<div dir="ltr"><div>Right, I have now dropped it.</div><div><br></div><div>Alex<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 10 Dec 2019 at 05:57, Alex Kiernan <<a href="mailto:alex.kiernan@gmail.com">alex.kiernan@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Thu, Dec 5, 2019 at 3:46 PM Alexander Kanavin <<a href="mailto:alex.kanavin@gmail.com" target="_blank">alex.kanavin@gmail.com</a>> wrote:<br>
><br>
> Drop two backports.<br>
><br>
> Refactor 0001-useradd.c-create-parent-directories-when-necessary.patch<br>
> to make the changes less invasive (and easier to rebase).<br>
><br>
<br>
Is that change even needed any more?<br>
<br>
<a href="https://github.com/shadow-maint/shadow/commit/b3b6d9d77c1d18b98670b97157777bb74092cd69" rel="noreferrer" target="_blank">https://github.com/shadow-maint/shadow/commit/b3b6d9d77c1d18b98670b97157777bb74092cd69</a><br>
<br>
Looks like it ought to be doing the same thing.<br>
<br>
> Rebase the rest of the paches.<br>
><br>
> Add a patch to remove the check for validity of login shells<br>
> which does not work in our environment.<br>
><br>
> Signed-off-by: Alexander Kanavin <<a href="mailto:alex.kanavin@gmail.com" target="_blank">alex.kanavin@gmail.com</a>><br>
> ---<br>
> ...01-Disable-use-of-syslog-for-sysroot.patch | 18 ++-<br>
> ...eck-for-validity-of-shell-executable.patch | 29 +++++<br>
> ...chg-shadow-field-reproducible-re.-71.patch | 89 --------------<br>
> ...ure.ac-fix-configure-error-with-dash.patch | 36 ------<br>
> ...te-parent-directories-when-necessary.patch | 116 ------------------<br>
> ...-for-setting-password-in-clear-text.patch} | 101 +++++++--------<br>
> ...te-parent-directories-when-necessary.patch | 63 ++++++++++<br>
> ...nexpected-open-failure-in-chroot-env.patch | 15 ++-<br>
> .../files/shadow-relaxed-usernames.patch | 51 +++++---<br>
> meta/recipes-extended/shadow/shadow.inc | 11 +-<br>
> .../shadow/{<a href="http://shadow_4.6.bb" rel="noreferrer" target="_blank">shadow_4.6.bb</a> => <a href="http://shadow_4.8.bb" rel="noreferrer" target="_blank">shadow_4.8.bb</a>} | 0<br>
> 11 files changed, 196 insertions(+), 333 deletions(-)<br>
> create mode 100644 meta/recipes-extended/shadow/files/0001-Do-not-check-for-validity-of-shell-executable.patch<br>
> delete mode 100644 meta/recipes-extended/shadow/files/0001-Make-the-sp_lstchg-shadow-field-reproducible-re.-71.patch<br>
> delete mode 100644 meta/recipes-extended/shadow/files/0001-configure.ac-fix-configure-error-with-dash.patch<br>
> delete mode 100644 meta/recipes-extended/shadow/files/0001-useradd.c-create-parent-directories-when-necessary.patch<br>
> rename meta/recipes-extended/shadow/files/{allow-for-setting-password-in-clear-text.patch => 0002-Allow-for-setting-password-in-clear-text.patch} (81%)<br>
> create mode 100644 meta/recipes-extended/shadow/files/0004-useradd.c-create-parent-directories-when-necessary.patch<br>
> rename meta/recipes-extended/shadow/{<a href="http://shadow_4.6.bb" rel="noreferrer" target="_blank">shadow_4.6.bb</a> => <a href="http://shadow_4.8.bb" rel="noreferrer" target="_blank">shadow_4.8.bb</a>} (100%)<br>
><br>
> diff --git a/meta/recipes-extended/shadow/files/0001-Disable-use-of-syslog-for-sysroot.patch b/meta/recipes-extended/shadow/files/0001-Disable-use-of-syslog-for-sysroot.patch<br>
> index aac2d42b12a..ab317b9aa03 100644<br>
> --- a/meta/recipes-extended/shadow/files/0001-Disable-use-of-syslog-for-sysroot.patch<br>
> +++ b/meta/recipes-extended/shadow/files/0001-Disable-use-of-syslog-for-sysroot.patch<br>
> @@ -1,4 +1,4 @@<br>
> -From 8cf3454d567f77233023be49a39a33e9f0836f89 Mon Sep 17 00:00:00 2001<br>
> +From fa2d9453656641002802d8165e80adb9e6a729d2 Mon Sep 17 00:00:00 2001<br>
> From: Scott Garman <<a href="mailto:scott.a.garman@intel.com" target="_blank">scott.a.garman@intel.com</a>><br>
> Date: Thu, 14 Apr 2016 12:28:57 +0200<br>
> Subject: [PATCH] Disable use of syslog for sysroot<br>
> @@ -12,6 +12,7 @@ Upstream-Status: Inappropriate [disable feature]<br>
> Signed-off-by: Scott Garman <<a href="mailto:scott.a.garman@intel.com" target="_blank">scott.a.garman@intel.com</a>><br>
> Signed-off-by: Peter Kjellerstedt <<a href="mailto:peter.kjellerstedt@axis.com" target="_blank">peter.kjellerstedt@axis.com</a>><br>
> Signed-off-by: Chen Qi <<a href="mailto:Qi.Chen@windriver.com" target="_blank">Qi.Chen@windriver.com</a>><br>
> +<br>
> ---<br>
> src/groupadd.c | 3 +++<br>
> src/groupdel.c | 3 +++<br>
> @@ -23,7 +24,7 @@ Signed-off-by: Chen Qi <<a href="mailto:Qi.Chen@windriver.com" target="_blank">Qi.Chen@windriver.com</a>><br>
> 7 files changed, 21 insertions(+)<br>
><br>
> diff --git a/src/groupadd.c b/src/groupadd.c<br>
> -index 63e1c48..a596c49 100644<br>
> +index 2dd8eec..e9c4bb7 100644<br>
> --- a/src/groupadd.c<br>
> +++ b/src/groupadd.c<br>
> @@ -34,6 +34,9 @@<br>
> @@ -37,7 +38,7 @@ index 63e1c48..a596c49 100644<br>
> #include <fcntl.h><br>
> #include <getopt.h><br>
> diff --git a/src/groupdel.c b/src/groupdel.c<br>
> -index 70bed01..ababd81 100644<br>
> +index f941a84..5a70056 100644<br>
> --- a/src/groupdel.c<br>
> +++ b/src/groupdel.c<br>
> @@ -34,6 +34,9 @@<br>
> @@ -65,7 +66,7 @@ index fc91c8b..2842514 100644<br>
> #include <getopt.h><br>
> #include <grp.h><br>
> diff --git a/src/groupmod.c b/src/groupmod.c<br>
> -index 72daf2c..8965f9d 100644<br>
> +index 1dca5fc..bc14438 100644<br>
> --- a/src/groupmod.c<br>
> +++ b/src/groupmod.c<br>
> @@ -34,6 +34,9 @@<br>
> @@ -79,7 +80,7 @@ index 72daf2c..8965f9d 100644<br>
> #include <fcntl.h><br>
> #include <getopt.h><br>
> diff --git a/src/useradd.c b/src/useradd.c<br>
