[ubuntu/yakkety-proposed] shadow 1:4.2-3.2ubuntu1 (Accepted)

Tue Sep 20 07:51:47 UTC 2016

shadow (1:4.2-3.2ubuntu1) yakkety; urgency=medium

  * Merge with Debian; remaining changes:
    - debian/passwd.upstart: Add an upstart job to clear locks on
      [shadow-]passwd/group.
    - debian/login.defs:
      + Update documentation of USERGROUPS_ENAB: with pam_umask, the UPG
        handling does not only apply to "former (pre-PAM) uses".
      + Update documentation of UMASK: Explain that USERGROUPS_ENAB
        will modify this default for UPGs.
    - debian/{source_shadow.py,rules}: Add apport hook
    - Pass noupdate to pam_motd call for /run/motd.dynamic, to avoid running
      /etc/update-motd.d/* scripts twice.
    - debian/patches/1010_extrausers.patch: Add support to passwd for
      libnss-extrausers
    - debian/patches/1011_extrausers_toggle.patch: extrausers support for
      useradd and groupadd
    - debian/patches/userns/subuids-nonlocal-users: Don't limit
      subuid/subgid support to local users.
  * Dropped changes, included in Debian:
    - Allow LXC devices (lxc/console, lxc/tty[1234]), used from precise on.
    - Add uidmap package based on upstream patches that introduce
      newuidmap/newgidmap as well as /etc/subuid and /etc/subgid. Additional
      updates on those to widen the default allocation to 65536 uids and gids
      and only assign ranges to non-system users.
    - debian/patches/1020_fix_user_busy_errors: Call sub_uid_close in all
      error cases.
  * Dropped changes, included upstream:
    - debian/patches/495_stdout-encrypted-password: chpasswd can report
      password hashes on stdout.
    - debian/patches/496_su_kill_process_group: Kill the child process group,
      rather than just the immediate child.
  * Fix pam_motd calls so that the second pam_motd is the noupdate one rather
    than the first, ensuring /run/motd.dynamic is always populated and shown
    on the first login after boot.  LP: #1368864.
  * Don't call 'pam_exec uname', a change adopted in Debian without
    coordination with the Debian PAM maintainer
  * Use dh_installinit now for installing the upstart job, as we no longer
    generate a dependency on upstart-job.
  * Include /etc/sub[ug]id in the list of files to clear locks for on boot.
    LP: #1304505
  * Add a systemd unit to go with the upstart job, so that lock clearing works
    on newer Ubuntu releases.
  * add support for "chfn --extrausers" (LP: #1495580)
  * debian/patches/1010_extrausers.patch:
    - Fix usermod to handle a readonly /etc gracefully (LP: #1562872)
  * debian/patches/1010_extrausers.patch:
    - Fix usermod to look in extrausers location for basic changes to a
      user's passwd info.  Fixes changing user's real name in Touch via
      AccountsService.  (Does not address updating groups yet, since that's
      less useful now, as we can't update any system groups.)
  * d/p/1021_no_subuids_for_system_users.patch: fix the not creating subuids
    for system users.  (LP: #1545884)
  * Replace debian/passwd.service with debian/passwd.tmpfile, systemd tmpfile
    handling has support for removing files for us on boot.  Thanks to
    Martin Pitt <pitti at ubuntu.com> for the hint.

shadow (1:4.2-3.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Use HTTPS in Vcs-Git.
  * Stop using hardening-wrapper and instead use /usr/share/dpkg/buildflags.mk.
    Closes: #836653

