 +0200
+
+shadow (1:4.0.15-4) unstable; urgency=high
+
+ * The "Fourme d'Ambert" release
+ * Debian packaging fixes:
+ - set a versioned Conflict with python-4suite.
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 8 Apr 2006 20:11:38 +0200
+
+shadow (1:4.0.15-3) unstable; urgency=high
+
+ * The "Neufchâtel" release
+ * Debian packaging fixes:
+ - set a versioned Conflict with amaviwsd-new. Closes: #360856, #360567
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 5 Apr 2006 08:50:21 +0200
+
+shadow (1:4.0.15-2) unstable; urgency=low
+
+ * The "Pavé d'Auge" release
+ * Debian packaging fixes:
+ - Only replace manpages-es << 1.55-4. Thanks to Rubén
+ - Include chgpasswd in shipped files. Really Closes: #355070
+ - parse /etc/default/locale for locale environment variables in login and
+ su default PAM configuration files. Thanks to Denis Barbier for the
+ patch. Closes: #359163
+ - su: Do not concatenate the additional arguments, and support an
+ environment variable to revert to the old Debian's su behavior.
+ Closes: #276419
+ To avoid breaking packages using the old-style way to pass
+ arguments, set Conflicts with "gnunet, amavisd-new, python-4suite,
+ backupninja (<= 0.9.3-4), echolot (<< 2.1.8-4)"
+ - 467_useradd_-r_LSB. Do not forgot to change the owner of the new home
+ directory. Closes: #360179
+ * Upstream bugs or fixes not already fixed in upstream releases or CVS:
+ - 486_chgpasswd.8: add a manpage for chgpasswd.
+ * Upstream bugs or fixes fixed in upstream releases or CVS:
+ - 492_correct_exit_status_for_run_commands: correct the exit status of su
+ when the invoked command fails. Closes: #360276
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 2 Apr 2006 12:45:49 +0200
+
+shadow (1:4.0.15-1) unstable; urgency=low
+
+ * The "Livarot" release
+ * Ack the previous changes uploaded to experimental except for #276419
+ * New upstream release
+ - chpasswd.8: Rewrite the CAVEATS section. Closes: #355010
+ - Updated translation for:
+ * Indonesian Closes: #345514, #347198
+ * Swedish Closes: #346017, #346449, #352276
+ * Slovak Closes: #346376, #349898, #352028
+ * Romanian Closes: #347755, #352712
+ * Galician Closes: #347943, #352444, #355587
+ * Italian Closes: #348339, #352345
+ * Greek Closes: #348713
+ * Russian Closes: #349193
+ * Basque Closes: #349496
+ * Catalan Closes: #353898
+ * Vietnamese Closes: #352310
+ * Italian Closes: #356610
+ - lastlog: Warn if non-option argument are provided. Closes: #349560
+ - chgpasswd: new utility. Closes: #355070
+ * Debian packaging fixes:
+ - Only replace manpages-ko << 20050219-2. Thanks to the Debian QA Group.
+ - Only replace manpages-fi << 0.2-4. Thanks to the Debian QA Group.
+ - Only replace manpages-de << 0.4-10. Thanks to Daniel Kobras
+ - Only replace manpages-es-extra << 0.8a-15. Thanks to Javier
+ Fernandez-Sanguino Peña.
+ * Upstream bugs or fixes not already fixed in upstream releases or CVS:
+ - 467_useradd_-r_LSB: add a "-r" option for adding system users
+ for LSB compatibility. Closes: #333706
+ This patch, announced in 4.0.14-7 was indeed not applied.
+ * Debconf translation updates:
+ - Punjabi translation renamed to pa.po after debian-i18n decision
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 21 Mar 2006 12:37:01 +0100
+
+shadow (1:4.0.14-9) unstable; urgency=high
+
+ * passwd.postinst: On upgrades from any prior version, chmod 600 various
+ base-config and d-i log files that might contain sensative information,
+ including in some cases, passwords. Closes: #356939
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 15 Mar 2006 08:03:43 +0100
+
+shadow (1:4.0.14-8) experimental; urgency=low
+
+ * The "Salers" release
+ * Debconf translation updates:
+ - Dutch updated. Closes: #354593
+ * Debian packaging fixes:
+ - move the @include statements at the end of pam configuration files.
+ This is of no important with the Debian default common-* files
+ but would lead to unexpected results if the local admin adds
+ "sufficient" lines in these common-* files
+ - make sure debian/recode_manpages.sh fails if a page can't be recoded.
+ - more bulletproof string checks in passwd.config (related to: #355268).
+ - Do not use type-handling for the dependency on libselinux1-dev.
+ Use an explicit list of arches. Thanks to Guillem Jover.
+ - su: Do not concatenate the additional arguments, and support an
+ environment variable to revert to the old Debian's su behavior.
+ Closes: #276419
+ * Upstream bugs fixed in upstream CVS:
+ - make passwd.1 synopsis consistent with other man pages
+ Closes: #352136
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 6 Mar 2006 06:54:42 +0100
+
+shadow (1:4.0.14-7) unstable; urgency=low
+
+ * The "Carré d'Aurillac" release (let's stay in Cantal)
+ * Upstream bugs or fixes not already fixed in upstream releases or CVS:
+ - 467_useradd_-r_LSB: add a "-r" option for adding system users
+ for LSB compatibility. Closes: #333706
+ - 493_selinux_no_proc:
+ Only check selinux_check_passwd_access on SELinux enabled system.
+ This fix issues in passwd, chage, chfn and chsh when /proc is not
+ mounted. Closes: #352494
+ * Debian packaging fixes:
+ - Stop replacing manpages-it (login only, newusers is still conflicting on
+ passwd) and manpages-hu as new releases removed the conflicting manpages
+ - passwd.config:
+ Better POSIX compliance and avoid failure if root password is set to '!'
+ Thanks to Vagrant Cascadian for reporting and providing the patch
+ Closes: #353813
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 22 Feb 2006 06:58:47 +0100
+
+shadow (1:4.0.14-6) unstable; urgency=low
+
+ * The "Cantal" ("Vieux" flavour) release
+ * Upstream bugs or fixes not already fixed in upstream releases or CVS:
+ - 491_configure.in_friendly_selinux_detection:
+ Detect that selinux is not present without failing.
+ - 492_manpages_typos:
+ Fix a typo in the passwd manpage "TheUNIX". Closes: #352135
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 10 Feb 2006 16:50:59 +0100
+
+shadow (1:4.0.14-5) unstable; urgency=low
+
+ * The "Roquefort" release
+ * Upstream bugs or fixes not already fixed in upstream releases or CVS:
+ - 489_useradd_allow_non_uniq_uid:
+ Allow non-unique UID when -o is specified. Closes: #351281
+ - 490_useradd_always_unlock_group_databases:
+ Always remove the lock on the group and gshadow databases.
+ CLoses: #348250
+ - 463_login_delay_obeys_to_PAM:
+ Do not hardcode pam_fail_delay and let pam_unix do its job to
+ set a delay...or not
+ CLoses: #87648
+ * Debian packaging fixes:
+ - Build with SE Linux support for Linux architectures
+ (and do not link the tools without SELinux support with the selinux
+ library: 490_link_selinux_only_when_needed)
+ Closes: #351631
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 9 Feb 2006 19:04:58 +0100
+
+shadow (1:4.0.14-4) unstable; urgency=low
+
+ * The "Cancoillotte" release
+ * Debian specific fixes:
+ - recode_manpages.sh was not called after the switch to CDBS.
+ The man pages were all distributed in UTF-8
+ - Encode the (Debian) shadowconfig manpages in UTF-8 so that
+ recode_manpages.sh can be used on all manpages
+ - do not build login on The Hurd
+ Closes: #349356
+ - debian/rules:
+ additional cleanups
+ * Upstream bugs or fixes not already fixed in upstream releases or CVS:
+ - 485_shell-env-exitcodes:
+ - explicitly pass environment to shell() as 3rd argument
+ - return errno from shell()
+ - introduce E_CMD_NOTFOUND/E_CMD_NOEXEC exitcodes
+ * Debconf translation updates:
+ - Danish updated. Closes: #348571
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 15 Jan 2006 16:27:15 +0100
+
+shadow (1:4.0.14-3) unstable; urgency=low
+
+ * The "Pont-L'Évêque" release
+ * Upstream bugs or fixes not already fixed in upstream releases or CVS:
+ - 479_chowntty_debug:
+ - produce more helpful syslog message[s] when is_my_tty() fails
+ (see bug #332198).
+ - 462_warn_to_edit_shadow:
+ - warn users to edit the shadow file when using vipw or vigr
+ Closes: #62821
+ - 480_getopt_args_reorder:
+ - Allow SU options to be passed after - or the username
+ - 481_userdel_remove_remove_group:
+ - User's group was removed twice, which caused warnings
+ - 461_keep_sticky_bit_for_dirs:
+ - keep the sticky bit in the directory copied by useradd in the
+ skeleton or by usermod.
+ Closes: #296729
+ - 482_libmisc_copydir_check_return_values:
+ - check the return value of system calls in copy_tree
+ - 483_su_fakelogin_wrong_arg0:
+ - shell's name must be -su when su is faking a login shell.
+ Closes: #347747
+ - 484_su-p_preserve_PATH:
+ - -p did not preserve the PATH environment variable when su started a
+ shell (no -c).
+ Closes: #347935
+ * Debian specific fixes:
+ - debian/rules:
+ - switch to cdbs for package build
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 15 Jan 2006 15:03:56 +0100
+
+shadow (1:4.0.14-2) unstable; urgency=low
+
+ * The "Vieux brie" release
+ * Missing dependency on docbook-xml and libxml2-utils
+ Closes: #346395
+
+ -- Christian Perrier <bubulle@debian.org> Sat, 7 Jan 2006 19:08:36 +0100
+
+shadow (1:4.0.14-1) unstable; urgency=low
+
+ * The "Crottin de Chavignol" release
+ * New upstream release. This release fixes the following issues:
+ - French useradd no longer documents nonexisting -n option
+ Closes: #340578
+ - Russian translation update. Closes: #340826
+ - Fix German translation. Closes: #338373
+ - Swedish translation update. Closes: #334264
+ - Ukrainian translation update. Closes: #335381
+ - Tagalog translation update. Closes: #336649
+ - French translation update. Closes: #338410
+ - Simplified Chinese translation update. Closes: #339554
+ - Russian man pages translation update. Closes: #340828
+ * Upstream bugs not already fixed in upstream releases or CVS:
+ - 468_duplicate_passwd_struct_before_usage
+ Duplicate the passwd structures retrieved by getpwnam before calling
+ PAM. Closes: #341230
+ * Debian specific fixes:
+ - 502_fix_generated_man_pages
+ remove the occurences of ’ which is not supported by the current version
+ of docbook-xsl in Debian. Closes: #341489
+ * Debconf translation updates:
+ - Basque updated. Closes: #342102
+ - Catalan updated. Closes: #344964
+ * Debian packaging fixes:
+ - debian/rules, debian/login.files, debian/passwd.files:
+ Use dh_install instead of old dh_movefiles for moving files from
+ debian/tmp and rename {login, passwd}.files to {login,passwd}.install
+ Closes: #343534
+ - debian/rules:
+ debian/rules: stop building login for Hurd, which breaks bootstrap
+ Thanks to Michael Banck for the patch. Closes: #343473
+ - debian/passwd.config:
+ call programs using [a-z] under a C locale. Thanks Denis Barbier
+ for the patch. Closes: #343595
+ - debian/rules, debian/shells, debian/passwd.postinst:
+ Remove the /usr/share/passwd/shells files and the postinst code that
+ installed it as /etc/shells. This is now done by debianutils.
+ Closes: #342858
+ - Also remove README.shells, which should be distributed by debianutils.
+ - debian/passwd.postrm:
+ Do not remove /etc/shells on purge. Closes: #345659
+ - Fix the version of an old entry in NEWS.Debian
+ - Do not distribute the pam.d files for commands with disabled PAM support
+ (chage, chpasswd, groupadd, groupdel, groupmod, useradd, userdel,
+ usermod)
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 6 Jan 2006 07:42:52 +0100
+
+shadow (1:4.0.13-7) unstable; urgency=low
+
+ * The "Chabichou" release
+ * Debian packaging fixes:
+ - debian/rules, debian/login.links, debian/passwd.links:
+ Use dh_link for setting up symlinks
+ - get rid of initial-passwd-udeb as D-I will now use its
+ own udeb (user-setup-udeb)
+ * Debconf translation updates:
+ - Portuguese updated. Closes: #338767
+ - Korean updated. Closes: #339011
+ - Ukrainian updated. Closes: #338878
+ - Galician updated. Closes: #338908
+ - German updated. Closes: #339660
+ - Romanian updated. Closes: #340097
+ * Upstream fixes which will reach next upstream version
+ - 460_vipw-quiet: vipw logs "unchanged" message to stdout
+ and offers a quiet mode. Closes: #190252
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 20 Nov 2005 16:04:54 +0100
+
+shadow (1:4.0.13-6) unstable; urgency=low
+
+ * The "Saint-Nectaire" release
+ * Debian packaging fixes:
+ - passwd.config:
+ Add "seen false" for passwd/root-password and
+ passwd/root-password-again when entered root passwords mismatch or are
+ empty. Thanks to Tollef Fog Heen for noticing.