> -index 3aaf45c..1ab9174 100644<br>
> +index 4af0f7c..1b7bf06 100644<br>
> --- a/src/useradd.c<br>
> +++ b/src/useradd.c<br>
> @@ -34,6 +34,9 @@<br>
> @@ -93,7 +94,7 @@ index 3aaf45c..1ab9174 100644<br>
> #include <ctype.h><br>
> #include <errno.h><br>
> diff --git a/src/userdel.c b/src/userdel.c<br>
> -index c8de1d3..24d3ea9 100644<br>
> +index cc951e5..153e0be 100644<br>
> --- a/src/userdel.c<br>
> +++ b/src/userdel.c<br>
> @@ -34,6 +34,9 @@<br>
> @@ -107,7 +108,7 @@ index c8de1d3..24d3ea9 100644<br>
> #include <errno.h><br>
> #include <fcntl.h><br>
> diff --git a/src/usermod.c b/src/usermod.c<br>
> -index ccfbb99..24fb60d 100644<br>
> +index 05b9871..21c6da9 100644<br>
> --- a/src/usermod.c<br>
> +++ b/src/usermod.c<br>
> @@ -34,6 +34,9 @@<br>
> @@ -120,6 +121,3 @@ index ccfbb99..24fb60d 100644<br>
> #include <assert.h><br>
> #include <ctype.h><br>
> #include <errno.h><br>
> ---<br>
> -2.11.0<br>
> -<br>
> diff --git a/meta/recipes-extended/shadow/files/0001-Do-not-check-for-validity-of-shell-executable.patch b/meta/recipes-extended/shadow/files/0001-Do-not-check-for-validity-of-shell-executable.patch<br>
> new file mode 100644<br>
> index 00000000000..2d15ff0673a<br>
> --- /dev/null<br>
> +++ b/meta/recipes-extended/shadow/files/0001-Do-not-check-for-validity-of-shell-executable.patch<br>
> @@ -0,0 +1,29 @@<br>
> +From 0d0aded7307a9f4ee0d299951512acd18b3e029e Mon Sep 17 00:00:00 2001<br>
> +From: Alexander Kanavin <<a href="mailto:alex.kanavin@gmail.com" target="_blank">alex.kanavin@gmail.com</a>><br>
> +Date: Wed, 4 Dec 2019 19:28:48 +0100<br>
> +Subject: [PATCH] Do not check for validity of shell executable.<br>
> +<br>
> +This kind of check fails when building a rootfs.<br>
> +<br>
> +Upstream-Status: Inappropriate [oe-core specific]<br>
> +Signed-off-by: Alexander Kanavin <<a href="mailto:alex.kanavin@gmail.com" target="_blank">alex.kanavin@gmail.com</a>><br>
> +---<br>
> + src/useradd.c | 5 +----<br>
> + 1 file changed, 1 insertion(+), 4 deletions(-)<br>
> +<br>
> +diff --git a/src/useradd.c b/src/useradd.c<br>
> +index 4af0f7c..898fe02 100644<br>
> +--- a/src/useradd.c<br>
> ++++ b/src/useradd.c<br>
> +@@ -1328,10 +1328,7 @@ static void process_flags (int argc, char **argv)<br>
> + if ( ( !VALID (optarg) )<br>
> + || ( ('\0' != optarg[0])<br>
> + && ('/' != optarg[0])<br>
> +- && ('*' != optarg[0]) )<br>
> +- || (stat(optarg, &st) != 0)<br>
> +- || (S_ISDIR(st.st_mode))<br>
> +- || (access(optarg, X_OK) != 0)) {<br>
> ++ && ('*' != optarg[0]) )) {<br>
> + fprintf (stderr,<br>
> + _("%s: invalid shell '%s'\n"),<br>
> + Prog, optarg);<br>
> diff --git a/meta/recipes-extended/shadow/files/0001-Make-the-sp_lstchg-shadow-field-reproducible-re.-71.patch b/meta/recipes-extended/shadow/files/0001-Make-the-sp_lstchg-shadow-field-reproducible-re.-71.patch<br>
> deleted file mode 100644<br>
> index de0ba3ebb42..00000000000<br>
> --- a/meta/recipes-extended/shadow/files/0001-Make-the-sp_lstchg-shadow-field-reproducible-re.-71.patch<br>
> +++ /dev/null<br>
> @@ -1,89 +0,0 @@<br>
> -From fe34a2a0e44bc80ff213bfd185046a5f10c94997 Mon Sep 17 00:00:00 2001<br>
> -From: Chris Lamb <<a href="mailto:chris@chris-lamb.co.uk" target="_blank">chris@chris-lamb.co.uk</a>><br>
> -Date: Wed, 2 Jan 2019 18:06:16 +0000<br>
> -Subject: [PATCH 1/2] Make the sp_lstchg shadow field reproducible (re. #71)<br>
> -<br>
> -From <<a href="https://github.com/shadow-maint/shadow/pull/71" rel="noreferrer" target="_blank">https://github.com/shadow-maint/shadow/pull/71</a>>:<br>
> -<br>
> -```<br>
> -The third field in the /etc/shadow file (sp_lstchg) contains the date of<br>
> -the last password change expressed as the number of days since Jan 1, 1970.<br>
> -As this is a relative time, creating a user today will result in:<br>
> -<br>
> -username:17238:0:99999:7:::<br>
> -whilst creating the same user tomorrow will result in:<br>
> -<br>
> -username:17239:0:99999:7:::<br>
> -This has an impact for the Reproducible Builds[0] project where we aim to<br>
> -be independent of as many elements the build environment as possible,<br>
> -including the current date.<br>
> -<br>
> -This patch changes the behaviour to use the SOURCE_DATE_EPOCH[1]<br>
> -environment variable (instead of Jan 1, 1970) if valid.<br>
> -```<br>
> -<br>
> -This updated PR adds some missing calls to gettime (). This was originally<br>
> -filed by Johannes Schauer in Debian as #917773 [2].<br>
> -<br>
> -[0] <a href="https://reproducible-builds.org/" rel="noreferrer" target="_blank">https://reproducible-builds.org/</a><br>
> -[1] <a href="https://reproducible-builds.org/specs/source-date-epoch/" rel="noreferrer" target="_blank">https://reproducible-builds.org/specs/source-date-epoch/</a><br>
> -[2] <a href="https://bugs.debian.org/917773" rel="noreferrer" target="_blank">https://bugs.debian.org/917773</a><br>
> -<br>
> -Upstream-Status: Backport<br>
> -Signed-off-by: Alex Kiernan <<a href="mailto:alex.kiernan@gmail.com" target="_blank">alex.kiernan@gmail.com</a>><br>
> ----<br>
> - libmisc/pwd2spwd.c | 3 +--<br>
> - src/pwck.c | 2 +-<br>
> - src/pwconv.c | 2 +-<br>
> - 3 files changed, 3 insertions(+), 4 deletions(-)<br>
> -<br>
> -diff --git a/libmisc/pwd2spwd.c b/libmisc/pwd2spwd.c<br>
> -index c1b9b29ac873..6799dd50d490 100644<br>
> ---- a/libmisc/pwd2spwd.c<br>
> -+++ b/libmisc/pwd2spwd.c<br>
> -@@ -40,7 +40,6 @@<br>
> - #include "prototypes.h"<br>
> - #include "defines.h"<br>
> - #include <pwd.h><br>
> --extern time_t time (time_t *);<br>
> -<br>
> - /*<br>
> - * pwd_to_spwd - create entries for new spwd structure<br>
