[arch-dev-public] [signoff] shadow 4.0.18.2-2

Tom K tom at archlinux.org
Sat Dec 1 04:06:52 EST 2007


Aaron Griffin wrote:
> On Nov 30, 2007 6:08 PM, Aaron Griffin <aaronmgriffin at gmail.com> wrote:
>> On Nov 30, 2007 5:49 PM, Tom K <tom at archlinux.org> wrote:
>>> Fix for md5sum problem caused by $Id: line in login.defs.
>>>
>>> As before, I would be grateful if someone could do a x86_64 build.
>> Done! I saw the commit message and built
>> zoom zoom
> 
> To help me out here - didn't you close out like 4 or 5 bugs? Mind
> listing them for me?

Heh.. I already did for 4.0.18.2-1, but then that stupid $Id: thing
screwed me up. Here they are again:

FS#8050 - The "shadow" package: adduser changes home directory
permissions set by useradd
FS#8051 - The "shadow" package: please set 700 permissions instead of 755
FS#8724 - Shadow is now maintained by Debian
FS#8742 - security flaw on console login - any username is denied
directly without asking for password

the last being the reason for this particular party.

T.




More information about the arch-dev-public mailing list