+ * Debconf translation updates:
+ - Simplified Chinese updated. Closes: #338075
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 10 Nov 2005 17:07:14 +0100
+
+shadow (1:4.0.13-5) unstable; urgency=low
+
+ * The "Fourme de Montbrison" release
+ * Debian packaging fixes:
+ - passwd.config:
+ Add a variable quoting which probably prevented users to
+ preseed a locked password for root and fix a logic error in the script
+ Working user password crypted preseeding (it probably failed earlier)
+ * Debconf translation updates:
+ - Russian updated. Closes: #337370
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 1 Nov 2005 18:10:30 +0100
+
+shadow (1:4.0.13-4) unstable; urgency=low
+
+ * The "Comté" release (let's make Nicolas happy)
+ * Debian packaging fixes:
+ - initial-passwd-udeb:
+ Grab last version of Ubuntu code to get rid of the mktemp error
+ This virtually closes bug 336321 but we keep it opened to be sure
+ that noone imagines pushing this version to testing.
+ * Upstream fixes which will reach next upstream version
+ - 467_usermod_longopts: add long options support to usermod.
+ Closes: #260149
+ - 366_fflush-prompt: fflush prompts to allow scripting. Closes: #333138
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 1 Nov 2005 13:04:09 +0100
+
+shadow (1:4.0.13-3) unstable; urgency=high
+
+ * The "Trou du Cru" release (actually, the one deserving this name is me)
+ * Urgency set to high to avoid breaking D-I for too long
+ * Debian packaging fixes:
+ - debian/control:
+ - Make initial-passwd-udeb priority extra to avoid breaking all D-I
+ images
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 30 Oct 2005 06:52:26 +0100
+
+shadow (1:4.0.13-2) unstable; urgency=low
+
+ * The "Pouligny St-Pierre" release
+ * Debian packaging fixes:
+ - debian/control:
+ - manpages-ja: versioned Replaces as the man pages have now been
+ removed
+ - manpages-ko: versioned Replaces as the man pages have now been
+ removed
+ - debian/login.defs:
+ - fix a typo.
+ - early release of a (currently not used) udeb to allow user creation
+ and password setting to be done in D-I first stage
+ Patch taken from Ubuntu. Thanks to Colin Watson for providing it.
+ - debian/copyright:
+ - for RMS clones sake, stop breaking Thy Holy GNU Copyright
+ Closes: #334870
+ * Patches to upstream man pages, not yet applied upstream:
+ - debian/patches/457_document_useradd_groupadd_nis:
+ Document that low level utilities will certainly never
+ implement strange behaviour such as adding local users or groups with
+ logins existing in external databases
+ Closes: #282184
+ - debian/patches/458_manpages_typos
+ Fix some typos in faillog.5, chage.1, chpasswd.8
+ Thanks to A Costa <agcosta@gis.net>
+ Closes: #333995, #333994, #333993
+ - debian/patches/459_better_document_useradd_-d
+ Better document, in useradd.8, that the home_dir specified
+ with -d is not created if it does not exist
+ Closes: #154996
+ * Debconf translation updates:
+ - Norwegian Bokmal updated. Closes: #316732
+ - Russian updated. Closes: #334250
+ - Tagalog updated. Closes: #335158
+ - Swedish updated. Closes: #335319
+ - Italian updated. Closes: #335856
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 25 Oct 2005 11:46:31 +0200
+
+shadow (1:4.0.13-1) unstable; urgency=low
+
+ * The "Maroilles" release
+ * New upstream version:
+ Debian bugs fixed by the new upstream version:
+ - faillog: Do not oversimplify the date of the last unsuccessful login
+ Closes: #89902
+ - login.1: also mention securetty(5). Closes: #325773
+ - chfn.1, chsh.1, groupadd.8, newusers.8, pwconv.8
+ useradd.8, userdel.8, usermod.8:
+ Improved crossreferences with other manpages
+ Closes: #300892
+ - newgrp.1:
+ Improved documentation of how group passwords work
+ Closes: #325558
+ - passwd.c:
+ The usage line is no more too terse
+ Closes: #146779
+ * Patches to upstream man pages, not yet applied upstream:
+ - debian/patches/452_doc_password_check_order:
+ Document the order for checking the password strength
+ Closes: #115380
+ * Debian packaging fixes:
+ - debian/login.su.pam:
+ - pam_wheel example moved after pam_rootok in config.
+ Also documents that with 'pam_wheel.so group=foo', root may need to
+ be in the foo group. Closes: #330630, #330855
+ - pam_env turned to be used as a session module which it is designed
+ to be. Thanks to Steinar H. Gunderson who pointed this out and
+ Steve Langasek and Andrew Suffield who suggested the right solution.
+ - debian/control:
+ - manpages-es-extra: versioned Replaces as the man pages have now been
+ removed
+ - manpages-de: versioned Replaces as the man pages have now been
+ removed
+ - manpages-hu: versioned Replaces as the man pages have now been
+ removed
+ - debian/rules:
+ - pack upstream's NEWS file into login and passwd. Closes: #331487
+ - pack login.defs and its manpages into "passwd" instead of "login"
+ package for the Hurd platform. Closes: #249372
+ - copy upstream's changelog. Closes: #331487
+ - debian/passwd.config, debian/passwd.templates:
+ - allow preseeding the root (and user) password with a MD5 hash
+ Closes: #275343, #304352
+ Thanks to Colin Watson for the Ubuntu patch
+ - the above also allows preseeding a disabled password for root
+ Closes: #304343
+ - add passwd/user-uid template, which can be preseeded to force the
+ initial user to have a certain uid.
+ Thanks to Colin Watson for the Ubuntu patch
+ - allow hyphens in username
+ Thanks to Colin Watson for the Ubuntu patch (Ubuntu #15721)
+ - debian/login.defs:
+ - document the obsoleted by PAM ENV_HZ variable. Closes: #265613
+ - better document the real use of USERGROUPS_ENAB. Closes: #282822
+ - debian/add-shell, debian/remove-shell, debian/add-shell.8,
+ debian/remove-shell.8:
+ - utilities moved to debianutils. Add a versioned "Depends" line on
+ debianutils so that passwd cannot be upgraded when the new
+ debianutils version including these utilities isn't available
+ Closes: #208514, #268656, #269573, #293171
+ * Debconf translation updates:
+ - Swedish updated. Closes: #332711
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 10 Oct 2005 23:15:47 +0200
+
+shadow (1:4.0.12-6) unstable; urgency=low
+
+ * The "Reblochon" release
+ * Debian packaging fixes:
+ - debian/control:
+ More accurate Replaces lines for manpages-* packages which have
+ been fixed:
+ - manpages-ru
+ - manpages-fr
+ - manpages-fi (removed because distributes translations we don't have)
+ - manpages-pt (removed because distributes translations we don't have)
+ - manpages-tr (removed because distributes translations we don't have)
+ - manpages-zh for login
+ (removed because distributes translations we don't have)
+ - debian/login.pam, debian/login.su.pam:
+ - use "readenv=1" with pam_env so that /etc/environment settings are
+ used. Thanks to Konrad Jelen for pointing it
+ - use "pam_mail" for login and su to display the user's new mail status
+ (for login only) and set the MAIL environment variable
+ Add a comment about the need to *also* define MAIL_DIR and possibly
+ MAIL_FILE in /etc/login.defs so that userdel behaves properly
+ Closes: #330420
+ - Really add /etc/pam.d/passwd. Closes: #330870
+ - Enable pam_group by default in login. Closes: #124293
+ - debian/login.defs:
+ Better document the real and future use of MAIL_DIR and MAIL_FILE
+ * Upstream bugs not already fixed in upstream releases or CVS:
+ - 451_login_PATH: set PATH according to ENV_SUPATH and ENV_PATH for login
+ Closes: #330803
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 28 Sep 2005 19:59:31 +0200
+
+shadow (1:4.0.12-5) unstable; urgency=low
+
+ * Really add /etc/pam.d/su. Closes: #330291
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 28 Sep 2005 19:59:31 +0200
+
+shadow (1:4.0.12-4) unstable; urgency=low
+
+ * The "Epoisses" release
+ * Debian packaging fixes:
+ - debian/control:
+ Add a few more Replaces for broken manpages-xx packages
+ which provide random man pages for software they don't
+ provide. Closes: #330526, #330338
+ * Use dh_installpam correctly so that /etc/pam.d/su really exists
+ Closes: #330291
+ * Change section to admin because of the restructuration of the "base"
+ section by the ftpmasters
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 27 Sep 2005 07:20:44 +0200
+
+shadow (1:4.0.12-3) unstable; urgency=low
+
+ * The "Langres" release
+ * Debian packaging fixes:
+ - debian/control:
+ login now replaces manpages-de because of conflicting login.1
+ manpage. Closes: #330247
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 27 Sep 2005 07:20:44 +0200
+
+shadow (1:4.0.12-2) unstable; urgency=low
+
+ * The "Boulette d'Avesnes" release
+ * Debian packaging fixes:
+ - debian/useradd.default:
+ File added and installed as /etc/default/useradd to provide
+ "safe" defaults to useradd and, for instance, have it create users
+ with a shell. Closes: #293492
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 22 Sep 2005 07:34:29 +0200
+
+shadow (1:4.0.12-1) experimental; urgency=low
+
+ * The "Munster" release
+ * New upstream release
+ * Bugs fixed by the move to upstream release:
+ - Portuguese translation update. Closes: #323069
+ * Debian packaging fixes:
+ - Fix a bug number in the previous changelog entry (s/155297/155279/).
+ - Patches for man pages reduced to only patch XML files:
+ 441, 440, 333, 421, 424, 442, 444
+ - Reduce 005 patch to only patch useradd.8.xml (other changes
+ have been fixed upstream and we assume that the man pages are
+ generated from the XML files).
+ Move the patch for the su man page (wich explain the 437_* patches)
+ to 437_su_add_GNU_options_7
+ - Disable patches now applied upstream:
+ 002, 336, 363, 443_man_it_Makefile.am, 364
+ - login.defs:
+ Entries moved to obsolete sections:
+ CLOSE_SESSIONS, LOGIN_STRING, NO_PASSWORD_CONSOLE, QMAIL_DIR
+ ULIMIT
+ - NEWS.Debian: added
+ - Ship a (currently useless) PAM configuration file for chage, useradd,
+ usermod, userdel, groupadd, groupmod, groupdel, including
+ pam_rootok.so alone
+ - use dh_installpam to install PAM configuration files
+ - start the cleanup of the unused patches list
+ - debian/passwd.config:
+ No more endless loops when the user passwords mismatch
+ Closes: #325910
+ * Upstream bugs not already fixed in upstream releases or CVS:
+ - 443_chage_exit_values: now exit with errorlevel=15 when no
+ shadow password exists (was previously 3 but upstream now uses it)
+ - 447_missing_login.defs_variables: verify the list of login.defs
+ variables used and update the getdef.c and login.def files accordingly.
+ * Debconf translation updates:
+ - German updated. Closes: #321761
+ - Romanian updated. Closes: #323575
+ - Dutch updated. Closes: #323756
+ * Upstream bugs already fixed in upstream releases or CVS:
+ - 448_enable_man: man pages are generated from the XML files.
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 25 Aug 2005 08:38:53 +0200
+
+shadow (1:4.0.11.1-1) experimental; urgency=low
+
+ * New upstream release.
+ * Bugs fixed by the move to upstream release:
+ - Stop documenting about passing env variables at login prompt
+ Closes: #95213
+ - Correct reference to vi(1) man page in vipw(1)
+ Closes: #260636
+ * Debian packaging fixes:
+ - Enable the use of pam_env for su. Needed a fix which appeared
+ in upstream 4.0.6
+ Closes: #155279, #202840, #287108
+ * Debconf translation updates:
+ - Macedonian updated. Closes: #320229
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 26 Jul 2005 09:17:40 +0200
+
+shadow (1:4.0.3-39) unstable; urgency=low
+
+ * Debian packaging fixes:
+ - moved `shadowconfig on` from .preinst to .postinst
+ Closes: #319138
+ - debian/passwd.linda-overrides, debian/login.linda-overrides, debian/rules:
+ Add file permissions overrides for linda similar to those we have for lintian
+ - debian/login.lintian-overrides:
+ No more file permission overrides for login
+ - debian/passwd.config:
+ let error messages from shadowconfig (and therefore underlying
+ pwck/grpck tools which use stdout for this purpose) to reach stdout
+ instead of getting into /dev/null. This helps error diagnostics and
+ supposedly Closes: #319136
+ * Programs translation updates:
+ - French completed.
+ * Man pages translation updates:
+ - 207_id-manpages: correct Indonesian manpages so that they do not
+ fail lexgrog tests by linda
+ - 206_ko-manpages: correct Korean manpages so that they do not
+ fail lexgrog tests by linda
+ * Debconf translation updates:
+ - Arabic updated from Arabeyes repository
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 22 Jul 2005 18:42:24 +0200
+
+shadow (1:4.0.3-38) unstable; urgency=low
+
+ * The "La Marseillaise" release
+ * Debian packaging fixes:
+ - changed debian/rules to generate non-versioned "Depends: login"
+ entry for hurd's "passwd" package. This allows to use native
+ Hurd's login/su, because "hurd" package seems to provide "login".
+ See: #249372 (I don't claim the bug to be dealt with though --
+ it's still not clear whether the newly built "login" package for
+ Hurd is functional).
+ - Enable shadow by default on firsttime installation even when the package
+ is not reconfigured (ie also when not called from base-config).