> -@@ -66,7 +65,7 @@ struct spwd *pwd_to_spwd (const struct passwd *pw)<br>
> - */<br>
> - sp.sp_min = 0;<br>
> - sp.sp_max = (10000L * DAY) / SCALE;<br>
> -- sp.sp_lstchg = (long) time ((time_t *) 0) / SCALE;<br>
> -+ sp.sp_lstchg = (long) gettime () / SCALE;<br>
> - if (0 == sp.sp_lstchg) {<br>
> - /* Better disable aging than requiring a password<br>
> - * change */<br>
> -diff --git a/src/pwck.c b/src/pwck.c<br>
> -index 0ffb711efb13..f70071b12500 100644<br>
> ---- a/src/pwck.c<br>
> -+++ b/src/pwck.c<br>
> -@@ -609,7 +609,7 @@ static void check_pw_file (int *errors, bool *changed)<br>
> - sp.sp_inact = -1;<br>
> - sp.sp_expire = -1;<br>
> - sp.sp_flag = SHADOW_SP_FLAG_UNSET;<br>
> -- sp.sp_lstchg = (long) time ((time_t *) 0) / SCALE;<br>
> -+ sp.sp_lstchg = (long) gettime () / SCALE;<br>
> - if (0 == sp.sp_lstchg) {<br>
> - /* Better disable aging than<br>
> - * requiring a password change<br>
> -diff --git a/src/pwconv.c b/src/pwconv.c<br>
> -index 9c69fa131d8e..f932f266c59c 100644<br>
> ---- a/src/pwconv.c<br>
> -+++ b/src/pwconv.c<br>
> -@@ -267,7 +267,7 @@ int main (int argc, char **argv)<br>
> - spent.sp_flag = SHADOW_SP_FLAG_UNSET;<br>
> - }<br>
> - spent.sp_pwdp = pw->pw_passwd;<br>
> -- spent.sp_lstchg = (long) time ((time_t *) 0) / SCALE;<br>
> -+ spent.sp_lstchg = (long) gettime () / SCALE;<br>
> - if (0 == spent.sp_lstchg) {<br>
> - /* Better disable aging than requiring a password<br>
> - * change */<br>
> ---<br>
> -2.17.1<br>
> -<br>
> diff --git a/meta/recipes-extended/shadow/files/0001-configure.ac-fix-configure-error-with-dash.patch b/meta/recipes-extended/shadow/files/0001-configure.ac-fix-configure-error-with-dash.patch<br>
> deleted file mode 100644<br>
> index a74cbb0c0e7..00000000000<br>
> --- a/meta/recipes-extended/shadow/files/0001-configure.ac-fix-configure-error-with-dash.patch<br>
> +++ /dev/null<br>
> @@ -1,36 +0,0 @@<br>
> -From 3c52a84ff8775590e7e9da9c0d4408c23494305e Mon Sep 17 00:00:00 2001<br>
> -From: Yi Zhao <<a href="mailto:yi.zhao@windriver.com" target="_blank">yi.zhao@windriver.com</a>><br>
> -Date: Mon, 17 Jun 2019 15:36:34 +0800<br>
> -Subject: [PATCH] <a href="http://configure.ac" rel="noreferrer" target="_blank">configure.ac</a>: fix configure error with dash<br>
> -<br>
> -A configure error occurs when /bin/sh -> dash:<br>
> - checking for is_selinux_enabled in -lselinux... yes<br>
> - checking for semanage_connect in -lsemanage... yes<br>
> - configure: 16322: test: yesyes: unexpected operator<br>
> -<br>
> -Use "=" instead of "==" since dash doesn't support this operator.<br>
> -<br>
> -Upstream-Status: Backport<br>
> -[<a href="https://github.com/shadow-maint/shadow/commit/3c52a84ff8775590e7e9da9c0d4408c23494305e" rel="noreferrer" target="_blank">https://github.com/shadow-maint/shadow/commit/3c52a84ff8775590e7e9da9c0d4408c23494305e</a>]<br>
> -<br>
> -Signed-off-by: Yi Zhao <<a href="mailto:yi.zhao@windriver.com" target="_blank">yi.zhao@windriver.com</a>><br>
> ----<br>
> - <a href="http://configure.ac" rel="noreferrer" target="_blank">configure.ac</a> | 2 +-<br>
> - 1 file changed, 1 insertion(+), 1 deletion(-)<br>
> -<br>
> -diff --git a/<a href="http://configure.ac" rel="noreferrer" target="_blank">configure.ac</a> b/<a href="http://configure.ac" rel="noreferrer" target="_blank">configure.ac</a><br>
> -index 6762556..1907afb 100644<br>
> ---- a/<a href="http://configure.ac" rel="noreferrer" target="_blank">configure.ac</a><br>
> -+++ b/<a href="http://configure.ac" rel="noreferrer" target="_blank">configure.ac</a><br>
> -@@ -500,7 +500,7 @@ if test "$with_selinux" != "no"; then<br>
> - AC_MSG_ERROR([libsemanage not found])<br>
> - fi<br>
> -<br>
> -- if test "$selinux_lib$semanage_lib" == "yesyes" ; then<br>
> -+ if test "$selinux_lib$semanage_lib" = "yesyes" ; then<br>
> - AC_DEFINE(WITH_SELINUX, 1,<br>
> - [Build shadow with SELinux support])<br>
> - LIBSELINUX="-lselinux"<br>
> ---<br>
> -2.7.4<br>
> -<br>
> diff --git a/meta/recipes-extended/shadow/files/0001-useradd.c-create-parent-directories-when-necessary.patch b/meta/recipes-extended/shadow/files/0001-useradd.c-create-parent-directories-when-necessary.patch<br>
> deleted file mode 100644<br>
> index faa6f68ebe2..00000000000<br>
> --- a/meta/recipes-extended/shadow/files/0001-useradd.c-create-parent-directories-when-necessary.patch<br>
> +++ /dev/null<br>
> @@ -1,116 +0,0 @@<br>
> -Subject: [PATCH] useradd.c: create parent directories when necessary<br>
> -<br>
> -Upstream-Status: Inappropriate [OE specific]<br>
> -<br>
> -Signed-off-by: Chen Qi <<a href="mailto:Qi.Chen@windriver.com" target="_blank">Qi.Chen@windriver.com</a>><br>
> ----<br>
> - src/useradd.c | 80 +++++++++++++++++++++++++++++++++++++++--------------------<br>
> - 1 file changed, 53 insertions(+), 27 deletions(-)<br>
> -<br>
> -diff --git a/src/useradd.c b/src/useradd.c<br>
> -index 00a3c30..9ecbb58 100644<br>
> ---- a/src/useradd.c<br>
> -+++ b/src/useradd.c<br>
> -@@ -2021,6 +2021,35 @@ static void usr_update (void)<br>
> - }<br>
> -<br>
> - /*<br>
> -+ * mkdir_p - create directories, including parent directories when needed<br>
> -+ *<br>
> -+ * similar to `mkdir -p'<br>
> -+ */<br>
> -+void mkdir_p(const char *path) {<br>
> -+ int len = strlen(path);<br>
> -+ char newdir[len + 1];<br>
> -+ mode_t mode = 0755;<br>
> -+ int i = 0;<br>
> -+<br>
> -+ if (path[i] == '\0') {<br>
> -+ return;<br>
> -+ }<br>
> -+<br>
> -+ /* skip the leading '/' */<br>
> -+ i++;<br>
> -+<br>
> -+ while(path[i] != '\0') {<br>
> -+ if (path[i] == '/') {<br>
> -+ strncpy(newdir, path, i);<br>
> -+ newdir[i] = '\0';<br>
