packages/utils/shadow, branch master

shadow: restore PKG_BUILD_DEPENDS to libxcrypt

2025-07-09T09:01:07Z

This reverts commit f18594a00f6324045a7019863a5278a3f6f52e64. The whole libxcrypt package was reworked in the base repo to fix libcrypto-compat and the name was restored to libxcrypt. Signed-off-by: Robert Marko

shadow: update build dependencies

2025-06-29T09:17:31Z

The package libxcrypt was renamed to xcrypt when added to the core repo [1]. 1. https://github.com/openwrt/openwrt/commit/f544392fc3c6c435e4b9acaca5744abb8ccb0a55 Signed-off-by: Tianling Shen

shadow: use libxcrypt

2020-06-23T01:33:17Z

Since size is not a problem here, use libxcrypt to avoid algorithm availability. Changed default to bcrypt as that's the strongest supported by shadow-utils. Signed-off-by: Rosen Penev

shadow: don't compile bcrypt for unsupported platforms

2020-06-16T22:23:17Z

If musl has no bcrypt: passwd: failed to crypt password with salt '$2a$13$w8EJ0Yfz5bGsG4U/0m7bk/': Function not implemented The password for root is unchanged. glibc output as it has no bcrypt: passwd: failed to crypt password with salt '$2a$13$xbpmAYmq6Q/rZN5jOlNxJZ': Invalid argument The password for root is unchanged. --without-bcrypt output: Invalid ENCRYPT_METHOD value: 'BCRYPT'. Defaulting to DES. passwd: password changed. The solution was tested on glibc despite using a musl specific variable Still works. Signed-off-by: Rosen Penev

shadow: update to 4.8.1

2020-02-02T21:07:52Z

Fixed license information. Removed patch requiring autoreconf and replaced with a configure variable. Removed faulty patch that broke systems without a disabled crypt size hack. Replaced with using a SED command as well as bcrypt, which works in musl. Removed su patch and converted it to a SED command in the Makefile. Added new shadow utilities. Signed-off-by: Rosen Penev

shadow: change default encryption method from DES to SHA512

2019-12-18T10:37:39Z

Busybox in default uses SHA512 as well. On big ditribution this default is sourced from PAM. That means that shadow reads pam settings and uses that. OpenWrt in most cases does not have PAM installed and in such case shadow fallbacks to its own default which is DES. This just changes that default to SHA512 which is consistent with rest of the system. Signed-off-by: Karel Kočí

treewide: add PKG_CPE_ID for better cvescanner coverage

2019-09-17T10:40:26Z

Signed-off-by: Jan Pavlinec

shadow: Update to 4.6

2018-08-16T01:31:34Z

Switched dead URLs to new upstream. Signed-off-by: Rosen Penev

shadow: add packages for newgidmap and newuidmap applets

2017-11-15T18:08:42Z

They are needed by LXC for unprivileged containers. Signed-off-by: Rafał Miłecki

shadow: use proper fix for checking subordinate IDs support

2017-11-15T18:08:42Z

During 4.2.1 version update support for subordinate IDs has been disabled. It was handled by: 1) Adding --disable-subordinate-ids to avoid: configure: error: cannot run test program while cross compiling 2) Adding patch 003-fix-disabling-subids.patch to avoid: usermod.c: In function 'process_flags': usermod.c:1364:10: error: 'vflg' undeclared (first use in this function) if ( (vflg || Vflg) ^ This commit adds a patch with a proper configure.in fix. We don't need to disable subordinate IDs anymore. Signed-off-by: Rafał Miłecki