+ Thanks to Bastian Blank for the patch and comments
+ Closes: #316219
+ - Build shadow with debugging. Closes: #204644
+ * Programs translation updates:
+ - Hebrew translation disabled. Closes: #317805
+ - Portuguese updated. Closes: #318190
+ - Vietnamese updated. Closes: #318257
+ * Debconf translation updates:
+ - Estonian updated. Closes: #317719
+ - Hebrew updated
+ * Upstream bugs already fixed in upstream releases or CVS:
+ - Modified 356_su-stop_cont-proxy to block TSTP, TTIN, TTOU, QUIT
+ and HUP -- to do the same as in newgrp.c
+ Closes: #317747
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 14 Jul 2005 10:14:23 +0200
+
+shadow (1:4.0.3-37) unstable; urgency=low
+
+ * The "Camembert" release
+ * Upstream bugs not fixed in upstream releases or CVS:
+ - 442_useradd.8-O
+ Document useradd's "-O" option
+ Closes: #304934
+ * Debconf translation updates:
+ - Indonesian updated (sent by translator to Christian Perrier)
+ - Bulgarian updated. Closes: #317327
+ - Vietnamese added (sent by translator to Christian Perrier)
+ - Wolof added (sent by translator to Christian Perrier)
+ Closes: #317532
+ * Man pages translation updates:
+ - Really remove the too outdated Korean translation of newgrp.1
+ which doesn't even mention sg
+ * Programs translation updates:
+ - debian/patches/117_id:
+ - Indonesian translation update (sent by translator to Christian Perrier)
+ * Debian packaging fixes:
+ - login.defs
+ Fix a typo (s/dmesg/mesg/), thanks to Maximilian Attens
+ Closes: #317236
+ - Fix FTBFS for GNU/Hurd and GNU/kFreeBSD
+ - securetty.kfreebsd-gnu renamed to securetty.kfreebsd
+ - securetty.netbsd-gnu renamed to securetty.netbsd
+ - securetty.gnu renamed to securetty.hurd
+ Closes: #317304
+ * Upstream bugs not fixed in upstream releases or CVS:
+ - 443_chage_exit_values
+ chage: change the exit value to 3 when chage fails because the system is
+ not shadow enabled.
+ Closes: #317012
+ - 426_grpck_group-gshadow_members_consistency
+ grpck/pwck: fix segmentation faults
+ Closes: #317366
+ - 423_su_arguments_are_concatenated, 423_su_pass_args_without_concatenation
+ revert the patch done for #276419, because it breaks pbuilder and other
+ packages. Also document the Debian su behavior.
+ su behave differently from FreeBSD or SUN; this issue will have to be
+ handled latter (re-open #276419).
+ Closes: #317264
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 6 Jul 2005 03:13:37 +0300
+
+shadow (1:4.0.3-36) unstable; urgency=low
+
+ * Debian specific programs fixes:
+ - Re-enable logging and displaying failures on login when login is
+ compiled with PAM and when FAILLOG_ENAB is set to yes. And create the
+ faillog file if it does not exist on postinst (as on Woody).
+ Closes: #192849
+ - do not localize login's syslog messages.
+ * Debian packaging fixes:
+ - Fix FTBFS with new dpkg 1.13 and use a correct dpkg-architecture
+ invocation. Closes: #314407
+ - Add a comment about potential sensitive information exposure
+ when LOG_UNKFAIL_ENAB is set in login.defs
+ Closes: #298773
+ - Remove limits.5 and limits.conf.5 man pages which do not
+ reflect the way we deal with limits in Debian
+ Closes: #288106, #244754
+ - debian/login.defs:
+ - Make SU_PATH and PATH consistent with the values used in /etc/profile
+ Closes: #286616
+ - Comment the UMASK setting which is more confusing than useful
+ as it only affects console logins. Better use pam_umask instead
+ Closes: #314539, #248150
+ - Add a comment about "appropriate" values for umask
+ Closes: #269583
+ - Correct the assertion about the variable defined by QMAIL_DIR
+ which is MAILDIR, not MAIL
+ Closes: #109279
+ - Move the PASS_MAX_LEN variable at the end of login.defs as this
+ is obsoleted when using PAM
+ Closes: #87301
+ - debian/passwd.config:
+ - Re-enable the password confirmation question at critical priority
+ Closes: #304350
+ - Do no prompt again for the login name when the two passwords don't
+ match while creating a new user
+ Closes: #245332
+ - debian/add-shell.sh, debian/remove-shell.sh, debian/shadowconfig.sh,
+ debian/passwd.config, debian/passwd.postinst:
+ - checked for bashisms, replaced "#!/bin/bash" with "#!/bin/sh",
+ Closes: #315767
+ - replaced "test XXX -a YYY" XSI:isms with "test XXX && test YYY",
+ for rationale see:
+ http://www.opengroup.org/onlinepubs/009695399/utilities/test.html
+ - replaced all unneeded "egrep"s with basic "grep"s
+ Closes: #256732
+ - debian/rules:
+ Remove the setuid bit on login
+ Closes: #298060
+ - debian/passwd.templates:
+ Templates rewrite to shorten them down a little and make them DTSG
+ compliant. Give more details about what the user's full name is used
+ for.
+ Closes: #287410
+ - Updated to Standards: 3.6.2 (checked)
+ * Debconf translation updates:
+ - Estonian added. Closes: #312471
+ - Basque updated. Closes: #314303
+ - Malagasy updated. Closes: #290842
+ - Punjabi updated. Closes: #315372
+ - Danish updated. Closes: #315378
+ - Polish updated. Closes: #315391
+ - Japanese updated. Closes: #315407
+ - Brazilian Portuguese updated. Closes: #315426
+ - Czech updated. Closes: #315429
+ - Spanish updated. Closes: #315434
+ - Lithuanian updated. Closes: #315483
+ - Galician updated. Closes: #315362
+ - Portuguese updated. Closes: #315375
+ - Simplified Chinese updated. Closes: #315567
+ - French updated
+ - Ukrainian updated. Closes: #315727
+ - Welsh updated. Closes: #315809
+ - Slovak updated. Closes: #315812
+ - Romanian updated. Closes: #315783
+ - Finnish updated. Closes: #315972
+ - Catalan updated. Closes: #316026
+ * Man pages translation updates:
+ - Remove the too outdated Korean translation of newgrp.1
+ which doesn't even mention sg
+ Closes: #261490
+ * Man pages correction for Debian specific issues:
+ - 402_usermod.8-system-users-range-286258:
+ Document the system user range from 0 to 999 in Debian
+ Closes: #286258
+ * Upstream bugs not fixed in upstream releases or CVS:
+ - 423_su_pass_args_without_concatenation
+ Thanks to Helmut Waitzmann.
+ Closes: #276419
+ * pass the argument to the shell or command without concatenation
+ before the call to exec.
+ * If no command is provided, the arguments after the username are for
+ the shell, no -c has to be appended.
+ - 008_su_ignore_SIGINT
+ * Also ignore SIGQUIT in su to avoid defeating the delay.
+ The gain in security is very minor.
+ Closes: #288827
+ - 424_pwck.8_quiet_option
+ pwck(8): document the -q option. Closes: #309408
+ - 425_lastlog_8_sparse
+ lastlog(8): Document that lastlog is a sparse file, and don't need to be
+ rotated. Closes: #219321
+ - 426_grpck_group-gshadow_members_consistency
+ * (grpck) warn for inconsistencies between members in /etc/group and gshadow
+ Closes: #75181
+ * (pwck and grpck) warn and propose a fix for entries present in the
+ regular /etc/group or /etc/passwd files and not in shadow/gshadow.
+ - 427_chage_expiry_0
+ Fix chage display in the case of null expiry fields (do not display
+ Never, but 01 Jan 1970)
+ Closes: #78961
+ * Upstream bugs already fixed in upstream releases or CVS:
+ - Corrected typos in chfn.1. Closes: #312428
+ - Corrected typos in gshadow.5. Closes: #312429
+ - Corrected typos in shadow.5. Closes: #312430
+ - Corrected typos in grpck.8. Closes: #312431
+ - Added patch (356th) for su to propagate SIGSTOP up and SIGCONT down.
+ Added similar patch (357th) for newgrp. Both changes only affect
+ operation with CLOSE_SESSION set to yes (in /etc/login.defs).
+ Closes: #314727
+ * Translation updates:
+ - debian/patches/010_more-i18ned-messages
+ - More messages are translatable. We will deal with the translation
+ updates after syncing with upstream.
+ Closes: #266281
+ - debian/patches/114_eu:
+ - Basque translation update. Closes: #314423
+ - debian/patches/132_vi.dpatch:
+ - Vietnamese translation update. Closes: #315840
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 20 Jun 2005 23:37:56 +0300
+
+shadow (1:4.0.3-35) unstable; urgency=low
+
+ * Re-apply the debian/patches/036_CAN-2004-1001_passwd_check patch
+ which fixed the "Adjusted password check to fix authentication bypass"
+ security issue (CAN-2004-1001)
+ * Debian packaging fixes:
+ - Add --host to config_options on cross build. Patch from NIIBE Yutaka.
+ Closes: #283729
+ - Enable login for GNU/Hurd in rules. First patch from Robert Millan.
+ Closes: #249372
+ - Cleanup passwd debconf stuff as md5 passwords are assumed since
+ 1:4.0.3-19 and the resolution of #223664.
+ - Document the TTYPERM variable set to 0600 in the default login.defs file
+ Closes: #59439
+ - Make login and su use limits.so PAM module by default
+ (change made in sarge branch also)
+ Closes: #300720
+ - debian/rules: Add removal of config.log in the clean target
+ - debian/control:
+ - Add Martin to Uploaders
+ - Remove Sam Hartman from Uploaders. The team is now setup and this
+ does not really have a real meaning now. You're still welcome for
+ NMU's, Sam, and thanks for the good work.
+ - Switching from dpatch to quilt.
+ * Debconf translation updates:
+ - Portuguese spellchecked by Miguel Figueiredo
+ - Punjabi (Gumurkhi) added, by Amanpreet Singh Alam. Closes: #309800
+ * Man pages translation updates:
+ - German completed by reference to original man page
+ Closes: #311554
+ * Debian specific programs fixes:
+ - NONE
+ * Upstream bugs not fixed in upstream releases or CVS:
+ - 421_login.1_pishing:
+ Document how to initiate a trusted path under Linux
+ Closes: #305600
+ - set CLOSE_SESSIONS to yes in login.defs, and document why.
+ Closes: #163635
+ * Upstream bugs already fixed in upstream releases or CVS:
+ - 324_configure.in-no-debian-dir:
+ Separated from 004_configure.in : this change will not be needed when
+ syncing with upstream
+ - 325_gshadow_5_manpage:
+ Add a gshadow.5 man page, and clarifications in the newgrp and gpasswd
+ man pages.
+ Closes: #113191, #166173, #169046, #251926
+ - 326_su.1_pwconv.8-typos:
+ Correct typos in su.1 and pwconv.8 man pages.
+ Closes: #309666
+ * Translation updates:
+ - 004_configure.in, 100_LINGUAS
+ Add Vietnamese to LINGUAS. Patch for LINGUAS in configure.in moved
+ from 004_configure.in to the new 100_LINGUAS patch
+ - 101_cs: Czech updated by Miroslav Kure
+ Closes: #308658
+ - 102_de: German updated by Dennis Stampfer
+ - 104_fr: French updated by Jean-Luc Coulon
+ Closes: #308909
+ - 111_ca: Catalan completed by Guillem Jover
+ Closes: #309212
+ - 108_sv: Swedish completed with the help of Magnus Holmgren
+ Encoding issues fixed
+ Closes: #309380
+ - 109_uk: Ukrainian completed by Eugeniy Meshcheryakov
+ Closes: #308647
+ - 120_nl: Dutch updated by Bart Cornelis
+ Closes: #308662
+ - 124_ru: Russian updated by Yuri Kozlov
+ Closes: #308839
+ - 129_ru: Romanian updated by Sorin Bataruc
+ Closes: #308921
+ - 130_zh_TW: Tradition Chinese updated by Tetralet
+ Closes: #311588
+ - 131_tl: Tagalog updated by Eric Pareja
+ Closes: #310386
+ - 132_vi: Correct file used for Vietnamese tanslation
+ Closes: #306614, #307251, #307262, #308479
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 3 Jun 2005 07:32:07 +0200
+
+shadow (1:4.0.3-34) unstable; urgency=low
+
+ * Debian packaging fixes:
+ - NONE
+ * Debian specific programs fixes:
+ - NONE
+ * Upstream bugs not fixed in upstream releases or CVS:
+ - 406_good_name:
+ - relaxed user/group names checking is now fixed and accepts
+ _only_ names matching '^[^-:\n][^:\n]*$'
+ Closes: #264879, #308478
+ * Upstream bugs already fixed in upstream releases or CVS:
+ - 311_high-uids.dpatch:
+ - Add large file support to lastlog and faillog. Closes: #280212
+ * Translation updates:
+ - 132_vi:
+ Vietnamese programs translation added (from upstream CVS)
+ Closes: #308479
+ - 118_it:
+ Italian programs translation updated
+ Closes: #308327
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 10 May 2005 18:24:12 +0200
+
+shadow (1:4.0.3-33) unstable; urgency=low
+
+ * The "Don't believe lintian blindly" release
+ * Urgency left to low because RC bug fixed but we leave priority
+ to sarge-targeted work
+ * Debian packaging fixes:
+ - Remove CVS id tag from the supplied login.defs file
+ Closes: #308019
+ - revert dependency on debconf which would make it required
+ Closes: #308145
+ - Add the missing add-shell, remove-shell, cppw and cpgr
+ (Debian specific) man pages
+ Closes: #162241
+ - make lintian ignore warnings about missing debconf dependency
+ in passwd.lintian-overrides
+ * Debian specific programs fixes:
+ - NONE
+ * Upstream bugs not already fixed in upstream releases or CVS:
+ - NONE
+ * Upstream bugs already fixed in upstream releases or CVS:
+ - 313_pam_access_with_preauth:
+ - allow PAM account authorization when preauthenticated
+ Closes: #193869
+ - 314_passwd.1_formatting:
+ - minor formatting fixes of passwd(1) man page
+ Closes: #304447
+ - 315_chage.1_document_expiration_removal:
+ - document expiration removal in chage(1)
+ Closes: #304542
+ - 316_vipw-race-242407:
+ - make vipw to remove /etc/{passwd|shadow|group|gshadow}.edit
+ and only then unlock
+ Closes: #242407
+ - 317_lastlog_usage_249611:
+ - Fix the lastlog usage and all the translations accordingly
+ (--user instead of --login).