> -+ mkdir(newdir, mode);<br>
> -+ }<br>
> -+ i++;<br>
> -+ }<br>
> -+ mkdir(path, mode);<br>
> -+}<br>
> -+<br>
> -+/*<br>
> - * create_home - create the user's home directory<br>
> - *<br>
> - * create_home() creates the user's home directory if it does not<br>
> -@@ -2038,39 +2067,36 @@ static void create_home (void)<br>
> - fail_exit (E_HOMEDIR);<br>
> - }<br>
> - #endif<br>
> -- /* XXX - create missing parent directories. --marekm */<br>
> -- if (mkdir (prefix_user_home, 0) != 0) {<br>
> -- fprintf (stderr,<br>
> -- _("%s: cannot create directory %s\n"),<br>
> -- Prog, prefix_user_home);<br>
> -+ mkdir_p(user_home);<br>
> -+ }<br>
> -+ if (access (prefix_user_home, F_OK) != 0) {<br>
> - #ifdef WITH_AUDIT<br>
> -- audit_logger (AUDIT_ADD_USER, Prog,<br>
> -- "adding home directory",<br>
> -- user_name, (unsigned int) user_id,<br>
> -- SHADOW_AUDIT_FAILURE);<br>
> -+ audit_logger (AUDIT_ADD_USER, Prog,<br>
> -+ "adding home directory",<br>
> -+ user_name, (unsigned int) user_id,<br>
> -+ SHADOW_AUDIT_FAILURE);<br>
> - #endif<br>
> -- fail_exit (E_HOMEDIR);<br>
> -- }<br>
> -- (void) chown (prefix_user_home, user_id, user_gid);<br>
> -- chmod (prefix_user_home,<br>
> -- 0777 & ~getdef_num ("UMASK", GETDEF_DEFAULT_UMASK));<br>
> -- home_added = true;<br>
> -+ fail_exit (E_HOMEDIR);<br>
> -+ }<br>
> -+ (void) chown (prefix_user_home, user_id, user_gid);<br>
> -+ chmod (prefix_user_home,<br>
> -+ 0777 & ~getdef_num ("UMASK", GETDEF_DEFAULT_UMASK));<br>
> -+ home_added = true;<br>
> - #ifdef WITH_AUDIT<br>
> -- audit_logger (AUDIT_ADD_USER, Prog,<br>
> -- "adding home directory",<br>
> -- user_name, (unsigned int) user_id,<br>
> -- SHADOW_AUDIT_SUCCESS);<br>
> -+ audit_logger (AUDIT_ADD_USER, Prog,<br>
> -+ "adding home directory",<br>
> -+ user_name, (unsigned int) user_id,<br>
> -+ SHADOW_AUDIT_SUCCESS);<br>
> - #endif<br>
> - #ifdef WITH_SELINUX<br>
> -- /* Reset SELinux to create files with default contexts */<br>
> -- if (reset_selinux_file_context () != 0) {<br>
> -- fprintf (stderr,<br>
> -- _("%s: cannot reset SELinux file creation context\n"),<br>
> -- Prog);<br>
> -- fail_exit (E_HOMEDIR);<br>
> -- }<br>
> --#endif<br>
> -+ /* Reset SELinux to create files with default contexts */<br>
> -+ if (reset_selinux_file_context () != 0) {<br>
> -+ fprintf (stderr,<br>
> -+ _("%s: cannot reset SELinux file creation context\n"),<br>
> -+ Prog);<br>
> -+ fail_exit (E_HOMEDIR);<br>
> - }<br>
> -+#endif<br>
> - }<br>
> -<br>
> - /*<br>
> ---<br>
> -2.11.0<br>
> -<br>
> diff --git a/meta/recipes-extended/shadow/files/allow-for-setting-password-in-clear-text.patch b/meta/recipes-extended/shadow/files/0002-Allow-for-setting-password-in-clear-text.patch<br>
> similarity index 81%<br>
> rename from meta/recipes-extended/shadow/files/allow-for-setting-password-in-clear-text.patch<br>
> rename to meta/recipes-extended/shadow/files/0002-Allow-for-setting-password-in-clear-text.patch<br>
> index fa7eb07aa51..c6332e4f766 100644<br>
> --- a/meta/recipes-extended/shadow/files/allow-for-setting-password-in-clear-text.patch<br>
> +++ b/meta/recipes-extended/shadow/files/0002-Allow-for-setting-password-in-clear-text.patch<br>
> @@ -1,8 +1,12 @@<br>
> +From a7d995228491ad5255ad86c1f04ba071f6880897 Mon Sep 17 00:00:00 2001<br>
> +From: Chen Qi <<a href="mailto:Qi.Chen@windriver.com" target="_blank">Qi.Chen@windriver.com</a>><br>
> +Date: Sat, 16 Nov 2013 15:27:47 +0800<br>
> Subject: [PATCH] Allow for setting password in clear text<br>
><br>
> Upstream-Status: Inappropriate [OE specific]<br>
><br>
> Signed-off-by: Chen Qi <<a href="mailto:Qi.Chen@windriver.com" target="_blank">Qi.Chen@windriver.com</a>><br>
> +<br>
> ---<br>
> src/Makefile.am | 8 ++++----<br>
> src/groupadd.c | 20 +++++++++++++++-----<br>
> @@ -12,39 +16,39 @@ Signed-off-by: Chen Qi <<a href="mailto:Qi.Chen@windriver.com" target="_blank">Qi.Chen@windriver.com</a>><br>
> 5 files changed, 64 insertions(+), 25 deletions(-)<br>
><br>
> diff --git a/src/Makefile.am b/src/Makefile.am<br>
> -index 3c98a8d..b8093d5 100644<br>
> +index f31fd7a..4a317a3 100644<br>
> --- a/src/Makefile.am<br>
> +++ b/src/Makefile.am<br>
> -@@ -93,10 +93,10 @@ chgpasswd_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBSELINUX) $(LIBCRYPT)<br>
> - chsh_LDADD = $(LDADD) $(LIBPAM) $(LIBSELINUX) $(LIBCRYPT_NOPAM) $(LIBSKEY) $(LIBMD)<br>
> - chpasswd_LDADD = $(LDADD) $(LIBPAM) $(LIBSELINUX) $(LIBCRYPT)<br>
> - gpasswd_LDADD = $(LDADD) $(LIBAUDIT) $(LIBSELINUX) $(LIBCRYPT)<br>
> --groupadd_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX)<br>
> -+groupadd_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBCRYPT)<br>
> - groupdel_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX)<br>
> - groupmems_LDADD = $(LDADD) $(LIBPAM) $(LIBSELINUX)<br>
> --groupmod_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX)<br>
> -+groupmod_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBCRYPT)<br>
> - grpck_LDADD = $(LDADD) $(LIBSELINUX)<br>
> - grpconv_LDADD = $(LDADD) $(LIBSELINUX)<br>
> - grpunconv_LDADD = $(LDADD) $(LIBSELINUX)<br>
> -@@ -117,9 +117,9 @@ su_SOURCES = \<br>
> +@@ -103,10 +103,10 @@ chsh_LDADD = $(LDADD) $(LIBPAM) $(LIBAUDIT) $(LIBSELINUX) $(LIBCRYPT_NOPAM)<br>
> + chpasswd_LDADD = $(LDADD) $(LIBPAM) $(LIBAUDIT) $(LIBSELINUX) $(LIBCRYPT) $(LIBECONF)<br>
> + expiry_LDADD = $(LDADD) $(LIBECONF)<br>
> + gpasswd_LDADD = $(LDADD) $(LIBAUDIT) $(LIBSELINUX) $(LIBCRYPT) $(LIBECONF)<br>
> +-groupadd_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBECONF)<br>
> ++groupadd_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBECONF) $(LIBCRYPT)<br>
