Announce: shadow 4.0.5

shadow-4.0.4.1 -> shadow-4.0.5

- change libmisc to private static library,
- added SELinux support (basing on patch from Gentoo),
- chage: more verbose/human readable -l output. This output is much more
   beter for send directly via email for each users as message with account
   status (for example as message with warning about account/password expiration),
- login: fixed handle -f option: now it works correctly without specify "-h
   <host>" if open login session localy is required (thanks for help
   investigate bug for Krzysztof Kotlenga),
- userdel: when removing a user with userdel, userdel was always exits with 1 (fixed).
   Based on http://bugs.gentoo.org/show_bug.cgi?id=66687,
- useradd: added handle /etc/defaults/useradd::CREATE_MAIL_SPOOL={yes|no}.
   Now on adding user account can be also created empty user mail spool.
   Curent code handle only mailbox.
   TODO: add handle create user mail spool in maildir format.
- useradd: when placing symlinks into /etc/skel copy_tree of
   libmisc/copydir.c will properly create the symlink in the destination
   directory but not change the ownership to the target user/group. This
   makes httpd Option SymlinkIfOwnerMatch break for default weg pages
   including symlinks placed into /etc/skel/public_html for example.
   http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=66819
- su: add pam_open_session() support. If builded without PAM support
   propagate $DISPLAY and $XAUTHORITY enviroment variables.
   Based on http://www.gentoo.org/cgi-bin/viewcvs.cgi/sys-apps/shadow/files/shadow-4.0.4.1-su-pam_open_session.patch?rev=1.1
- applied 036_pam_access_with_preauth.patch Debian patch submited by Bjorn
   Torkelsson <[email protected]>: add support for PAM account
   management to restrict access using pam_access when login is invoked with -f.
- applied OWL patches by Solar Designer <[email protected]>:
   shadow-4.0.4.1-owl-pam-auth.diff:
     Moved the PAM authentication in user management commands after
     command-line parsing, made it use separate service names for each command.
     Use constant strings rather than argv[0] for syslog ident in the user
     management commands,
   shadow-4.0.4.1-owl-tmp.diff:
     Remove using mktemp() if mkstemp() prototype not found (use allways mkstemp()),
   shadow-4.0.4.1-owl-check-reads.diff:
     Add checking for read errors in commonio and vipw/vigr (not doing so could
     result in data loss when the records are written back),
- fixed securirty bug in libmisc/pwdcheck.c which allow unauthorized
   account properties modification.
   Affected tools: chfn and chsh.
   Bug was discovered by Martin Schulze <[email protected]>.
- added it translation (by Danilo Piazzalunga <[email protected]>),
- added sk translation (by Peter Mann <[email protected]>, submited by Christian
   Perrier <[email protected]>),
- added es translation (by Ruben Porras <[email protected]>),
- updated ko translation (by Changwoo Ryu <[email protected]>),
- added fi translation (by Tommi Vainikainen <[email protected]>),
- new translations: bs, ca, da, eu, he, id, nb, nl, nn, pt, pt_BR, tr,
   zh_CN (stolen from Debian),
- remove adduser(8) roff include man page to useradd(8).

kloczek
-- 
-----------------------------------------------------------
*Ludzie nie majÂą problemĂłw, tylko sobie sami je stwarzajÂą*
-----------------------------------------------------------
Tomasz KÂłoczko, sys adm @zie.pg.gda.pl|*e-mail: [email protected]*