+ Closes: #249611
+ - 323_passwd.1-typo:
+ - correct a typo in passwd(1) man page. Closes: #302740
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 8 May 2005 14:32:20 +0200
+
+shadow (1:4.0.3-32) unstable; urgency=low
+
+ * Switch to dpatch for upstream patches
+ This should bring more clarity to modifications
+ we make to upstream sources and help integrating
+ new upstream releases
+ Old patches have been moved quite roughly to
+ debian/patches
+ * Modified debian/rules for "Calling GNU configure properly", see
+ /usr/share/doc/autotools-dev/README.Debian.gz
+ * Debian packaging fixes:
+ - Lintian fixes:
+ - Description synopsis initial capital letters removed
+ - passwd now depends on debconf (>=0.5.00) as it uses the seen flag
+ - add login.lintian-overrides and passwd.lintian-overrides
+ files to mention setuid and setgid files and avoid lintian warning
+ about them
+ - debian/pam.d/login:
+ - Remove the confusing comment about "nullok". Closes: #207816
+ - debian/rules:
+ - Add call for dh_installdirs
+ - debian/passwd.dirs:
+ - Added
+ - debian/login.dirs:
+ - Added
+ * Debian specific programs fixes:
+ - fixed /usr/sbin/remove-shell bug with handling of non-existing/empty
+ /etc/shells file. Closes: #271565
+ * GNU config automated update: config.sub (20010907 to 20050422),
+ config.guess (20010904 to 20050422)
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 3 May 2005 11:53:12 +0200
+
+shadow (1:4.0.3-31sarge3) unstable; urgency=low
+
+ * The "please buy me a brain" release
+ * *Really* shorten down the Dutch debconf translation for the root password
+ input so that it fits in one screen. Closes: #277750
+ * man/usermod.8: *Really* document -o option in usermod
+ Closes: #302388
+ * man/fr/po4a/fr: Removed. This directory only clutters up the diff
+ and is not used during the build process
+ * man/de/passwd.1: Updated. Closes: #304757
+ * man/de/chsh.1: Updated.
+ * man/it/*: All files updated. Closes: #305095
+ * Translation updates:
+ - Portuguese (from the translation file sent for 4.0.8 upstream)
+ Closes: #305257
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 19 Apr 2005 19:31:43 +0200
+
+shadow (1:4.0.3-31sarge2) unstable; urgency=low
+
+ * Shorten down the Dutch debconf translation for the root password
+ input so that it fits in one screen. Closes: #277750
+ * man/usermod.8: Document -o option in usermod
+ Closes: #302388
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 4 Apr 2005 20:28:47 +0200
+
+shadow (1:4.0.3-31sarge1) unstable; urgency=high
+
+ * Urgency set to high because of RC bug fixed. Reuploaded
+ because I messed up with the changelog first. Use this occasion
+ to start a sarge series just in case. Changes below were made
+ in the former version already.
+ * Avoid package file conflicts for woody->sarge upgrade:
+ - Add manpages-it and manpages-ko to Replaces: for login
+ - Remove manpages-de from Replaces: for login (useless)
+ - Improve readability of the Replaces line for passwd
+ Closes: #299549
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 15 Mar 2005 13:55:34 +0100
+
+shadow (1:4.0.3-31) unstable; urgency=low
+
+ * New maintainer
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 11 Mar 2005 19:28:38 +0100
+
+shadow (1:4.0.3-30.10) unstable; urgency=low
+
+ * Non-maintainer upload targeted at sarge.
+ * Programs translations:
+ - Greek updated. Closes: #293911
+ - French updated. Closes: #294330
+ * Debconf translations:
+ - Galician updated. Closes: #295543
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 7 Feb 2005 08:18:56 +0100
+
+shadow (1:4.0.3-30.9) unstable; urgency=low
+
+ * Non-maintainer upload targeted at sarge.
+ * Programs translations:
+ - German updated. Closes: #291703
+ - Tagalog added. Closes: #292353
+ - Korean updated.
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 23 Jan 2005 09:30:49 +0100
+
+shadow (1:4.0.3-30.8) unstable; urgency=low
+
+ * Non-maintainer upload targeted at sarge.
+ * Debconf translations:
+ - Tagalog added. Closes: #289837
+ * Programs translations:
+ - Traditional Chinese added. Closes: #288879
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 11 Jan 2005 11:39:18 +0100
+
+shadow (1:4.0.3-30.7) unstable; urgency=low
+
+ * Non-maintainer upload targeted at sarge.
+ * Resolv conflict with manpage-spl in login
+ as well as passwd. Thanks to Robert Luberda for
+ the notice
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 23 Dec 2004 22:23:11 +0100
+
+shadow (1:4.0.3-30.6) unstable; urgency=low
+
+ * Revert back to Ian Gulliver genuine patch
+ to chpasswd. Update man page accordingly.
+ Closes: #283961
+ (again)
+ * Programs translations
+ - German updated. Closes: #286522
+ * Debconf translations
+ - German updated. Closes: #286522
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 20 Dec 2004 23:51:39 +0100
+
+shadow (1:4.0.3-30.5) unstable; urgency=high
+
+ * Non-maintainer upload targeted at sarge.
+ Fix release critical bug
+ * Resolve conflict with woody's manpages-pl package
+ which prevent woody->sarge upgrade if
+ manpages-pl was installed
+ Closes: #284239
+ * Programs translations
+ - Romanian added. Closes: #284338
+ * Add MD5 support to chpasswd
+ Thanks to Ian Gulliver for the patch
+ Closes: #283961
+ * Correct typos in man pages
+ Thanks to Nicolas François for the patch
+ Closes: #141322
+ * Replace "C/" with "../../" in man/fr/shadow.conf
+ for best integration in the package build process
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 16 Dec 2004 21:48:56 +0100
+
+shadow (1:4.0.3-30.4) unstable; urgency=low
+
+ * Non-maintainer upload targeted at sarge.
+ Localisation and d-i related updates only
+ * Programs translations
+ - Albanian (very partial) added.
+ * Debconf translations
+ - Hindi added. Closes: #282443
+ - Malagasy added. Closes: #282580
+ - Albanian added. Closes: #282160
+
+ -- Christian Perrier <bubulle@debian.org> Thu, 25 Nov 2004 07:21:53 +0100
+
+shadow (1:4.0.3-30.3) unstable; urgency=high
+
+ * Non-maintainer upload: security fix using the woody patch
+ by the Security Team
+ * Adjusted password check to fix authentication bypass
+ [debian/patches/036_CAN-2004-1001_passwd_check]
+ * Debconf translations
+ - Brazilian Portuguese updated. Closes: #278051
+ - Norwegian Bokmal fixed. Closes: #277563
+ * Programs translations
+ - Indonesian updated. Closes: #277751, #277741
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 2 Nov 2004 22:28:26 +0100
+
+shadow (1:4.0.3-30.2) unstable; urgency=low
+
+ * Non-maintainer upload targeted at sarge.
+ Localisation and d-i related updates only
+ * Debconf translations
+ - Macedonian added. Closes: #275781
+ - Slovakian updated. Closes: #273585
+ - Slovenian added.
+ * Man pages translations
+ - German for vipw.8/vigr.8. Closes: #260645
+ * Fix preseeding for d-i : do not mark debconf templates as seen
+ Also remove the hack for Joey Hess login name..:)
+ Closes: #271407
+ * Ask for the user full name at critical priority so that
+ it is never empty. Closes: #257700
+
+ -- Christian Perrier <bubulle@debian.org> Sun, 10 Oct 2004 19:02:50 +0200
+
+shadow (1:4.0.3-30.1) unstable; urgency=low
+
+ * Non-maintainer upload targeted at sarge. Localisation updates only
+ * Debconf translations
+ - Arabic added. Closes: #261022
+ - Swedish updated. Closes: #261553
+ - Bulgarian added. Closes: #262928
+ - Brazilian Portuguese updated. Closes: #263957
+ - Simplified Chinese updated. Closes: #268646
+ - Traditional Chinese updated. Closes: #268151
+ - German updated. Closes: #268051
+ - Basque synced with templates.pot
+ * Programs translations
+ - Swedish updated. Closes: #261553
+ - Russian updated. Closes: #268412
+ - Norwegian Bokmal updated. Closes: #269907
+ - Norwegian Nynorsk updated. Closes: #269907
+ - Hebrew updated. Closes: #269967
+ - Danish updated. Closes: #270083
+ - Catalan updated. Closes: #254956
+ * Man pages translations
+ - French translation completely rewritten and reviewed
+ Closes: #270168
+ - Add expiry.1 and limits.conf.5 to the list of installed man
+ pages (add two lines to passwd.files and one to rules)
+ From #270168 also.
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 7 Sep 2004 20:20:21 +0200
+
+shadow (1:4.0.3-30) unstable; urgency=high
+ * Attempt to fix FTBFS and dependency problems on hurd. Closes: #235641
+ * don't run dh_undocumented anymore as it has become angstful.
+
+ * Thanks to Christian Perrier:
+ * Debconf translations
+ - Brazilian updated. Closes: #261387
+ - Croatian added. Closes: #261418
+ - Minor corrections fo ja.po and pl.po headers
+ * Programs translations
+ - Dutch updated. Closes: #260361
+ - Hebrew added. Closes: #260722
+ * Urgency set to high because of RC bug fixed:
+ * Correct check for root password being already set in passwd.config
+ Closes: #260799
+
+ * Acknowledge 29.1 NMU:
+ Closes: #256664, #257949, #258241, #258563, #258566, #258957,
+ #190567, #259389, #260223, #257949, #259663, #259827
+
+ -- Karl Ramm <kcr@debian.org> Tue, 27 Jul 2004 09:38:32 -0400
+
+shadow (1:4.0.3-29.1) unstable; urgency=low
+
+ * NMU with maintainer consent
+ * Programs translations
+ - Greek updated. Closes: #256664
+ - Finnish updated. Closes: #257949
+ - Spanish updated. Closes: #258241
+ - Polish updated. Closes: #258563
+ - Indonesian added (configure.in changed accordingly). Closes: #258566
+ - French updated. Closes: #258957, #190567
+ - Slovak updated. Closes: #259389
+ - Portuguese updated. Closes: #260223
+ * Debconf translations
+ - Finnish updated. Closes: #257949
+ * Typo correction in su.1 man page. Closes: #259663
+ * Removed malloc definition in libmisc/xmalloc.c
+ Closes: #259827
+ * Lintian-driven corrections
+ - Corrected section number in several man pages:
+ - grpck.8
+ - pwck.8
+ - ja/grpck.8
+ - pl/grpck.8
+ - pl/pwck.8
+ - Replace the full GPL text in copyright by a pointer
+ - Bumped Standards to 3.6.1.1 (changes checked)
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 19 Jul 2004 17:52:24 +0200
+
+shadow (1:4.0.3-29) unstable; urgency=low
+ * Be up front on the origin of our su. Closes: #244297
+ * The following thanks to Christian Perrier:
+ * Debconf translations
+ - Hungarian added. Closes: #256493
+ - Greek updated. Closes: #251990
+ - Brazilian portuguese updated. Closes: #256771
+ * po/POTFILES.in
+ - corrected file. No more mentions unexisting files
+ Closes: #253792
+ this change was already in 28.5 but was forgotten in the
+ changelog
+ * Acknowledge NMUs:
+ closes: #244604, #244734, #246302, #246376, #246848, #246859,
+ #247084, #247698, #247770, #248386, #248391, #248392,
+ #248392, #248516, #248516, #248648, #248938, #248957,
+ #249141, #249257, #249682, #250169, #250339, #250496,
+ #251140, #251141, #251317, #251495, #251716, #251990,
+ #252087, #252499, #253165, #253186, #253570, #254503,
+ #254760
+
+ -- Karl Ramm <kcr@debian.org> Sat, 3 Jul 2004 00:24:55 -0400
+
+shadow (1:4.0.3-28.5) unstable; urgency=low
+
+ * debian/*.files
+ - care about adding ALL existing translations. Removed hard-coded
+ file names. Closes: #248516
+ Thanks to Ruben Porras for noticing
+ This involves changes to debian/*.files with the use of
+ regexp in these files
+ * libmisc/failure.c
+ - Make use of plural forms. Closes: #251317
+ * Programs translations
+ - Norwegian Bokmal and Norwegian Nynorsk translations. Closes: #252499
+ - Dutch updated. Closes: #253165
+ - Brazilian Portuguese updated
+ - Turkish updated
+ - Korean updated
+ - Czech updated
+ - Japanese updated
+ - German updated
+ - Catalan added. Closes: #254760
+ - Italian updated
+ * Debconf translations
+ - Finnish added. Closes: #253570
+ - Danish updated
+ - Hebrew added. Closes: #253186
+ - Traditional Chinese added. Closes: #254503
+ - French updated for clarification and shorten the root password screen
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 22 Jun 2004 09:44:45 +0200
+
+shadow (1:4.0.3-28.4) unstable; urgency=low
+
+ * NMU for l10n stuff again
+ * Programs translations
+ - All languages "activated" in configure.in. Closes: #248516