> + groupdel_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBECONF)<br>
> + groupmems_LDADD = $(LDADD) $(LIBPAM) $(LIBAUDIT) $(LIBSELINUX) $(LIBECONF)<br>
> +-groupmod_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBECONF)<br>
> ++groupmod_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBECONF) $(LIBCRYPT)<br>
> + grpck_LDADD = $(LDADD) $(LIBAUDIT) $(LIBSELINUX) $(LIBECONF)<br>
> + grpconv_LDADD = $(LDADD) $(LIBAUDIT) $(LIBSELINUX) $(LIBECONF)<br>
> + grpunconv_LDADD = $(LDADD) $(LIBAUDIT) $(LIBSELINUX) $(LIBECONF)<br>
> +@@ -127,9 +127,9 @@ su_SOURCES = \<br>
> suauth.c<br>
> - su_LDADD = $(LDADD) $(LIBPAM) $(LIBAUDIT) $(LIBCRYPT_NOPAM) $(LIBSKEY) $(LIBMD)<br>
> - sulogin_LDADD = $(LDADD) $(LIBCRYPT)<br>
> --useradd_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBSEMANAGE) $(LIBACL) $(LIBATTR)<br>
> -+useradd_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBSEMANAGE) $(LIBACL) $(LIBATTR) $(LIBCRYPT)<br>
> - userdel_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBSEMANAGE)<br>
> --usermod_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBSEMANAGE) $(LIBACL) $(LIBATTR)<br>
> -+usermod_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBSEMANAGE) $(LIBACL) $(LIBATTR) $(LIBCRYPT)<br>
> - vipw_LDADD = $(LDADD) $(LIBSELINUX)<br>
> + su_LDADD = $(LDADD) $(LIBPAM) $(LIBAUDIT) $(LIBCRYPT_NOPAM) $(LIBSKEY) $(LIBMD) $(LIBECONF)<br>
> + sulogin_LDADD = $(LDADD) $(LIBCRYPT) $(LIBECONF)<br>
> +-useradd_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBSEMANAGE) $(LIBACL) $(LIBATTR) $(LIBECONF)<br>
> ++useradd_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBSEMANAGE) $(LIBACL) $(LIBATTR) $(LIBECONF) $(LIBCRYPT)<br>
> + userdel_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBSEMANAGE) $(LIBECONF)<br>
> +-usermod_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBSEMANAGE) $(LIBACL) $(LIBATTR) $(LIBECONF)<br>
> ++usermod_LDADD = $(LDADD) $(LIBPAM_SUID) $(LIBAUDIT) $(LIBSELINUX) $(LIBSEMANAGE) $(LIBACL) $(LIBATTR) $(LIBECONF) $(LIBCRYPT)<br>
> + vipw_LDADD = $(LDADD) $(LIBAUDIT) $(LIBSELINUX) $(LIBECONF)<br>
><br>
> install-am: all-am<br>
> diff --git a/src/groupadd.c b/src/groupadd.c<br>
> -index b57006c..63e1c48 100644<br>
> +index e9c4bb7..d572c00 100644<br>
> --- a/src/groupadd.c<br>
> +++ b/src/groupadd.c<br>
> -@@ -123,9 +123,10 @@ static /*@noreturn@*/void usage (int status)<br>
> +@@ -127,9 +127,10 @@ static /*@noreturn@*/void usage (int status)<br>
> (void) fputs (_(" -o, --non-unique allow to create groups with duplicate\n"<br>
> " (non-unique) GID\n"), usageout);<br>
> (void) fputs (_(" -p, --password PASSWORD use this encrypted password for the new group\n"), usageout);<br>
> @@ -56,7 +60,7 @@ index b57006c..63e1c48 100644<br>
> (void) fputs ("\n", usageout);<br>
> exit (status);<br>
> }<br>
> -@@ -387,13 +388,14 @@ static void process_flags (int argc, char **argv)<br>
> +@@ -391,13 +392,14 @@ static void process_flags (int argc, char **argv)<br>
> {"key", required_argument, NULL, 'K'},<br>
> {"non-unique", no_argument, NULL, 'o'},<br>
> {"password", required_argument, NULL, 'p'},<br>
> @@ -73,7 +77,7 @@ index b57006c..63e1c48 100644<br>
> long_options, NULL)) != -1) {<br>
> switch (c) {<br>
> case 'f':<br>
> -@@ -445,12 +447,20 @@ static void process_flags (int argc, char **argv)<br>
> +@@ -449,12 +451,20 @@ static void process_flags (int argc, char **argv)<br>
> pflg = true;<br>
> group_passwd = optarg;<br>
> break;<br>
> @@ -95,7 +99,7 @@ index b57006c..63e1c48 100644<br>
> break;<br>
> default:<br>
> usage (E_USAGE);<br>
> -@@ -584,7 +594,7 @@ int main (int argc, char **argv)<br>
> +@@ -588,7 +598,7 @@ int main (int argc, char **argv)<br>
> (void) textdomain (PACKAGE);<br>
><br>
> process_root_flag ("-R", argc, argv);<br>
> @@ -105,10 +109,10 @@ index b57006c..63e1c48 100644<br>
> OPENLOG ("groupadd");<br>
> #ifdef WITH_AUDIT<br>
> diff --git a/src/groupmod.c b/src/groupmod.c<br>
> -index b293b98..72daf2c 100644<br>
> +index bc14438..25ccb44 100644<br>
> --- a/src/groupmod.c<br>
> +++ b/src/groupmod.c<br>
> -@@ -134,8 +134,9 @@ static void usage (int status)<br>
> +@@ -138,8 +138,9 @@ static void usage (int status)<br>
> (void) fputs (_(" -o, --non-unique allow to use a duplicate (non-unique) GID\n"), usageout);<br>
> (void) fputs (_(" -p, --password PASSWORD change the password to this (encrypted)\n"<br>
> " PASSWORD\n"), usageout);<br>
> @@ -119,7 +123,7 @@ index b293b98..72daf2c 100644<br>
> (void) fputs ("\n", usageout);<br>
> exit (status);<br>
> }<br>
> -@@ -383,11 +384,12 @@ static void process_flags (int argc, char **argv)<br>
> +@@ -387,11 +388,12 @@ static void process_flags (int argc, char **argv)<br>
> {"new-name", required_argument, NULL, 'n'},<br>
> {"non-unique", no_argument, NULL, 'o'},<br>
> {"password", required_argument, NULL, 'p'},<br>
> @@ -134,7 +138,7 @@ index b293b98..72daf2c 100644<br>
> long_options, NULL)) != -1) {<br>
> switch (c) {<br>
> case 'g':<br>
> -@@ -414,9 +416,17 @@ static void process_flags (int argc, char **argv)<br>
> +@@ -418,9 +420,17 @@ static void process_flags (int argc, char **argv)<br>
> group_passwd = optarg;<br>
> pflg = true;<br>
> break;<br>
> @@ -153,7 +157,7 @@ index b293b98..72daf2c 100644<br>
> break;<br>
> default:<br>
> usage (E_USAGE);<br>
> -@@ -757,7 +767,7 @@ int main (int argc, char **argv)<br>
> +@@ -761,7 +771,7 @@ int main (int argc, char **argv)<br>
> (void) textdomain (PACKAGE);<br>
><br>
> process_root_flag ("-R", argc, argv);<br>
> @@ -163,10 +167,10 @@ index b293b98..72daf2c 100644<br>
> OPENLOG ("groupmod");<br>
> #ifdef WITH_AUDIT<br>
