packages/utils/shadow/patches, branch master

shadow: update to 4.19.4

2026-05-22T03:57:39Z

Large version jump from 4.8.1 to 4.19.4 (latest upstream LTS). Build changes: - Refresh patches/004-fix-su-controoling-term.patch: su.c moved the ioctl() call from line 1122 to 1169 and changed (char *) 0 to (char *) NULL; update patch context and re-canonicalise through quilt (blank context line spacing). - New CONFIGURE_ARGS: * --disable-logind: 4.19.4 added an optional libsystemd-based logind integration which OpenWrt doesn't ship. * --without-libbsd: shadow's configure now hard-fails on missing readpassphrase() unless libbsd is found; the in-tree lib/readpassphrase.c fallback is enabled by --without-libbsd. * --without-sssd: avoid dragging in an sssd build dep. * --disable-subordinate-ids: 4.19.4 builds libsubid (subuid/subgid runtime API) unconditionally when subids are enabled, and its libtool -export-symbols-regex generates a version script that binutils 2.40+ rejects against libxcrypt's versioned crypt_checksalt@@XCRYPT_4.3 symbol. Disabling subordinate-ids skips libsubid entirely; OpenWrt doesn't ship libsubid. - Drop newgidmap, newuidmap, lastlog and groups from SHADOW_APPLETS: newgidmap/newuidmap are only built when subordinate-ids are enabled, lastlog defaults to disabled in 4.19.4, and the groups binary was removed from shadow upstream (use coreutils). Test coverage: - Replace the per-applet --version check in test.sh with per-applet functional tests: pwck -> 'pwck -r' read-only consistency check; accept non-zero exit since the CI container's /etc/passwd trips minor warnings. grpck -> 'grpck -r' read-only consistency check. chage -> 'chage -l root' lists password aging info. useradd -> 'useradd -D' dumps defaults without modifying state. passwd -> 'passwd -S root' prints the password status line. faillog -> create empty /var/log/faillog then 'faillog -a' must emit a header line. login/su -> PAM-interactive; presence covered by generic tests. Other applets -> verify binary presence (CI's generic tests already check stripped, no build paths, linked-libs). - Add test-version.sh as a generic-version-check override: shadow tools don't honour --version (only --help), so the framework's probe finds no PKG_VERSION match in any binary and would otherwise fail Generic tests for every sub-package. Signed-off-by: Alexandru Ardelean

shadow: update to 4.8.1

2020-02-02T21:07:52Z

Fixed license information. Removed patch requiring autoreconf and replaced with a configure variable. Removed faulty patch that broke systems without a disabled crypt size hack. Replaced with using a SED command as well as bcrypt, which works in musl. Removed su patch and converted it to a SED command in the Makefile. Added new shadow utilities. Signed-off-by: Rosen Penev

shadow: change default encryption method from DES to SHA512

2019-12-18T10:37:39Z

Busybox in default uses SHA512 as well. On big ditribution this default is sourced from PAM. That means that shadow reads pam settings and uses that. OpenWrt in most cases does not have PAM installed and in such case shadow fallbacks to its own default which is DES. This just changes that default to SHA512 which is consistent with rest of the system. Signed-off-by: Karel Kočí

shadow: Update to 4.6

2018-08-16T01:31:34Z

Switched dead URLs to new upstream. Signed-off-by: Rosen Penev

shadow: use proper fix for checking subordinate IDs support

2017-11-15T18:08:42Z

During 4.2.1 version update support for subordinate IDs has been disabled. It was handled by: 1) Adding --disable-subordinate-ids to avoid: configure: error: cannot run test program while cross compiling 2) Adding patch 003-fix-disabling-subids.patch to avoid: usermod.c: In function 'process_flags': usermod.c:1364:10: error: 'vflg' undeclared (first use in this function) if ( (vflg || Vflg) ^ This commit adds a patch with a proper configure.in fix. We don't need to disable subordinate IDs anymore. Signed-off-by: Rafał Miłecki

shadow: fix su controlling terminal #1521

2015-07-03T11:44:10Z

Signed-off-by: Pelle Johnsen

shadow: update to 4.2.1, add PKG_LICENSE

2014-08-12T06:49:34Z

Signed-off-by: Steven Barth

shadow: adopt here

2014-07-18T14:27:31Z

Signed-off-by: Steven Barth