+ - Russian. Closes: #250496
+ - Bosnian added. Closes: #251141
+ - Finnish update. Closes: #251495
+ - Italian update. Closes: #252087
+ * Debconf translations
+ - Norwegian Bokmal update. Closes: #250339
+ - Bosnian added. Closes: #251140
+ - Catalan updated. Closes: #251716
+ - Greek update. Closes: #251990
+ - Welsh added (directly sent by Dafydd Harries
+ * Christian Perrier
+ - debian/passwd.config : a few rewards to a few people. Just check
+ the code
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 1 Jun 2004 09:11:01 -0300
+
+shadow (1:4.0.3-28.3) unstable; urgency=high
+
+ * NMU for correcting my mistake
+ * Remove an extra "fi" in passwd.config. Closes: #250169
+ * Debconf translation updates:
+ - Norwegian Nynorsk. Closes: #249682
+
+ -- Christian Perrier <bubulle@debian.org> Fri, 21 May 2004 06:50:13 +0200
+
+shadow (1:4.0.3-28.2) unstable; urgency=high
+
+ * NMU for Debian Installer rc1 release schedule
+ * Removed duplicate sentence in templates. Closes: #244734, #244604
+ * Move the "root password empty" check before the root password
+ confirmation. Closes: #247770
+ * Debconf translation updates:
+ - Danish. Closes: #246859
+ - Spanish. Closes: #246302
+ - Russian. Closes: #248392
+ - Simplified Chinese. Closes: #248938
+ - Lithuanian. Closes: #249141
+ - Italian. Closes: #249257
+ - Dutch sent directly by Bart Cornelis
+ - Korean sent directly by Changwoo Ryu
+ - Galician sent directly by Héctor Fernández
+ - Romanian sent directly by Eddy Petrisor
+ * Programs translation updates:
+ - Korean. Closes: #242055
+ - Japanese. Closes: #242586
+ - Polish. Closes: #246376
+ - Slovak. Closes: #247084
+ - Basque. Closes: #248386
+ - German. Closes: #248391
+ - Russian. Closes: #248392
+ - Spanish. Closes: #248516
+ - Czech. Closes: #248648
+ - Simplified Chinese. Closes: #248957
+ - Indonesian. Closes: #242813
+ - Italian sent directly by Giuseppe Sacco
+ * Translated man pages
+ - Typo correction in Brazilian Portuguese for gpasswd. Closes: #247698
+
+ -- Christian Perrier <bubulle@debian.org> Tue, 18 May 2004 12:09:34 +0200
+
+shadow (1:4.0.3-28.1) unstable; urgency=high
+
+ * NMU for special purposes below
+ * Urgency set to high for helping out Brazilian DD's building CD's
+ for FISL conference
+ * Translation updates:
+ - Debconf:
+ - Brazilian Portuguese. Closes: #246848
+ - Spanish. Was unfortunately based on older templates hence
+ this does not close 246302
+ - Basque: Closes: #243545
+ - German: Closes: #242116
+
+ -- Christian Perrier <bubulle@debian.org> Mon, 10 May 2004 23:23:25 +0200
+
+shadow (1:4.0.3-28) unstable; urgency=low
+
+ * Fix login and passwd in preinst to avoid promts on woody upgrade,
+ Closes: #243099
+ * Fix login and passwd configuration file to support common-passwd
+ * Apply NMU patch from Christian Perrier, Closes: #241438
+
+ -- Sam Hartman <hartmans@debian.org> Thu, 29 Apr 2004 16:31:25 -0400
+
+shadow (1:4.0.3-27) unstable; urgency=low
+
+ * update "da" debconf translation, closes: #241262
+ * new "pt_BR" program translation, closes: #241366
+
+ -- Karl Ramm <kcr@debian.org> Thu, 1 Apr 2004 00:19:44 -0500
+
+shadow (1:4.0.3-26.1) unstable; urgency=low
+
+ * NMU for Debian Installe rneeds
+ * Translation updates:
+ - Debconf:
+ - French. Closes: #241438
+ - Ukrainian. Closes: #241514
+ - Swedish: #241558
+ - Japanese. Closes: #241802
+ - Danish. Closes: #241262
+ - Portuguese. Closes: #241675
+ - Polish. Closes: #243185, #242996
+ - Czech. Closes: #241877
+ - Korean. Closes: #241928
+ - Greek. Closes: #242396
+ - Turkish. Closes: #243103
+ - Slovak. Closes: #245671
+
+ -- Christian Perrier <bubulle@debian.org> Wed, 28 Apr 2004 11:47:34 +0200
+
+shadow (1:4.0.3-26) unstable; urgency=low
+
+ * Have passwd.config fall back gracefully to useradd if adduser is
+ unavailable. closes: #240894
+
+ -- Karl Ramm <kcr@debian.org> Wed, 31 Mar 2004 00:26:17 -0500
+
+shadow (1:4.0.3-25) unstable; urgency=low
+
+ * Update "da" program translation, thanks to Claus Hindsgaul.
+ * Update "sv" translation, closes: #239198
+ * lower debconf priority of shadow password question to 'low'
+
+ -- Karl Ramm <kcr@debian.org> Tue, 30 Mar 2004 19:39:59 -0500
+
+shadow (1:4.0.3-24) unstable; urgency=low
+
+ * add new program translations to the file manifest. *sigh*
+ closes: #241016
+ * add "tr" debconf translation. closes: #239148
+ * Rearrange username creation dialog text to make sense in
+ new order. closes: #240607
+ * Edit the debconf templates for content.
+ * Remove the program .gmo files in the clean step. closes: #200054
+
+ -- Karl Ramm <kcr@debian.org> Tue, 30 Mar 2004 11:37:22 -0500
+
+shadow (1:4.0.3-23) unstable; urgency=low
+
+ * increase maximum group name size to 32 for no particularly good reason
+ closes: #240456
+ * fix su man page to reflect code. closes: #239805
+ * fix username defaulting in passwd.config. closes: #238781
+ * update "it" debconf translation. closes: #237504
+ * update "ru" debconf translation. closes: #238211
+ * update "de" debconf translation. closes: #238779
+ * update "el" debconf translation. closes: #240473
+ * add "nn" debconf translation. closes: #238590
+ * add "da" program translation. closes: #238005
+ * add "nl" program translation. closes: #238488
+ * add "pt" program translation. closes: #238796
+ * add "pt" debconf translation. closes: #239641
+ * remove spurious const, closes: #240677
+
+ -- Karl Ramm <kcr@debian.org> Sun, 28 Mar 2004 19:46:34 -0500
+
+shadow (1:4.0.3-22) unstable; urgency=low
+
+ * Don't assume that lastlog.ll_time or utmp.ut_time or utmpx.ut_tv are made
+ up of time_ts and timevals, because they aren't on x86-64. Dismaying
+ but true.
+
+ -- Karl Ramm <kcr@debian.org> Sun, 14 Mar 2004 16:53:21 -0500
+
+shadow (1:4.0.3-21) unstable; urgency=low
+
+ * Try and get the right French translation update in the right place,
+ Karl, you can do it even if you do only speak English. Closes: #236993
+
+ -- Karl Ramm <kcr@debian.org> Wed, 10 Mar 2004 15:31:35 -0500
+
+shadow (1:4.0.3-20) unstable; urgency=low
+
+ * Added Norwegian Bokmal debconf translation, closes: #206349
+ * tell shadow build system about new message translations
+
+ -- Karl Ramm <kcr@debian.org> Thu, 4 Mar 2004 11:04:44 -0500
+
+shadow (1:4.0.3-19) unstable; urgency=low
+
+ * When creating a user account in psaswd.config, ask for full name
+ first, and make up a default username. Closes: #235386
+ * "No really, assume md5 passwords". Closes: #223664
+
+ -- Karl Ramm <kcr@debian.org> Thu, 4 Mar 2004 00:42:08 -0500
+
+shadow (1:4.0.3-18) unstable; urgency=low
+
+ * Removed po/cs.po and added new debian/po/cs.po
+ Updated Czech translation, closes: #229125
+ * Updated Japanese debconf translation, closes: #227237
+ * Updated Danish debconf translation, closes: #227619
+ * Updated Dutch debconf translation, closes: #227883
+ * Updated Brazilian Portuguese debconf translation, closes: #228080
+ * Added Simplified Chinese debconf translation
+ Added Simplified Chinese programs translation
+ Closes: #229334
+ * Added Greek debconf translation
+ Added Greek programs translation
+ Closes: #229504, #229528
+ * Added Finnish programs translation, closes: #230369
+ charset changed from UTF-8 to ISO-8859-1 as the bug patch was wrong
+ * Updated German debconf translation, closes: #232710
+ * Updated Russian debconf translation, closes: #235541
+ * Added Ukrainian debconf translation, closes: #233560
+ * Added Lithuanian debconf translation, closes: #235698
+ * thanks to Christian Perrier <bubulle@debian.org>
+
+ -- Karl Ramm <kcr@debian.org> Wed, 3 Mar 2004 22:56:31 -0500
+
+shadow (1:4.0.3-17) unstable; urgency=low
+
+ * Fix braino in version number of example dependency in README.shells.
+ Apologies to anyone foolhardy enough to believe my documentation.
+ * Add Swedish debconf translation, closes: #225059
+ * New French debconf translation, closes: #225914
+ * Add Catalan debconf translation, closes: #227029
+ * add securetty files for the hurd, freebsd, and netbsd, closes: #200739
+
+ -- Karl Ramm <kcr@debian.org> Sun, 11 Jan 2004 17:37:54 -0500
+
+shadow (1:4.0.3-16) unstable; urgency=low
+
+ * run dh_installdeb *after* dh_installdebconf,
+ remove . from short description of passwd,
+ add versioned conflict with debconf older than 0.5
+ closes: #224133
+ * replace manpages-it due to man page conflict
+ closes: #224474
+ * fix the *other* su syslogs.
+ closes: #224508
+ * fix filename in control file, closes: #224579
+ * fix permissions on chage and expiry, closes: #224717
+ * run debconf-updatepo
+ * remove debian/compat as redundant
+
+ -- Karl Ramm <kcr@debian.org> Mon, 22 Dec 2003 19:53:30 -0500
+
+shadow (1:4.0.3-15) unstable; urgency=low
+
+ * remove bogus dependency on base-config 2.00,
+ closes: #222772, #223726
+ * New Czech translation thanks to Miroslav Kure.
+
+ -- Karl Ramm <kcr@debian.org> Fri, 12 Dec 2003 18:40:25 -0500
+
+shadow (1:4.0.3-14) unstable; urgency=low
+
+ * exit 30 when backing all the way out in passwd.conf, and
+ depend on base-config 2.00, closes: #222772
+ * adjust debconf templates for debian-installer work,
+ closes: #222832
+
+ -- Karl Ramm <kcr@debian.org> Thu, 11 Dec 2003 01:53:37 -0500
+
+shadow (1:4.0.3-13) unstable; urgency=low
+
+ * Fix typo passwd.config. Closes: #223079, #222714
+ * Let's try out this oldfangled anonymous ftp upload queue.
+
+ -- Karl Ramm <kcr@debian.org> Mon, 8 Dec 2003 17:59:31 -0500
+
+shadow (1:4.0.3-12) unstable; urgency=low
+
+ * Explicitly use automake-1.7 and aclocal-1.7. closes: #216594
+ * Update Danish debconf translation. closes: #216542
+ * Update French debconf translation. closes: #206352
+ * Update Dutch debconf translation. closes: #212995
+ * Remove redundant dependency on grep. closes: #216535
+ * Fix chfn documentation bug. closes: #213931
+ * Fix su syslogs to be less ambiguous. (old:new instead of old-new
+ because '-' can appear in usernames.) Not clearer, mind you, but less
+ ambiguous. closes: #213592
+ * Rename limits(5) to limits.conf(5) and edit to reflect reality.
+ closes: #212935
+ * Move the change_uid call in login back to where it was before -11, and
+ relocate the fork for pam_close_session above it. closes: #211884
+
+ -- Karl Ramm <kcr@debian.org> Sat, 25 Oct 2003 15:26:20 -0400
+
+shadow (1:4.0.3-11) unstable; urgency=low
+
+ * update Japanese debconf translation. closes: #210382
+ * update Brazilian Portugese debconf translation. closes: #208122
+ * run pam cleanup code as root. closes: #195048
+
+ -- Karl Ramm <kcr@debian.org> Sat, 13 Sep 2003 17:49:29 -0400
+
+shadow (1:4.0.3-10) unstable; urgency=low
+
+ * postinst sources confmodule. closes: #88843
+ * Implement the pam configuration New World Order. Wow, that was quick. :-)
+ * Implement a scheme for allowing other packages to modify /etc/shells.
+
+ -- Karl Ramm <kcr@debian.org> Fri, 22 Aug 2003 20:58:42 -0400
+
+shadow (1:4.0.3-9) unstable; urgency=low
+
+ * fix mysterious creeping bug in po/Makefile.in.in, closes: #200052
+ * dutch debconf translation, closes: #204578
+ * switch to po-debconf, closes: #183998, #200130
+ * use automake1.7, closes: #205991
+ * update german debconf translation, closes: #94138
+ * I can't come up with a good justification as to why characters other
+ than ':'s and '\0's should be disallowed in group and usernames (other
+ than '-' as the leading character). Thus, the maintenance tools don't
+ anymore. closes: #79682, #166798, #171179
+ * Fix typo in /etc/pam.d/su. closes: #196804
+ * danish debconf translation, closes: #118245
+ * russian debconf translation, closes: #198729
+ * And last, but not least, what's undoubtedly going to be the most
+ popular change: md5 passwords are turned on by default, and there is
+ no prompt to change them. Yes, this is reduced functionality. No, it
+ can't go back in the way it was; the old code not only modified
+ conffiles, it modified *other*packages* conffiles and was a massive
+ policy violation. I expect this change will motivate the people who
+ have said that they will come up with a proper solution to do so.