> diff --git a/src/useradd.c b/src/useradd.c<br>
> -index c74e491..7214e72 100644<br>
> +index 1b7bf06..44f09e2 100644<br>
> --- a/src/useradd.c<br>
> +++ b/src/useradd.c<br>
> -@@ -829,9 +829,10 @@ static void usage (int status)<br>
> +@@ -853,9 +853,10 @@ static void usage (int status)<br>
> (void) fputs (_(" -o, --non-unique allow to create users with duplicate\n"<br>
> " (non-unique) UID\n"), usageout);<br>
> (void) fputs (_(" -p, --password PASSWORD encrypted password of the new account\n"), usageout);<br>
> @@ -178,7 +182,7 @@ index c74e491..7214e72 100644<br>
> (void) fputs (_(" -s, --shell SHELL login shell of the new account\n"), usageout);<br>
> (void) fputs (_(" -u, --uid UID user ID of the new account\n"), usageout);<br>
> (void) fputs (_(" -U, --user-group create a group with the same name as the user\n"), usageout);<br>
> -@@ -1104,9 +1105,10 @@ static void process_flags (int argc, char **argv)<br>
> +@@ -1133,9 +1134,10 @@ static void process_flags (int argc, char **argv)<br>
> {"no-user-group", no_argument, NULL, 'N'},<br>
> {"non-unique", no_argument, NULL, 'o'},<br>
> {"password", required_argument, NULL, 'p'},<br>
> @@ -190,7 +194,7 @@ index c74e491..7214e72 100644<br>
> {"shell", required_argument, NULL, 's'},<br>
> {"uid", required_argument, NULL, 'u'},<br>
> {"user-group", no_argument, NULL, 'U'},<br>
> -@@ -1117,9 +1119,9 @@ static void process_flags (int argc, char **argv)<br>
> +@@ -1146,9 +1148,9 @@ static void process_flags (int argc, char **argv)<br>
> };<br>
> while ((c = getopt_long (argc, argv,<br>
> #ifdef WITH_SELINUX<br>
> @@ -202,7 +206,7 @@ index c74e491..7214e72 100644<br>
> #endif /* !WITH_SELINUX */<br>
> long_options, NULL)) != -1) {<br>
> switch (c) {<br>
> -@@ -1285,12 +1287,19 @@ static void process_flags (int argc, char **argv)<br>
> +@@ -1320,12 +1322,19 @@ static void process_flags (int argc, char **argv)<br>
> }<br>
> user_pass = optarg;<br>
> break;<br>
> @@ -223,7 +227,7 @@ index c74e491..7214e72 100644<br>
> break;<br>
> case 's':<br>
> if ( ( !VALID (optarg) )<br>
> -@@ -2148,7 +2157,7 @@ int main (int argc, char **argv)<br>
> +@@ -2257,7 +2266,7 @@ int main (int argc, char **argv)<br>
><br>
> process_root_flag ("-R", argc, argv);<br>
><br>
> @@ -233,10 +237,10 @@ index c74e491..7214e72 100644<br>
> OPENLOG ("useradd");<br>
> #ifdef WITH_AUDIT<br>
> diff --git a/src/usermod.c b/src/usermod.c<br>
> -index e571426..ccfbb99 100644<br>
> +index 21c6da9..cffdb3e 100644<br>
> --- a/src/usermod.c<br>
> +++ b/src/usermod.c<br>
> -@@ -424,8 +424,9 @@ static /*@noreturn@*/void usage (int status)<br>
> +@@ -431,8 +431,9 @@ static /*@noreturn@*/void usage (int status)<br>
> " new location (use only with -d)\n"), usageout);<br>
> (void) fputs (_(" -o, --non-unique allow using duplicate (non-unique) UID\n"), usageout);<br>
> (void) fputs (_(" -p, --password PASSWORD use encrypted password for the new password\n"), usageout);<br>
> @@ -247,7 +251,7 @@ index e571426..ccfbb99 100644<br>
> (void) fputs (_(" -s, --shell SHELL new login shell for the user account\n"), usageout);<br>
> (void) fputs (_(" -u, --uid UID new UID for the user account\n"), usageout);<br>
> (void) fputs (_(" -U, --unlock unlock the user account\n"), usageout);<br>
> -@@ -1002,8 +1003,9 @@ static void process_flags (int argc, char **argv)<br>
> +@@ -1010,8 +1011,9 @@ static void process_flags (int argc, char **argv)<br>
> {"move-home", no_argument, NULL, 'm'},<br>
> {"non-unique", no_argument, NULL, 'o'},<br>
> {"password", required_argument, NULL, 'p'},<br>
> @@ -258,16 +262,16 @@ index e571426..ccfbb99 100644<br>
> {"shell", required_argument, NULL, 's'},<br>
> {"uid", required_argument, NULL, 'u'},<br>
> {"unlock", no_argument, NULL, 'U'},<br>
> -@@ -1019,7 +1021,7 @@ static void process_flags (int argc, char **argv)<br>
> +@@ -1027,7 +1029,7 @@ static void process_flags (int argc, char **argv)<br>
> {NULL, 0, NULL, '\0'}<br>
> };<br>
> while ((c = getopt_long (argc, argv,<br>
> -- "ac:d:e:f:g:G:hl:Lmop:R:s:u:UP:"<br>
> -+ "ac:d:e:f:g:G:hl:Lmop:P:R:s:u:UA:"<br>
> +- "abc:d:e:f:g:G:hl:Lmop:R:s:u:UP:"<br>
> ++ "abc:d:e:f:g:G:hl:Lmop:P:R:s:u:UA:"<br>
> #ifdef ENABLE_SUBIDS<br>
> "v:w:V:W:"<br>
> #endif /* ENABLE_SUBIDS */<br>
> -@@ -1119,9 +1121,17 @@ static void process_flags (int argc, char **argv)<br>
> +@@ -1130,9 +1132,17 @@ static void process_flags (int argc, char **argv)<br>
> user_pass = optarg;<br>
> pflg = true;<br>
> break;<br>
> @@ -286,7 +290,7 @@ index e571426..ccfbb99 100644<br>
> break;<br>
> case 's':<br>
> if (!VALID (optarg)) {<br>
> -@@ -2098,7 +2108,7 @@ int main (int argc, char **argv)<br>
> +@@ -2127,7 +2137,7 @@ int main (int argc, char **argv)<br>
> (void) textdomain (PACKAGE);<br>
><br>
> process_root_flag ("-R", argc, argv);<br>
> @@ -295,6 +299,3 @@ index e571426..ccfbb99 100644<br>
><br>
> OPENLOG ("usermod");<br>
> #ifdef WITH_AUDIT<br>
> ---<br>
> -2.11.0<br>
> -<br>
> diff --git a/meta/recipes-extended/shadow/files/0004-useradd.c-create-parent-directories-when-necessary.patch b/meta/recipes-extended/shadow/files/0004-useradd.c-create-parent-directories-when-necessary.patch<br>
> new file mode 100644<br>
> index 00000000000..77357027764<br>
> --- /dev/null<br>
> +++ b/meta/recipes-extended/shadow/files/0004-useradd.c-create-parent-directories-when-necessary.patch<br>
> @@ -0,0 +1,63 @@<br>
> +From b406a7f4c3d6472885b75320ea63f140e021ff03 Mon Sep 17 00:00:00 2001<br>
> +From: Chen Qi <<a href="mailto:Qi.Chen@windriver.com" target="_blank">Qi.Chen@windriver.com</a>><br>
> +Date: Thu, 17 Jul 2014 15:53:34 +0800<br>
