summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended/shadow/shadow_4.9.bb
diff options
context:
space:
mode:
authorAlexander Kanavin <alex.kanavin@gmail.com>2021-07-30 13:45:04 +0200
committerRichard Purdie <richard.purdie@linuxfoundation.org>2021-07-30 15:22:01 +0100
commit759df7395908f18b3b68f28d043ac9ebd42dd0c8 (patch)
tree1379bf9d233a345f43477d0fd07d62f83656ecd6 /meta/recipes-extended/shadow/shadow_4.9.bb
parentcb78db7aa14f147ce79c12539c9435cab06f92bf (diff)
downloadopenembedded-core-contrib-759df7395908f18b3b68f28d043ac9ebd42dd0c8.tar.gz
shadow: update 4.8.1 -> 4.9
Add a couple backports to fix builds. Drop 0002-Allow-for-setting-password-in-clear-text.patch; what it adds is horribly insecure and AB testing didn't reveal any regressions or use cases for it. Drop /etc/default/ tweaks as files are no longer installed there. Drop manpage alternatives as manpages are no longer installed. Signed-off-by: Alexander Kanavin <alex.kanavin@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-extended/shadow/shadow_4.9.bb')
-rw-r--r--meta/recipes-extended/shadow/shadow_4.9.bb11
1 files changed, 11 insertions, 0 deletions
diff --git a/meta/recipes-extended/shadow/shadow_4.9.bb b/meta/recipes-extended/shadow/shadow_4.9.bb
new file mode 100644
index 0000000000..2fbd81bf72
--- /dev/null
+++ b/meta/recipes-extended/shadow/shadow_4.9.bb
@@ -0,0 +1,11 @@
+require shadow.inc
+
+# Build falsely assumes that if --enable-libpam is set, we don't need to link against
+# libcrypt. This breaks chsh.
+BUILD_LDFLAGS:append:class-target = " ${@bb.utils.contains('DISTRO_FEATURES', 'pam', '-lcrypt', '', d)}"
+
+BBCLASSEXTEND = "native nativesdk"
+
+# Severity is low and marked as closed and won't fix.
+# https://bugzilla.redhat.com/show_bug.cgi?id=884658
+CVE_CHECK_WHITELIST += "CVE-2013-4235"