+ closes: #186016, #110228, #171808
+
+ -- Karl Ramm <kcr@debian.org> Wed, 20 Aug 2003 02:06:50 -0400
+
+shadow (1:4.0.3-8) unstable; urgency=low
+
+ * Fix missing ':' in getopt call. closes: #184301
+ * Don't install mkpasswd, we don't use it. closes: #185919, #187906
+ * replaces: manpages-ko. closes: #184810
+ * Fix the message in #190567 (not closing until it's been accepted upstream)
+ * Fix brainos in login.1. closes: #184731
+ * Fixup permissions for chage. closes: #184138
+ * Force the umask to 022 in passwd.config. closes: #182506
+ * Add Sam Hartman <hartmans@debian.org> as an uploader.
+ * Update standards-version.
+ * Add versioned build-depend on debhelper.
+
+ -- Karl Ramm <kcr@debian.org> Sat, 26 Apr 2003 15:34:16 -0400
+
+shadow (1:4.0.3-7) unstable; urgency=low
+
+ * When relocating a user's home directory, don't fail and remove the new
+ home directory if we can't remove the old home directory for some
+ reason; the results can be spectularly poort if, for instance, only
+ the rmdir() fails. closes: #166369
+ * run dh_installdebconf so base-config will work. *sigh*. closes: #166788
+
+ -- Karl Ramm <kcr@debian.org> Sun, 24 Nov 2002 21:40:30 -0500
+
+shadow (1:4.0.3-6) unstable; urgency=low
+
+ * remove automake dependency and leave only automake1.5, since it seems
+ to confuse the alpha and mipsel autobuilders for some reason.
+
+ -- Karl Ramm <kcr@debian.org> Sun, 13 Oct 2002 21:45:15 -0400
+
+shadow (1:4.0.3-5) unstable; urgency=low
+
+ * build-depend on libtool and automake. oops. closes: #164545
+
+ -- Karl Ramm <kcr@debian.org> Sun, 13 Oct 2002 01:44:47 -0400
+
+shadow (1:4.0.3-4) unstable; urgency=low
+
+ * I am unable to begin to express the bitterness that I'm now experiencing.
+ * replaces manpages-de <= 0.4-4, closes: #162097, #162173
+ * replaces manpages-fr, closes: #162150
+ * replaces manpages-hu, closes: #162126
+ * replaces manpages-ja, closes: #163511, #162095
+ * fix sg symlink, closes: #162339, #163652
+ * newgrp should be aware that getlogin() and ttyname() are not
+ guaranteed to return anything and NOT blindly assume that they
+ successfully returned a pointer to a string. I mean, really, people,
+ that sort of thing hasn't been reliable since 4.2BSD on a VAX. I'll
+ bet most of the working on the upstream weren't even born yet when
+ this sort of thing was commonplace (it was NEVER acceptable).
+ closes: #162303
+ * pull the manpage for the spiffy su forward. closes: #162275
+ * depend on automake1.5, and rerun the autogrunge. This should
+ *hopefully* make it build more consistently.
+ * this concludes the biweekly treading of water.
+
+ -- Karl Ramm <kcr@debian.org> Sat, 12 Oct 2002 14:56:16 -0400
+
+shadow (1:4.0.3-3) unstable; urgency=low
+
+ * the "fix the brain damage" release
+ * fix pam brain-damage in ch{age,passwd}, {group,user}{add,del,mod}, newusers
+ closes: #162181, #162199, #162228
+ * fix vipw symlink brain-damage: closes: #162218
+ * fix package description brain damage, closes: #139563
+ * install cp{pw,gr} brain damge
+
+ -- Karl Ramm <kcr@debian.org> Wed, 25 Sep 2002 01:21:35 -0400
+
+shadow (1:4.0.3-2) unstable; urgency=low
+
+ * fix "su -". closes: #162089
+ * document exit codes of groupdel and userdel (again, for userdel)
+ closes: #161861
+ * clean up logoutd cleanup
+
+ -- Karl Ramm <kcr@debian.org> Mon, 23 Sep 2002 19:44:40 -0400
+
+shadow (1:4.0.3-1) unstable; urgency=low
+
+ * new upstream version! closes: #149444, #150237, #145415
+ * completely new packaging!
+ * all new bugs!
+ * old bugs as well!
+ * remove /etc/init.d/logoutd, like the old postrm should've, closes: #160682
+ * fix passwd manpage, closes: #160477, #122797
+ * fix lastlog manpage, closes: #159886
+ * add as many virtual console devices as I seem to have to securetty,
+ closes: #156472
+ * add ttyS0 and tts/0 to securetty. closes: #130138
+ * su should not segfault if nobody has uid 0. closes: #139967
+ * install and use translations. closes: #118238
+ * upstream uses new automake. closes: #114935
+ * add russian template file for password. closes: #130358
+ * handle template installation correctly. closes: #156674
+ * don't place a maximum restriction on the length of passwords.
+ closes: #159487
+ * fix description. closes: #145459
+ * update config.{guess,sub}
+
+ -- Karl Ramm <kcr@debian.org> Wed, 18 Sep 2002 10:14:08 -0400
+
+shadow (20000902-12) unstable; urgency=high
+
+ * "oops"
+ * /etc/login.defs: /var/spool/mail -> /var/mail, closes: #125311
+
+ -- Karl Ramm <kcr@debian.org> Sun, 7 Apr 2002 11:54:48 -0400
+
+shadow (20000902-11) unstable; urgency=low
+
+ * Fix some nits:
+ * remove changelog~ file. oops. closes: #139711
+ * fix typo in control. closes: #139564
+ * Hmmm. People open more bugs when I upload new versions of things.
+ Maybe they just notice them more then, or maybe it's just Murphy.
+
+ -- K. Ramm <kcr@debian.org> Tue, 26 Mar 2002 12:14:33 -0500
+
+shadow (20000902-10) unstable; urgency=low
+
+ * We hates the automake. We hates it forever. closes: #139293
+ * stupid ommision: logoutd still in postinst. closes: #139422
+ * make login.defs a bit clearer. closes: #138809
+
+ -- Karl Ramm <kcr@debian.org> Fri, 22 Mar 2002 12:09:07 -0500
+
+shadow (20000902-9) unstable; urgency=medium
+
+ * Get rid of logoutd, it doesn't work, didn't work in potato, and now
+ it's causing people to open RC bugs. closes: #138259, #66153, #121940
+ I'm told the timeoutd package does a better job anyway.
+ * add /bin/tcsh to /etc/shells, closes: #118103, #122112
+ * add /bin/ksh to /etc/shells, closes: #123556
+ * remove text about password aging from passwd(5), closes: #137493
+ * spanish debconf template for passwd, closes: #136463
+ * document the fact that you can not have a valid password in
+ /etc/shadow. closes: #131690
+ * /etc/login.defs: /var/spool/mail -> /var/mail, closes: #125311
+ * fix locations of utmp and wtmp in login(1), closes: #119656
+ * The package description for passwd refers to README.Debian.gz
+ but only README.debian.gz actually exists. Most packages use
+ README.Debian.gz, but the control file is the only place that gets it
+ wrong for this package. When in doubt, fix the documentation. :-)
+ closes: #116955
+
+ -- Karl Ramm <kcr@debian.org> Thu, 14 Mar 2002 17:05:56 -0500
+
+shadow (20000902-8) unstable; urgency=low
+
+ * check in passwd.expire.cron for already-expired passwords; closes: #102319
+ * note in chage.1 and shadowconfig.8 that password aging information
+ only works when shadow passwords are enabled. closes: #103702
+ * enable changing the name in chfn by default. closes: #107819
+ * fail to mangle files in lib/commonio.c, thanks to matt@linuxbox.nu
+ * add /dev/console to the secure ttys list. because. closes: #113949
+ * find the FHS mail spool first in configure. closes: #114951
+ (thanks to mjb@debian.org)
+ * above sadly causes automake to go bonkers, and I don't want to
+ reassemble the build system before woody is released. Keep automake
+ from going off on its own.
+ * terminate argument validation in login when it hits a '--'.
+ closes: #66368
+
+ -- Karl Ramm <kcr@debian.org> Mon, 22 Oct 2001 11:17:35 -0400
+
+shadow (20000902-7) unstable; urgency=low
+
+ * the "I'm sorry, I should've done this earlier" release
+ * Cancel login timeout after authentication so that patient people
+ timing out on network directory services can log in with local
+ accounts. Closes: #107148
+ * Add Brazillian Portugese debconf template translation for passwd.
+ Closes: #105292, #93223
+ * Pull /usr/share/doc/$package/README.shadow-paper.gz. Closes: #98058
+ * Use getent instead of group to verify existence of shadow group
+ [works better for distributed group files]. Closes: #99902
+ [Note that this sort of problem is rampant in these postinst and
+ config scripts, but that's not getting fixed in woody.]
+ * Amend reference to /usr/doc in shadowconfig.8. Closes: #102804
+ * su should set $USER. Closes: #102995
+ * userdel now deletes user groups from /etc/gshdow as well as
+ /etc/group. Closes: #99442
+ * grpck now has an (otherwise undocumented) -p option, so that
+ shadowconfig can clean up the results of the above, so the config
+ script will fail randomly less often. Closes: #103385
+
+ -- Karl Ramm <kcr@debian.org> Wed, 22 Aug 2001 12:09:27 -0400
+
+shadow (20000902-6.1) unstable; urgency=low
+
+ * Non-maintainer upload.
+ * Upgrade to latest config.sub and config.guess. Closes: #88547
+
+ -- Gerhard Tonn <gt@debian.org> Fri, 1 Jun 2001 20:38:43 +0200
+
+shadow (20000902-6) unstable; urgency=medium
+
+ * actually set root's password when appropriate
+ patch thanks to joeyh, closes #98402
+ * fix error in expiry man page. Such damage. closes: #99291
+ * fix group of setgid program chage and expiry, closes: #98122
+
+ -- Karl Ramm <kcr@debian.org> Thu, 31 May 2001 07:38:59 -0400
+
+shadow (20000902-5) unstable; urgency=low
+
+ * add build dependency on file, to keep libtool happy. closes: #97498
+
+ -- Karl Ramm <kcr@debian.org> Wed, 16 May 2001 06:57:23 -0400
+
+shadow (20000902-4) unstable; urgency=low
+
+ * Change maintainers, closes: #92355
+
+ -- Karl Ramm <kcr@debian.org> Sun, 13 May 2001 03:28:07 -0400
+
+shadow (20000902-3.1) unstable; urgency=low
+
+ * Non-maintainer upload
+ * Recompile to fix ARM lossage
+
+ -- Philip Blundell <philb@armlinux.org> Sun, 11 Mar 2001 07:47:27 -0500
+
+shadow (20000902-3) unstable; urgency=low
+
+ * Update config.sub and config.guess so ia64 compiled, closes: #81897
+ * libmisc/sub.c: skip '*' in shell name when doing subsystem, closes:
+ #82893
+ * src/su.c: don't assume uid 0 == "root", use getpwuid to fetch it,
+ closes: #81924
+ * This was fixed in a previous version, closes: #77057
+ * Update passwd long desc, closes: #88299
+ * Conflict with suidmanager << 0.5, and remove suid{,un}register calls,
+ closes: #87157
+ * Update policy to 3.5.0.0
+ * Added debconf support for passwd from base-config
+
+ -- Ben Collins <bcollins@debian.org> Sat, 3 Mar 2001 07:26:57 -0500
+
+shadow (20000902-2) unstable frozen; urgency=low
+
+ * control.hurd->control.gnu: closes: #77940
+ * Cannot reproduce, closes: #79447
+ * User never sent a patch, plus I think removing the passwd/account when
+ doing passwd -l is a bad idea. Makes it so you cannot unlock the
+ account. closes: #77824
+ * Don't allow shadowconfig to change perms of other binaries, close: #77057
+ * IMO, this is not a bug. It's part of a feature, and can be disabled by
+ turning off USER_GROUPS. closes: #76806
+ * /bin/login is suid root for several good reasons. For one, it allows
+ daemons that use it to run as non-root. This is a good thing since it
+ means only one program is running as root, and not several. closes: #17911
+ * sulog is fairly easy to grep or parse so I don't see how the
+ similarity of the log entries for failed and successful is a problem.
+ '-' for failed, '+' for success. closes: #63801
+ * logoutd.8: s,/etc/utmp,/var/run/utmp, closes: #80494
+ * Fix case where pam_auth returns a NULL username, closes: #76817, #75510
+ * Hmm, Linux is a sysv derivative, so the comment is perfectly
+ legitimate, closes: #76898
+ * MAX_PASSWORD is used by useradd, and CHFN_AUTH is actually used by
+ * chfn to decide if the current user needs to auth in order to change
+ their info, closes: #71114
+ * login.1: Fix \' closes: #75435
+ * login -f works for me assuming you call it as root. I tested this with
+ plain pam_unix.so, and also with pam_unix.so stacked with pam_ldap.so.
+ So if it doesn't work with telnet-heimdal, then that program is not
+ doing something right. closes: #78186
+ * login.pam.d: made pam_nologin.so requisite. closes: #80111
+ * su to root seems pretty quick to me, closes: #64756
+ * xmalloc.c: remove decleration of malloc, which was causing system
+ * header conflicts. closes: #80398
+
+ -- Ben Collins <bcollins@debian.org> Sun, 31 Dec 2000 14:33:47 -0500
+
+shadow (20000902-1) unstable frozen; urgency=low
+
+ * New upstream release, lots of Debian patches merged, closes: #72735
+ * man/passwd.1: removed reference to passwd(3), closes: #72704
+ * man/chsh.1,man/chfn.1: document login.defs affects on these programs,
+ closes: #68029
+ * not a bug, expected behavior, closes: #74137
+ * IMO, this is a bug in the user's setup, closes: #65600
+ * securetty: add devfs console devices, closes: #71946
+ * libmisc/sulog.c: removed arbitrary limit on number of chars printed of
+ the tty name (truncated to 6 chars, which is silly), closes: #65404
+ * tested this, and it works fine for me so long as pam_unix.so is called
+ with the nullok option (which it isn't by default because of security
+ concerns), closes: #75063
+ * appears to be fixed by PAM, closes: #70627
+ * src/useradd.c: user mkstemp instead of mktemp, per libc6 linktime
+ warning
+ * src/su.c: fixup arg handling passed to shell, closes: #75326
+
+ -- Ben Collins <bcollins@debian.org> Mon, 23 Oct 2000 13:22:29 -0400
+
+shadow (19990827-21) unstable frozen; urgency=low
+
+ * Added build deps
+ * Use pre-generated files for hurd/linux control file. The old method of
+ using cpp would have broken with the new gcc.