> +Subject: [PATCH] useradd.c: create parent directories when necessary<br>
> +<br>
> +Upstream-Status: Inappropriate [OE specific]<br>
> +<br>
> +Signed-off-by: Chen Qi <<a href="mailto:Qi.Chen@windriver.com" target="_blank">Qi.Chen@windriver.com</a>><br>
> +<br>
> +---<br>
> + src/useradd.c | 32 +++++++++++++++++++++++++++++++-<br>
> + 1 file changed, 31 insertions(+), 1 deletion(-)<br>
> +<br>
> +diff --git a/src/useradd.c b/src/useradd.c<br>
> +index 44f09e2..fec0986 100644<br>
> +--- a/src/useradd.c<br>
> ++++ b/src/useradd.c<br>
> +@@ -2065,6 +2065,36 @@ static void usr_update (void)<br>
> + }<br>
> + }<br>
> +<br>
> ++/*<br>
> ++ * mkdir_p - create directories, including parent directories when needed<br>
> ++ *<br>
> ++ * similar to `mkdir -p'<br>
> ++ */<br>
> ++int mkdir_p(const char *path) {<br>
> ++ int len = strlen(path);<br>
> ++ char newdir[len + 1];<br>
> ++ mode_t mode = 0755;<br>
> ++ int i = 0;<br>
> ++<br>
> ++ if (path[i] == '\0') {<br>
> ++ return 0;<br>
> ++ }<br>
> ++<br>
> ++ /* skip the leading '/' */<br>
> ++ i++;<br>
> ++<br>
> ++ while(path[i] != '\0') {<br>
> ++ if (path[i] == '/') {<br>
> ++ strncpy(newdir, path, i);<br>
> ++ newdir[i] = '\0';<br>
> ++ mkdir(newdir, mode);<br>
> ++ }<br>
> ++ i++;<br>
> ++ }<br>
> ++ mkdir(path, mode);<br>
> ++ return 0;<br>
> ++}<br>
> ++<br>
> + /*<br>
> + * create_home - create the user's home directory<br>
> + *<br>
> +@@ -2137,7 +2167,7 @@ static void create_home (void)<br>
> + }<br>
> + else<br>
> + #endif<br>
> +- if (mkdir (path, 0) != 0) {<br>
> ++ if ((mkdir_p (path) == 0) && (access (prefix_user_home, F_OK) != 0)) {<br>
> + fprintf (stderr,<br>
> + _("%s: cannot create directory %s\n"),<br>
> + Prog, path);<br>
> diff --git a/meta/recipes-extended/shadow/files/commonio.c-fix-unexpected-open-failure-in-chroot-env.patch b/meta/recipes-extended/shadow/files/commonio.c-fix-unexpected-open-failure-in-chroot-env.patch<br>
> index 4fa3d184edf..98252163692 100644<br>
> --- a/meta/recipes-extended/shadow/files/commonio.c-fix-unexpected-open-failure-in-chroot-env.patch<br>
> +++ b/meta/recipes-extended/shadow/files/commonio.c-fix-unexpected-open-failure-in-chroot-env.patch<br>
> @@ -1,3 +1,8 @@<br>
> +From 66533c7c6f347d257020675a1ed6e0c59cbbc3f0 Mon Sep 17 00:00:00 2001<br>
> +From: Chen Qi <<a href="mailto:Qi.Chen@windriver.com" target="_blank">Qi.Chen@windriver.com</a>><br>
> +Date: Thu, 17 Jul 2014 15:53:34 +0800<br>
> +Subject: [PATCH] commonio.c-fix-unexpected-open-failure-in-chroot-env<br>
> +<br>
> Upstream-Status: Inappropriate [OE specific]<br>
><br>
> commonio.c: fix unexpected open failure in chroot environment<br>
> @@ -10,15 +15,16 @@ Note that this patch doesn't change the logic in the code, it just expands<br>
> the codes.<br>
><br>
> Signed-off-by: Chen Qi <<a href="mailto:Qi.Chen@windriver.com" target="_blank">Qi.Chen@windriver.com</a>><br>
> +<br>
> ---<br>
> - lib/commonio.c | 16 ++++++++++++----<br>
> + lib/commonio.c | 16 ++++++++++++----<br>
> 1 file changed, 12 insertions(+), 4 deletions(-)<br>
><br>
> diff --git a/lib/commonio.c b/lib/commonio.c<br>
> -index cc536bf..51cafd9 100644<br>
> +index 16fa7e7..d6bc297 100644<br>
> --- a/lib/commonio.c<br>
> +++ b/lib/commonio.c<br>
> -@@ -613,10 +613,18 @@ int commonio_open (struct commonio_db *db, int mode)<br>
> +@@ -632,10 +632,18 @@ int commonio_open (struct commonio_db *db, int mode)<br>
> db->cursor = NULL;<br>
> db->changed = false;<br>
><br>
> @@ -41,6 +47,3 @@ index cc536bf..51cafd9 100644<br>
> db->fp = NULL;<br>
> if (fd >= 0) {<br>
> #ifdef WITH_TCB<br>
> ---<br>
> -1.7.9.5<br>
> -<br>
> diff --git a/meta/recipes-extended/shadow/files/shadow-relaxed-usernames.patch b/meta/recipes-extended/shadow/files/shadow-relaxed-usernames.patch<br>
> index 1af04d5fe89..cc833362e9a 100644<br>
> --- a/meta/recipes-extended/shadow/files/shadow-relaxed-usernames.patch<br>
> +++ b/meta/recipes-extended/shadow/files/shadow-relaxed-usernames.patch<br>
> @@ -1,26 +1,37 @@<br>
> +From ca472d6866e545aaa70a70020e3226f236a8aafc Mon Sep 17 00:00:00 2001<br>
> +From: Shan Hai <<a href="mailto:shan.hai@windriver.com" target="_blank">shan.hai@windriver.com</a>><br>
> +Date: Tue, 13 Sep 2016 13:45:46 +0800<br>
> +Subject: [PATCH] shadow: use relaxed usernames<br>
><br>
> The groupadd from shadow does not allow upper case group names, the<br>
> same is true for the upstream shadow. But distributions like<br>
> Debian/Ubuntu/CentOS has their own way to cope with this problem,<br>
> this patch is picked up from CentOS release 7.0 to relax the usernames<br>
> restrictions to allow the upper case group names, and the relaxation is<br>
> -POSIX compliant because POSIX indicate that usernames are composed of<br>
> +POSIX compliant because POSIX indicate that usernames are composed of<br>
> characters from the portable filename character set [A-Za-z0-9._-].<br>
><br>
> Upstream-Status: Pending<br>
><br>
> -Signed-off-by: Shan Hai <<a href="mailto:shan.hai@windriver.com" target="_blank">shan.hai@windriver.com</a>><br>
> +Signed-off-by: Shan Hai <<a href="mailto:shan.hai@windriver.com" target="_blank">shan.hai@windriver.com</a>><br>
><br>
> -diff -urpN a/libmisc/chkname.c b/libmisc/chkname.c<br>
> -index 5089112..f40a0da 100644<br>
> +---<br>
> + libmisc/chkname.c | 30 ++++++++++++++++++------------<br>
> + man/groupadd.8.xml | 6 ------<br>
> + man/useradd.8.xml | 8 +-------<br>
> + 3 files changed, 19 insertions(+), 25 deletions(-)<br>
> +<br>
> +diff --git a/libmisc/chkname.c b/libmisc/chkname.c<br>
> +index 90f185c..65762b4 100644<br>
> --- a/libmisc/chkname.c<br>
> +++ b/libmisc/chkname.c<br>
