From 8b3029e4301896203f7bcf63460bdd7dcc5dc47c Mon Sep 17 00:00:00 2001 From: nekral-guest Date: Sat, 6 Sep 2008 21:42:26 +0000 Subject: [PATCH] * NEWS: Added configure --enable-account-tools-setuid (default) / --disable-account-tools-setuid options. This permits to disable the PAM authentication of the caller for chage, chgpasswd, chpasswd, groupadd, groupdel, groupmod, newusers, useradd, userdel, and usermod. This authentication is not necessary when these tools are not installed setuid root. --- ChangeLog | 6 ++++++ NEWS | 6 ++++++ 2 files changed, 12 insertions(+) diff --git a/ChangeLog b/ChangeLog index 0c2afdc8..8be1c3b2 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,11 @@ 2008-09-06 Nicolas François + * NEWS: Added configure --enable-account-tools-setuid (default) / + --disable-account-tools-setuid options. This permits to disable + the PAM authentication of the caller for chage, chgpasswd, + chpasswd, groupadd, groupdel, groupmod, newusers, useradd, + userdel, and usermod. This authentication is not necessary when + these tools are not installed setuid root. * configure.in: Added option --enable-account-tools-setuid to enable/disable the usage of PAM to authenticate the callers of account management tools: chage, chgpasswd, chpasswd, groupadd, diff --git a/NEWS b/NEWS index 4bc228e0..205dc2e9 100644 --- a/NEWS +++ b/NEWS @@ -6,6 +6,12 @@ shadow-4.1.2.1 -> shadow-4.1.3 UNRELEASED - packaging * Added support for OpenPAM. * Added support for uclibc. + * Added configure --enable-account-tools-setuid (default) / + --disable-account-tools-setuid options. This permits to disable the + PAM authentication of the caller for chage, chgpasswd, chpasswd, + groupadd, groupdel, groupmod, newusers, useradd, userdel, and usermod. + This authentication is not necessary when these tools are not + installed setuid root. - gpasswd * Added support for long options --add (-a), --delete (-d), -- 2.40.0