+
+ -- Ben Collins <bcollins@debian.org> Wed, 26 Jul 2000 21:04:03 -0400
+
+shadow (19990827-20) unstable frozen; urgency=low
+
+ * Release Manager
+ None of these are marked as RC in the BTS, however, they do make the
+ package unsuitable for release. Since this is an essential package (IOW,
+ installed on every Debian system), I hope you can see how important it
+ is to make sure this package is perfect. None of the changes are
+ functional (except the fix in logoutd's init script, which was a 20 char
+ change), so please consider this for the next test cycle.
+ * Fix logoutd init script from spurious output when /etc/porttime is not
+ there, closes: #63962, #64067
+ * su: Fix typo in usage output, closes: #60226
+ * passwd: Fixed typo and missing newline in output for successful password
+ change, closes: #64106, #63703
+ * passwd.1: Add documentation on the -f, -e, -s and -d command line
+ options, closes: #64339, #64410
+ * login: Verified that utmp/wtmp works when called by telnet with -h
+ option, closes: #56854
+
+ -- Ben Collins <bcollins@debian.org> Tue, 23 May 2000 14:40:01 -0400
+
+shadow (19990827-19) unstable frozen; urgency=low
+
+ * debian/local/shells: added esh, closes: #59934
+ * logoutd: modify to work with pam_time.so's time.conf file, modify
+ manpage to reflect this, closes: #61300
+ * userdel.8: added note about group removal, closes: #56723
+ * base-config handles md5 setup, closes: #60125
+ * cppw: make sure it gets installed, closes: #62960
+ * passwd: correct error message for "not you", closes: #61313
+ * sulog.c: fixed extern for char (char foo[] -> char *foo), closes: #61643
+ * userdel.8: documented userdel's exit values, closes: #54775
+ * passwd: error messages are two fold, the second is actually from
+ pam_strerror(), closes: #61937
+ * passwd: print "success" on successful password change, closes: #58676
+
+ -- Ben Collins <bcollins@debian.org> Sat, 29 Apr 2000 10:26:56 -0400
+
+shadow (19990827-18) unstable frozen; urgency=low
+
+ * Crap, all the bug fixes from -17 need to go to frozen too
+
+ -- Ben Collins <bcollins@debian.org> Tue, 29 Feb 2000 14:57:14 -0500
+
+shadow (19990827-17) unstable; urgency=low
+
+ * Fixed typo in login.defs, closes: #54877
+ * logoutd.init.d: Check for /etc/security/time.conf, closes: #54900
+ * login.defs: Added note about the MAIL env option, closes: #54768
+ * login.pam.d,passwd.pam.d: Use new options in pam_unix.so to enable
+ obsure password checks. This mimics the old behavior in pre-PAM
+ shadow, closes: #58203
+ * Use patch from Topi Miettinen <tom@pluto.nic.fi> to add pam session
+ ability to su, closes: #57526, #55873, #57532
+ * Made login's -f option also able to use the username after -- if none
+ was passed as it's optarg, closes: #53702
+
+ -- Ben Collins <bcollins@debian.org> Mon, 28 Feb 2000 12:37:22 -0500
+
+shadow (19990827-16) unstable; urgency=low
+
+ * got rid of g+s directories in the source tarball, closes: #54585
+ * make su mode 4755 in the package. This way there is no chance of a
+ failed dpkg install causing it to be left without suid root perms
+ before suidmanager or chmod is called in the postinst.
+ * src/login.c: added faillog support to the pam_authenticate loop. This
+ loop is now completely rewritten, and should produce better results on
+ failures, closes: #53164
+
+ -- Ben Collins <bcollins@debian.org> Sun, 9 Jan 2000 23:35:08 -0500
+
+shadow (19990827-15) unstable; urgency=low
+
+ * src/su.c: moved signal() call to re-establish SIGINT to right place,
+ closes: #54496
+ * src/login.c: if hostname is blank (not a remote login via rlogin or
+ telnet), then use the tty to log failures in syslog, closes: #53966
+ * passwd: Locking a password by appending '!' appears to be pretty
+ standard, so ssh needs to check for it.
+ * passwd and login come with a README.pam that discusses the differences
+ between the PAM and old non-PAM versions. It also talks about where to
+ look for details. Also now that I have added the extra examples to the
+ pam.d files, I hope this satisfies...closes: #52917
+ * A new package, base-config, which will be used by boot floppies is
+ going to have an option to configure MD5 usage for passwords. Since
+ this is the best place for it, and I don't really have any control
+ over it, I am .... closes: #47620
+ * libmisc/chowntty.c: applied patch for read-only root, closes: #52069
+
+ -- Ben Collins <bcollins@debian.org> Sat, 8 Jan 2000 22:11:29 -0500
+
+shadow (19990827-14) unstable; urgency=low
+
+ * debian/local/shells: added /bin/zsh, closes: #53883
+
+ -- Ben Collins <bcollins@debian.org> Sun, 2 Jan 2000 13:51:42 -0500
+
+shadow (19990827-13) unstable; urgency=low
+
+ * su.c: ignore SIGINT while authenticating, closes: #52372
+ * su.pam.d: added 2 new examples of how to allow su for wheel users
+ without prompting for a password, and also how to deny users of a
+ specific group.
+
+ -- Ben Collins <bcollins@debian.org> Sat, 1 Jan 2000 22:29:46 -0500
+
+shadow (19990827-12) unstable; urgency=low
+
+ * Recompiled against latest libpam and up'd the module deps,
+ closes: #52171
+ * login.pam.d: added "noenv" option so we don't clobber login's setting,
+ closes: #51441
+
+ -- Ben Collins <bcollins@debian.org> Tue, 14 Dec 1999 22:41:40 -0500
+
+shadow (19990827-11) unstable; urgency=low
+
+ * debian/passwd.in: add a preinst (matches login's) to fix the latest
+ build change (only affected hurd since it doesn't use login).
+ * debian/scripts/passwd.mk: use passwd.preinst instead of login.preinst
+ to complete the fix above.
+
+ -- Ben Collins <bcollins@debian.org> Mon, 6 Dec 1999 18:25:07 -0500
+
+shadow (19990827-10) unstable; urgency=low
+
+ * src/login.c: only set pam_fail_delay if > 0. Also make the default 0
+ so not defining it has the same affect as disabling it, closes: #51178
+ * src/userdel.c: make sure we remove the shadow group entries when
+ removing the users own group, closes: #50005, #50138
+
+ -- Ben Collins <bcollins@debian.org> Fri, 26 Nov 1999 22:37:44 -0500
+
+shadow (19990827-9) unstable; urgency=low
+
+ * src/su.c: Fixed getopt parsing, and added a usage output
+ * man/su.1: minor typos
+
+ -- Ben Collins <bcollins@debian.org> Mon, 8 Nov 1999 22:13:05 -0500
+
+shadow (19990827-8) unstable; urgency=low
+
+ * src/login.c: fixed loggin of username on succesful login (was using
+ the normal username, when it should have used pam_user),
+ closes: #47819
+ * src/login.c: check for hushed login and pass PAM_SILENT if true,
+ closes: #48002
+ * src/useradd.c: set def_shell to /bin/bash, closes: #48304
+ * doc/README.debian: add note about how to avoid issues with nscd's
+ lag in aging the cache, closes: #48629
+ * src/cppw.c: new program to assist copying a passwd/group file without
+ corruption, closes: #42141
+
+ -- Ben Collins <bcollins@debian.org> Tue, 2 Nov 1999 21:46:28 -0500
+
+shadow (19990827-7) unstable; urgency=low
+
+ * {passwd,login}.pam.d: added blurb about how to use the pam_cracklib
+ module, and also changed it to use pam_unix and not pam_pwdb (gah!
+ how did that happen?), closes: #46983
+ * README.debian: changes to reflect new PAM usage aswell as removing
+ references to obsolete config files, closes: #46595
+ * passwd.expire.cron: example script that informs users by email when
+ their accounts are about to expire, closes: #41393
+ * lastlogin.c: added -h option and usage aswell as long option support,
+ closes: #45804
+ * shadow now only has 3 wishlist bugs and nothing else
+
+ -- Ben Collins <bcollins@debian.org> Sat, 9 Oct 1999 11:54:16 -0400
+
+shadow (19990827-6) unstable; urgency=low
+
+ * debian/shells: new file, needed to include /bin/sash, closes: #45826
+ * useradd.8,groupadd.8: added note about the prefered use of adduser
+ and addgroup when conforming to Debian policy (taken from notes in
+ adduser's man pages), closes: #22821
+ * dialups.5: new man page that documents /etc/{dialups,d_passwd},
+ closes: #42212
+ * src/su.c: added -m, -p and -s command line options to match GNU options,
+ also documented in su(1), closes: #45394, #46424
+ * login.defs.5: clarified usage of TTYTYPE_FILE, closes: #23194
+ * login.pam.d: added pam_issue.so which replaces the old ISSUE_FILE from
+ login.defs, this also allows it to grok escapes in the issue file,
+ also increases the MODDEPS to (>= 0.69-10). By default this module is
+ not enabled, closes: #21044
+ * login.defs.pam.linux: added ISSUE_FILE to list of deprecated options
+
+ -- Ben Collins <bcollins@debian.org> Mon, 4 Oct 1999 19:56:22 -0400
+
+shadow (19990827-5) unstable; urgency=low
+
+ * {login,su}.1: added description of a subsystem login, closes: #31987
+ * src/chowndir.c: fixed recursive chown's on usermod, also changed it
+ to use lchown and lstat since we actually want that, closes: #46405
+ * su.1: removed reference to suauth aswell as added "-c" to the SYNOPSIS,
+ closes: #45685
+ * login.1: added options to the SYNOPSIS and documented OPTIONS,
+ closes: #28763
+ * login.defs.5: documented the ENVIRON_FILE options (even though it's
+ not really used in the PAM version), close: #28786
+ * 010_src_gpasswd.c: new patch, fixes changing group passwords when not
+ using shadow groups, closes: #25919
+ * {chfn,chsh,login}.pam.d: added nullok to pam_unix.so auth line to
+ allow for passwordless accounts, closes: #46510
+ * login.pam.d: add "standard" to the pam_mail option so we get old
+ style "You have..." login messages.
+
+ -- Ben Collins <bcollins@debian.org> Sun, 3 Oct 1999 13:41:53 -0400
+
+shadow (19990827-4) unstable; urgency=low
+
+ * Alright, we are really getting some usage from this now, and seeing
+ some odd ball setups, so it means more work for me, but more stable
+ and feature filled software for you :)
+ * debian/{login,su}.pam.d: Fixed spelling errors, closes: #45234, #45235
+ * debian/login.pam.d: Added commented pam_access.so reference and
+ description, closes: #45241
+ * src/login.c: moved usage of setup_uid_gid() when PAM is enabled or
+ pam_groups.so's groups get clobbered
+ * src/newgrp.c: don't call sanitize_env() and also make sure we don't
+ check passwords when the user is trying to get back to their default
+ group, closes: #22244
+ * Closed some other bugs that were either not really bugs, or they weren't
+ reproducable.
+ * debian/login.pam.d: moved around the pam_motd and pam_mail modules to
+ order them the same as old login would have done
+
+ -- Ben Collins <bcollins@debian.org> Sun, 19 Sep 1999 19:42:13 -0400
+
+shadow (19990827-3) unstable; urgency=low
+
+ * This is a "Sit down and really fix some bugs" update. I'm going through
+ the ones that really need some work.
+ * src/vipw.c: use the system() call to invoke the editor so that it accepts
+ command line args in the EDITOR and VISUAL environment vars, closes: #31029
+ * src/userdel.c: added code to remove user groups (of the same name) if there
+ were no members left and USERGROUPS_ENAB is set to yes, closes: #35046
+ * login.defs: documented above change
+ * {login,passwd}.postinst: fixed some bashisms, closes: #45159
+ * login.defs.pam.linux: documented the FAKE_SHELL option, closes: 31987
+ * su.1,login.1: documented the subsystem root ability in login and su, closes:
+ * doc directory for both packages now includes the README.shadow-paper file
+ closes: #15391
+
+ -- Ben Collins <bcollins@debian.org> Sun, 19 Sep 1999 15:49:11 -0400
+
+shadow (19990827-2) unstable; urgency=low
+
+ * debian/rules: use "$(CC) -E" instead of "cpp" to make it easier to
+ cross compile for Hurd (requested by Marcus Brinkman).
+ * debian/login.pam.d: forgot to remove that comment about login not
+ being PAMified, it is and works fine.
+ * src/login.c: Added login.defs option to turn on and off the persistent
+ login, also give note on when it isn't and is needed in login.defs.
+ * lib/getdef.c: Added CLOSE_SESSIONS for above code.
+ * man/login.defs.5: document the new CLOSE_SESSION option for login
+ * logoutd: disabled until I can fix it to grok /etc/security/time.conf
+
+ -- Ben Collins <bcollins@debian.org> Mon, 13 Sep 1999 18:57:47 -0400
+
+shadow (19990827-1) unstable; urgency=low
+
+ * New Maintainer, with Guy's consent.