Date: Tue, 20 Sep 2016 09:43:54 +0200
Changed-By: Matthias Klose <doko at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/shadow/1:4.2-3.2ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 20 Sep 2016 09:43:54 +0200
Source: shadow
Binary: passwd login uidmap
Architecture: source
Version: 1:4.2-3.2ubuntu1
Distribution: yakkety
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Matthias Klose <doko at ubuntu.com>
Description:
 login      - system login tools
 passwd     - change and administer password and group data
 uidmap     - programs to help use subuids
Closes: 836653
Launchpad-Bugs-Fixed: 1304505 1368864 1495580 1545884 1562872
Changes:
 shadow (1:4.2-3.2ubuntu1) yakkety; urgency=medium
 .
   * Merge with Debian; remaining changes:
     - debian/passwd.upstart: Add an upstart job to clear locks on
       [shadow-]passwd/group.
     - debian/login.defs:
       + Update documentation of USERGROUPS_ENAB: with pam_umask, the UPG
         handling does not only apply to "former (pre-PAM) uses".
       + Update documentation of UMASK: Explain that USERGROUPS_ENAB
         will modify this default for UPGs.
     - debian/{source_shadow.py,rules}: Add apport hook
     - Pass noupdate to pam_motd call for /run/motd.dynamic, to avoid running
       /etc/update-motd.d/* scripts twice.
     - debian/patches/1010_extrausers.patch: Add support to passwd for
       libnss-extrausers
     - debian/patches/1011_extrausers_toggle.patch: extrausers support for
       useradd and groupadd
     - debian/patches/userns/subuids-nonlocal-users: Don't limit
       subuid/subgid support to local users.
   * Dropped changes, included in Debian:
     - Allow LXC devices (lxc/console, lxc/tty[1234]), used from precise on.
     - Add uidmap package based on upstream patches that introduce
       newuidmap/newgidmap as well as /etc/subuid and /etc/subgid. Additional
       updates on those to widen the default allocation to 65536 uids and gids
       and only assign ranges to non-system users.
     - debian/patches/1020_fix_user_busy_errors: Call sub_uid_close in all
       error cases.
   * Dropped changes, included upstream:
     - debian/patches/495_stdout-encrypted-password: chpasswd can report
       password hashes on stdout.
     - debian/patches/496_su_kill_process_group: Kill the child process group,
       rather than just the immediate child.
   * Fix pam_motd calls so that the second pam_motd is the noupdate one rather
     than the first, ensuring /run/motd.dynamic is always populated and shown
     on the first login after boot.  LP: #1368864.
   * Don't call 'pam_exec uname', a change adopted in Debian without
     coordination with the Debian PAM maintainer
   * Use dh_installinit now for installing the upstart job, as we no longer
     generate a dependency on upstart-job.
   * Include /etc/sub[ug]id in the list of files to clear locks for on boot.
     LP: #1304505
   * Add a systemd unit to go with the upstart job, so that lock clearing works
     on newer Ubuntu releases.
   * add support for "chfn --extrausers" (LP: #1495580)
   * debian/patches/1010_extrausers.patch:
     - Fix usermod to handle a readonly /etc gracefully (LP: #1562872)
   * debian/patches/1010_extrausers.patch:
     - Fix usermod to look in extrausers location for basic changes to a
       user's passwd info.  Fixes changing user's real name in Touch via
       AccountsService.  (Does not address updating groups yet, since that's
       less useful now, as we can't update any system groups.)
   * d/p/1021_no_subuids_for_system_users.patch: fix the not creating subuids
     for system users.  (LP: #1545884)
   * Replace debian/passwd.service with debian/passwd.tmpfile, systemd tmpfile
     handling has support for removing files for us on boot.  Thanks to
     Martin Pitt <pitti at ubuntu.com> for the hint.
 .
 shadow (1:4.2-3.2) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Use HTTPS in Vcs-Git.
   * Stop using hardening-wrapper and instead use /usr/share/dpkg/buildflags.mk.
     Closes: #836653
Checksums-Sha1:
 a083b982ab2ebd4c70ed6ad70d537ef352891378 2432 shadow_4.2-3.2ubuntu1.dsc
 440b3c40b3f18983e11e86ac17a5b055f97723dc 504272 shadow_4.2-3.2ubuntu1.debian.tar.xz
Checksums-Sha256:
 a5d12dae23f17fa0ab7360b7164f1069e2df885a6d5139aead3ffac706b1c5b1 2432 shadow_4.2-3.2ubuntu1.dsc
 8cf6c74b2c41c436e98ca63e229002363a5f62b31f3c5698cfdee49361a7bdf5 504272 shadow_4.2-3.2ubuntu1.debian.tar.xz
Files:
 5c7eef9b04271408507bdf51dba630c5 2432 admin required shadow_4.2-3.2ubuntu1.dsc
 2e395183ee42941aa7c56e549bea0157 504272 admin required shadow_4.2-3.2ubuntu1.debian.tar.xz
Original-Maintainer: Shadow package maintainers <pkg-shadow-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----

iQItBAEBCAAXBQJX4Oo0EBxkb2tvQHVidW50dS5jb20ACgkQvX6qYHePpvUvkRAA
ojqs5HBBFqjxMAtM3hHnYwBJquwK3RGfeOuZEVDZzZ4zSWKL0y3a9QKZ8W9rp9Ce
g9DYLQGQu3BxZaHO2Ub1XEdQsP5Fz/mFkkpOtE7/aH84BZ67iG7QJZvO29wNMpnl
ZlZ8hTbPvZSwnWxi/AXSl5hIr7yUIFfDpTpM6hw7juXsIS7TkjLchFfzQ0BnuZEf
Tv2tGwOOjfeKtq7bFjHP/WKyelHA2VrAVq8jVNx4U7dYyREEDlqfv3qIv45OBxi6
kYK5QsXLpqNl8L7auEYz74a9CvSZSgV/GsU7lFK2XuiJaSol/2Y0WW4NRHsg0OvT
BExt4qV77YbCF2cr0ryap5dpIK2VQq/EoCpmGorRcxWZfwmzZLSU/Lw5xLt9hUWV
su3oW3nPSVR1Nwjf6P6UWoQ7S2q0UEyslAsBRYR8t9u+t6p64fqI4hwht15HIDkj
CZegNSNLLqvJwJe0QNwxDj6KXl3ONkxdk/fny2GPT6dPtz7y8vluKcWnrEViUbOZ
Mz9BC9CEwAl28M+VetEr3x5otvCmbqXOqwPuYrtXpmTeiLJBwH90bn0NnuUcXAZ1
HXzQ2P7BSefCzv1GYSCCDDHGvfj1hH+HA3b9eGhO71ElSXfqGpsjZ89B+1OgJKsj
XU2eKOYPt6beDaAFqI57HhnXZpXqpUDHLQjByfirO40=
=w3j6
-----END PGP SIGNATURE-----