> -@@ -49,21 +49,28 @@<br>
> - static bool is_valid_name (const char *name)<br>
> - {<br>
> +@@ -55,22 +55,28 @@ static bool is_valid_name (const char *name)<br>
> + }<br>
> +<br>
> /*<br>
> - * User/group names must match [a-z_][a-z0-9_-]*[$]<br>
> - */<br>
> +-<br>
> - if (('\0' == *name) ||<br>
> - !((('a' <= *name) && ('z' >= *name)) || ('_' == *name))) {<br>
> + * User/group names must match gnu e-regex:<br>
> @@ -55,28 +66,28 @@ index 5089112..f40a0da 100644<br>
> return false;<br>
> }<br>
> }<br>
> -diff -urpN a/man/groupadd.8.xml b/man/groupadd.8.xml<br>
> -index 230fd0c..94f7807 100644<br>
> +diff --git a/man/groupadd.8.xml b/man/groupadd.8.xml<br>
> +index 1e58f09..d804b61 100644<br>
> --- a/man/groupadd.8.xml<br>
> +++ b/man/groupadd.8.xml<br>
> -@@ -222,12 +222,6 @@<br>
> +@@ -272,12 +272,6 @@<br>
> +<br>
> <refsect1 id='caveats'><br>
> <title>CAVEATS</title><br>
> - <para><br>
> +- <para><br>
> - Groupnames must start with a lower case letter or an underscore,<br>
> - followed by lower case letters, digits, underscores, or dashes.<br>
> - They can end with a dollar sign.<br>
> - In regular expression terms: [a-z_][a-z0-9_-]*[$]?<br>
> - </para><br>
> -- <para><br>
> + <para><br>
> Groupnames may only be up to &GROUP_NAME_MAX_LENGTH; characters long.<br>
> </para><br>
> - <para><br>
> -diff -urpN a/man/useradd.8.xml b/man/useradd.8.xml<br>
> -index 5dec989..fe623b9 100644<br>
> +diff --git a/man/useradd.8.xml b/man/useradd.8.xml<br>
> +index a16d730..c0bd777 100644<br>
> --- a/man/useradd.8.xml<br>
> +++ b/man/useradd.8.xml<br>
> -@@ -336,7 +336,7 @@<br>
> +@@ -366,7 +366,7 @@<br>
> </term><br>
> <listitem><br>
> <para><br>
> @@ -85,16 +96,16 @@ index 5dec989..fe623b9 100644<br>
> wide setting from <filename>/etc/login.defs</filename><br>
> (<option>CREATE_HOME</option>) is set to<br>
> <replaceable>yes</replaceable>.<br>
> -@@ -607,12 +607,6 @@<br>
> +@@ -660,12 +660,6 @@<br>
> + the user account creation request.<br>
> </para><br>
><br>
> - <para><br>
> +- <para><br>
> - Usernames must start with a lower case letter or an underscore,<br>
> - followed by lower case letters, digits, underscores, or dashes.<br>
> - They can end with a dollar sign.<br>
> - In regular expression terms: [a-z_][a-z0-9_-]*[$]?<br>
> - </para><br>
> -- <para><br>
> + <para><br>
> Usernames may only be up to 32 characters long.<br>
> </para><br>
> - </refsect1><br>
> diff --git a/meta/recipes-extended/shadow/shadow.inc b/meta/recipes-extended/shadow/shadow.inc<br>
> index 770c239e96d..d07b507532f 100644<br>
> --- a/meta/recipes-extended/shadow/shadow.inc<br>
> +++ b/meta/recipes-extended/shadow/shadow.inc<br>
> @@ -11,8 +11,6 @@ DEPENDS = "virtual/crypt"<br>
> UPSTREAM_CHECK_URI = "<a href="https://github.com/shadow-maint/shadow/releases" rel="noreferrer" target="_blank">https://github.com/shadow-maint/shadow/releases</a>"<br>
> SRC_URI = "<a href="https://github.com/shadow-maint/shadow/releases/download/$%7BPV%7D/$%7BBP%7D.tar.gz" rel="noreferrer" target="_blank">https://github.com/shadow-maint/shadow/releases/download/${PV}/${BP}.tar.gz</a> \<br>
> file://shadow-4.1.3-dots-in-usernames.patch \<br>
> - file://0001-Make-the-sp_lstchg-shadow-field-reproducible-re.-71.patch \<br>
> - file://0001-configure.ac-fix-configure-error-with-dash.patch \<br>
> ${@bb.utils.contains('PACKAGECONFIG', 'pam', '${PAM_SRC_URI}', '', d)} \<br>
> file://shadow-relaxed-usernames.patch \<br>
> "<br>
> @@ -24,16 +22,17 @@ SRC_URI_append_class-target = " \<br>
><br>
> SRC_URI_append_class-native = " \<br>
> file://0001-Disable-use-of-syslog-for-sysroot.patch \<br>
> - file://allow-for-setting-password-in-clear-text.patch \<br>
> + file://0002-Allow-for-setting-password-in-clear-text.patch \<br>
> file://commonio.c-fix-unexpected-open-failure-in-chroot-env.patch \<br>
> - file://0001-useradd.c-create-parent-directories-when-necessary.patch \<br>
> + file://0004-useradd.c-create-parent-directories-when-necessary.patch \<br>
> + file://0001-Do-not-check-for-validity-of-shell-executable.patch \<br>
> "<br>
> SRC_URI_append_class-nativesdk = " \<br>
> file://0001-Disable-use-of-syslog-for-sysroot.patch \<br>
> "<br>
><br>
> -SRC_URI[md5sum] = "36feb15665338ae3de414f2a88e434db"<br>
> -SRC_URI[sha256sum] = "4668f99bd087399c4a586084dc3b046b75f560720d83e92fd23bf7a89dda4d31"<br>
> +SRC_URI[md5sum] = "017ac773ba370bc28e157cee30dad71a"<br>
> +SRC_URI[sha256sum] = "82016d65317555fc8ce9e669eb187984d8d4b1f8ecda0769f4bc5412aed326e4"<br>
><br>
> # Additional Policy files for PAM<br>
> PAM_SRC_URI = "file://pam.d/chfn \<br>
> diff --git a/meta/recipes-extended/shadow/<a href="http://shadow_4.6.bb" rel="noreferrer" target="_blank">shadow_4.6.bb</a> b/meta/recipes-extended/shadow/<a href="http://shadow_4.8.bb" rel="noreferrer" target="_blank">shadow_4.8.bb</a><br>
> similarity index 100%<br>
> rename from meta/recipes-extended/shadow/<a href="http://shadow_4.6.bb" rel="noreferrer" target="_blank">shadow_4.6.bb</a><br>
> rename to meta/recipes-extended/shadow/<a href="http://shadow_4.8.bb" rel="noreferrer" target="_blank">shadow_4.8.bb</a><br>
> --<br>
> 2.17.1<br>
><br>
> --<br>
> _______________________________________________<br>
> Openembedded-core mailing list<br>
> <a href="mailto:Openembedded-core@lists.openembedded.org" target="_blank">Openembedded-core@lists.openembedded.org</a><br>
> <a href="http://lists.openembedded.org/mailman/listinfo/openembedded-core" rel="noreferrer" target="_blank">http://lists.openembedded.org/mailman/listinfo/openembedded-core</a><br>
<br>
<br>
<br>
-- <br>
Alex Kiernan<br>
</blockquote></div>