+ closes: #22296, #22331 (closed some NMU bug reports)
+ * New upstream release, closes: #15879, #24712, #25739, #28785, #32991
+ closes: #38672, #39933, #41060, #42480, #22534, #12690, #36150, #26412
+ closes: #40398, #43750
+ * Ok, now for some dusting and house cleaning (aka The Bug Killfile
+ Begins Here):
+ %%- login package
+ - Not a bug in login anymore, closes: #28098
+ - No longer pertinent, and is not controlled by the login program,
+ closes: #23155
+ - This does not appear to be a bug anymore, closes: #32424
+ - This is not a login problem. Xterm itself prints the LOGIN message
+ and it does _not_ read login.access, closes: #16958
+ - Seems to be fixed, closes: #28098
+ - Huge list of "Fixed" bugs, that I want to close. I really need to
+ start with a clean slate in order to get some of this cleaned up,
+ closes: #3439, #11443, #13485, #13815, #15176, #15998, #16187, #17529
+ closes: #17532, #17532, #18133, #18225, #20052, #20876, #21280, #21357
+ closes: #21687, #21695, #21746, #21767, #22716, #24710
+ - lastlog(8): Clarified differences in the usage of "login-name" and
+ UID, closes: #26727
+ %%- passwd package
+ - newuser: appears to be working correctly and placing x, not !,
+ closes: #19620
+ - userdel(8): added note about user's mail spool also being deleted,
+ closes: #20790
+ - Can't reproduce this one, closes: #21639
+ - -e expire_date
+ The date on which the user account will be dis-
+ abled. The date is specified in the format
+ MM/DD/YY.
+ Bug filer was trying to use an integer instead of the documented
+ format, closes: #22533
+ - chfn's command line options seem to work for root and non-root,
+ closes: #25396
+ - seems to have been fixed by the latest upstream, #25670
+ - Removed references to shadow(3), closes: #32859
+ - passwd only saves first 8 chars...duh :) closes: #33368
+ - userdel can only do so much, the admin should know to check some
+ things on their own, closes: #35418
+ - Lot's of Y2K issues fixed in this release, closes: #37232
+ - useradd requires the -m option to make it create a home directory
+ if one does not exist, closes: #39581
+ - useradd's -p option requires the password to already be encrypted
+ as documented in useradd(8), closes: #39870, #39874
+ - More "Fixed" bugs in passwd, closes: #13753, #16893, #17894, #18132
+ closes: #18628, #12691
+ %%- su (no longer a package, but has bugs just the same, will be
+ forwarded to the login package soon)
+ - Sorry, but su (all su's) invoke the shell with -c "cmd". This is
+ documented, not a bug, it's a standard interface that su expects,
+ go fix sash's bug for not supporting it, closes: #14551
+ - Acknoledged NMU: closes: #20058
+ - More "Fixed" bugs getting closed...CLOSED AT LAST, closes: #17593
+ closes: #20057, #12689
+ * Switched to a new build setup (dbs)
+ * Split makes into seperate files to make it a little cleaner
+ * FHS compliance changes (usr/{doc,man} to usr/share/{doc,man})
+ * debian/tar.c: removed
+ * su: su is now going to be provided by shadow's login package and
+ removed from shellutils (the shellutils maintainer agreed to this)
+ in preperation for future PAM support. Added conflicts with older
+ version of shellutils that does provide the su binary.
+ * debian/control.in: removed the secure-su package since login now
+ contains su and all of it's components
+ * debian/control.in: modified the package descriptions to be a little
+ more explicative of what they do.
+ * Upgraded standards version to 3.0.1.1
+ * Setup suidmanager support for all +s apps, closes: #15705, #15704, #15699
+ * Enabled PAM. Support now for su, passwd, chfn, chsh. I am working on the
+ support in login.
+ * expiry: Changed to be installed as sgid shadow instead of suid root
+ since it doesn't need root priviledges. Also added man page expiry(1) based
+ on the comments found in expiry.c.
+ * Removed bashism's in control scripts. Now lintian clean (smells fresh too)
+ * chage.c: Keep chage from locking when not running as root, since it just
+ needs to read the shadow and password files. This let's it run sgid shadow
+ instead of suid root. When run as root, it can lock files for editing.
+ * login.c: Pam support Works For Me(tm)!
+ * login.c: Fixed PAM's auth when PAM_USER was not set from the command line,
+ also call pam_fail_delay() with FAIL_DELAY as the arg before authentication.
+ * etc/login.defs.pam.linux: new file, reflects options that PAM takesover
+ * etc/login.defs.pam.hurd: new file, same for Hurd
+ * debian/passwd.mk: make sure that login.defs.5 get's installed for Hurd
+ * pam.d/: Modified defaults for each service to reflect the old style and also
+ added commented options on how to enable obsoleted options from login.defs
+ in the PAM Way(tm).
+ * debian/rules: removed --disable-desrpc from configure options since it was
+ supposedly just a workaround for glibc 2.0
+ * src/login.c: reset pam_fail_delay after every failure
+ * debian/rules: remove debian/files on clean target
+ * src/login.c: removed setup_limits() and check_nologin() usage when PAM is
+ enabled
+ * debian/login.pam.d,debian/login.defs.pam.linux: made notes about the pam_limits.so
+ module, as well as pam_nologin.so
+ * debian/su.pam.d: made notes about pam_limits.so module
+ * debian/control.in: removed depends on libpam-motd since it is now in libpam-modules,
+ also make login conflict with secure-su
+ * debian/*: setup so that Hurd does not get PAM, since they don't have it ported
+ completely yet.
+ * debian/*: Final approach to a final upload, modified login.postinst to check old
+ obsolete conffiles to see if the user needs a notice that they are no longer used.
+
+ -- Ben Collins <bcollins@debian.org> Sat, 11 Sep 1999 19:58:14 -0400
+
+shadow (980403-0.3.3) unstable; urgency=low
+
+ * Non maintainer upload.
+ * Add dpkg-architecture and cross compilation support to the package.
+ * Changes for the Hurd:
+ + Only build passwd, add etc/login.defs.hurd to this package.
+ + libmisc/rlogin.c: Conditionalize CBAUD, which is not portable.
+
+ -- Marcus Brinkmann <brinkmd@debian.org> Thu, 5 Aug 1999 00:28:12 +0200
+
+shadow (980403-0.3.2) unstable; urgency=low
+
+ * configure.in patched for utmpx.h (for arm)
+
+ -- Jim Pick <jim@jimpick.com> Sun, 4 Oct 1998 19:06:15 -0700
+
+shadow (980403-0.3.1) frozen unstable; urgency=low
+
+ * Non maintainer upload.
+ changes.{guess,sub} changed to recognize a Arm architecture.
+
+ -- Turbo Fredriksson <turbo@debian.org> Fri, 14 Aug 1998 22:37:58 -0400
+
+shadow (980403-0.3) frozen unstable; urgency=high
+
+ * Non maintainer upload.
+ * src/login.c: Applied patch from <marekm@i17linuxb.ists.pwr.wroc.pl> to
+ fix security hole of login not checking the return code from setgid(),
+ initgroups() or setuid(). [#24710]
+
+ -- James Troup <james@nocrew.org> Fri, 17 Jul 1998 18:56:31 +0100
+
+shadow (980403-0.2) frozen unstable; urgency=low
+
+ * (login.defs): fixed UMASK
+ (thanks to James Troup for noticing my screwup :)
+ * Pruned non-Debian changelog entries.
+
+ -- Joel Klecker <jk@espy.org> Mon, 11 May 1998 11:25:22 -0700
+
+shadow (980403-0.1) frozen unstable; urgency=low
+
+ * Non-maintainer release.
+ * New upstream release (18225).
+ * (debian/login.postinst)
+ * Use 'touch' instead of 'cat >' when creating /var/log/faillog
+ (15998,16187,21687).
+ * No longer fails if no previous configured version exists (11433).
+ * (gpasswd): now checks which user invoked it before calling setuid() (18132).
+ * (debian/passwd.postinst): removed bashism (13753).
+ * (groupmod): NULL dereference fixed upstream, as a result, it no longer
+ dumps core when changing group name (16893,17894).
+ * (useradd): no longer segfaults if /etc/default/useradd is missing (18628).
+ * (login.defs.1): now documents more options (13485).
+ * (source): includes 'missing' (13815,18133,21280).
+ * (login.1):
+ * Removed mention of "d_passwd(5)", which doesn't exist,
+ and login.defs.5 now documents /etc/dialups (15176).
+ * Added /etc/nologin to FILES section and reference nologin(5) (21695).
+ * The URL mentioned in Bug#15391 is no longer valid.
+ * (login.defs): no longer sets ULIMIT (17529).
+ * (login):
+ * No longer uses static buffers for group lines (17532).
+ * Doesn't seem to make assumptions about gid_t any longer (21767).
+ * (faillog.8): s-/usr/adm-/var/log-g (19974).
+ * (lastlog.8): notes that "some systems" use /var/log instead of
+ /usr/adm (21746).
+ * Install upstream changelog as 'changelog.gz' as per policy (20052).
+ * (secure-su): Changed /etc/suauth to reference the group 'root'
+ instead of 'wheel' (17593).
+
+ -- Joel Klecker <jk@espy.org> Thu, 30 Apr 1998 18:32:12 -0700
+
+shadow (970616-1) unstable; urgency=low
+
+ * Upstream upgrade.
+ * chage works (10561).
+ * Fix NIS behavior (5634,8734,10032,10545,10984,11160,12064).
+ * Wrote pwconv,pwunconv,grpconv,grpunconv manpage (10940).
+ * vipw fixes (10521,10696,11618,11924,12184,13001)
+ * Fixes for new automake.
+ * Compile with glibc2. (8627,8777,9824,11713,11719,12082,12108,11442).
+ * debian/rules fixes (8876,12468).
+ * /etc/login.defs: UMASK=002 (9102).
+ * chown /dev/vcs* on login (9421,13255).
+ * Added tty9-tty12 to /etc/securetty (11644).
+ * Provide template and manpage for /etc/limits (12289).
+ * Fix security hole in postinst (11769).
+ * login fills out ut_addr field in utmp (10701).
+ * shadowconfig.sh fixes (9189,9328,9386,10968,12452,12469).
+ * Overcome postinst bug in old shadow-passwd package (9939,12120).
+ * useradd default GROUP=100 (9244).
+ * Allow 8 bit chars in chfn (12367).
+ * secure-su - set HOME, use SHELL if set (11003,11189).
+
+ -- Guy Maor <maor@ece.utexas.edu> Fri, 26 Sep 1997 19:23:42 -0500
+
+shadow (970616) unstable; urgency=low
+
+ * vipw preserves permissions on edited files (10521).
+ * various other bug fixes.
+
+ -- Marek Michalkiewicz <marekm@piast.t19.ds.pwr.wroc.pl> Mon, 16 Jun 1997 02:02:00 +0200
+
+shadow (970601) unstable; urgency=low
+
+ * Fix typo in libmisc/mail.c causing login to segfault.
+
+ -- Marek Michalkiewicz <marekm@piast.t19.ds.pwr.wroc.pl> Mon, 2 Jun 1997 07:33:00 +0200
+
+shadow (970502-2) unstable; urgency=low
+
+ * Fixes to shadow group support (grpconv didn't work).
+
+ -- Marek Michalkiewicz <marekm@piast.t19.ds.pwr.wroc.pl> Fri, 2 May 1997 15:48:00 +0200
+
+shadow (970502-1) unstable; urgency=low
+
+ * Upstream upgrade.
+
+ -- Marek Michalkiewicz <marekm@piast.t19.ds.pwr.wroc.pl> Fri, 2 May 1997 03:18:00 +0200
+
+shadow (961025-2) frozen unstable; urgency=medium
+
+ * Fix useradd -D segfault (8098, 8152, 8733).
+ * Fix shadowconfig - permfix only on xlock; /etc/init.d/xdm rewrite, chmod
+ (8102, 8320, 8333, 8708).
+ * Remove HOWTO from usr/doc/passwd as it's in linux-doc (8150).
+ * Fixes to su.1 (8153).
+ * login, passwd, su each conflict and replace with the old shadow-*
+ version. (8269, 8290, 8393, 8394).
+ * Put /etc/shells back in passwd (8328).
+ * Fixed login.postinst for upgrade from shadow-login (8392).
+ * Added -e to pwck for use in shadowconfig: reports only errors, no
+ warnings (8542).
+ * Wrote shadowconfig.8 (8588).
+
+ -- Guy Maor <maor@ece.utexas.edu> Sat, 19 Apr 1997 02:34:59 -0500
+
+shadow (961025-1) unstable; urgency=low
+
+ * Upstream upgrade, new source format.
+
+ -- Guy Maor <maor@ece.utexas.edu> Mon, 10 Feb 1997 02:56:56 -0600
+
+shadow (960530-1) experimental; urgency=LOW
+
+ * Added grpunconv script
+ * Changed prerm/postinst scripts to remove/create shadowed group
+ file
+ * Added vipw/vigr binaries
+ * Renamed package to shadow-passwd
+ * Added packages shadow-su and shadow-login
+ * Added 'Essential: yes' to be able to replace passwd and login
+ * Section now base for shadow-passwd and shadow-login
+ * Added /etc/shell conffile
+ * Added /etc/securetty conffile
+ * Added new conffile /etc/suauth. Set it up so only users in group 0
+ can su to root.
+
+ -- Unknown <unknown@debian.org> Mon, 01 Jul 1996 00:00:00 +0000
+
+shadow (960810-1) base; urgency=LOW
+
+ * Added useradd default file so that default group is no longer 1
+ * Also corrected the useradd manpage
+ * Replaced grpunconv script by real binary which does correct
+ locking.
+ * Added 'source' field control file to control files
+ * Changed version naming in debian.rules
+ * New upstream version
+
+ -- Unknown <unknown@debian.org> Mon, 01 Jan 1996 00:00:00 +0000