2020-01-23  Serge Hallyn <serge@hallyn.com>

	* selinux: inclue stdio (Michael Vetter)
	* man: don't suggest making groupmems user-writeable (Michael Weiser)
	* Makefile: bail out on error in for loops (Wolfgang Bumiller)
	* Adding logging of SSH_ORIGINAL_COMMAND to nologin. (ed@s5h.net)
	* add new HOME_MODE login.defs option (Duncan Overbruck)
	* Add tty logging to useradd (ed@s5h.net)
	* Useradd: make non-executable shell check only a warning (Tomas Mraz)
	* Update Dutch translation (Frans-Spiesschaert)
	* user_busy: Do not mistake a regular user process for a namespaced one (Tomas Mraz)
	* Revert "Honor --sbindir and --bindir for binary installation" Patrick McLean)

2019-12-20  Dave Reisner <dreisner@archlinux.org>

	* Do not auto-enable acct_tools_setuid just because
	  pam is enabled.  NOTE - any distros which are relying
	  on this behavior will need to switch to configure
	  --enable-account-tools-setuid

2019-12-01  Serge Hallyn <serge@hallyn.com>

	* Release 4.8
	* Initial optional bcrypt support.
	* Make build/install of 'su' optional.
	* Fix for vipw not resuming correctly when suspended
	* Sync password field descriptions in manpages
	* Check for valid shell argument in useradd
	* Allow translation of new strings through POTFILES.in
	* Migrate to itstool for translations
	* Migrate to new SELinux api
	* Support --enable-vendordir
	* pwck: Only check homedir if set and not a system user
	* Support nonstandard usernames
	* sget{pw,gr}ent: check for data at EOL
	* Add YYY-MM-DD support in chage
	* Fix failing chmod calls for suidubins
	* Fix --sbindir and --bindir for binary installations
	* Fix LASTLOG_UID_MAX in login.defs
	* Fix configure error with dash

2019-06-13  Serge Hallyn <serge@hallyn.com>

	* Release 4.7
	* Spawn: don't loop forever on ECHILD
	* Do not fail locking if there is a stale lockfile Tomas Mraz)
	* Use lckpwdf if prefix not set (Tomas Mraz)
	* Build: check correct DocBook version (Jan Tojnar)
	* Usermod: Print 'no changes' to stdout, not stderr (Serge Hallyn)
	* Add support for btrfs subvolumes for home (Adam Majer)
	* Fix chpasswd long line handling (Nathan Ruiz)
	* Use secure_getenv for gettime (Chris Lamb)
	* Make sp_lstchg reproducible (Chris Lamb)
	* Do not crash commonio_close if db file is not open (Tomas Mraz)
	* Don't flush nscd and sssd cache in read-only mode (Charlie Vuillemez)
	* French manpage update (Alban VIDAL)
	* Fix manpage defaults for SUB_UID/GID_COUNT (Tomas Mraz)
	* Sync po files from shadow.pot (Alban VIDAL)
	* Usermod: guard against unsafe chown of homedir contents (Tomas Mraz)
	* Add LASTLOG_UID_MAX to login.defs (Tomas Mraz)
	* new[ug]idmap file capabilities support (Giuseppe Scrivano and Christian Brauner)
	* Fix segfault in useradd (Tomas Mraz)
	* Coverity issues (Tomas Mraz)
	* Flush sssd caches (Jakub Hrozek)
	* Log UID in nologin (Vladimir Ivanov)
	* run pam_getenvlist after setup_env in su.c (Michael Vogt)
	* Support systems with only utmpx (A. Wilcox)
	* Fix unguarded ENABLE_SUBIDS code (Jan Chren (rindeal))
	* Update po/zh_CN translation (Lion Yang)
	* Create parent dirs for useradd -m (Michael Vetter)
	* Prevent usermod segv
	* Fix usermod crash (fariouche)

2018-04-29  Serge Hallyn <serge@hallyn.com>

	* Release 4.6
	* Newgrp: avoid unnecessary lookups
	* Make language less binary
	* Add error when turning off man switch
	* Spelling fixes
	* Make userdel work with -R
	* newgidmap: enforce setgroups=deny if self-mapping a group
	* Norwegian bokmål translation
	* pwck: prevent crash by not passing O_CREAT
	* WITH_TCB fixes from Mandriva
	* Fix pwconv and grpconv entry skips
	* Fix -- slurping in su
	* add --prefix option

2017-07-16  Serge Hallyn <serge@hallyn.com>

	* Import new Dutch translations.

2017-07-10  Serge Hallyn <serge@hallyn.com>

	* Expand error codes for groupmod.

2017-05-17  Serge Hallyn <serge@hallyn.com>

	* Release 4.5

2017-05-17  Serge Hallyn <serge@hallyn.com>

	* Patch from Tobias Stoeckmann fixing regression in previous CVE fix
	  preventing SIGTERM to su from being propagated to the job.
	* Patch from Chris Lamb making sp_lstchg shadow field reproducible.
	* Merge Russian translation updates from Yuri Kozlov
	* Fix missing close of subuid file on error

2017-02-23  Serge Hallyn <serge@hallyn.com>

	* Merge patch by Tobias Stoeckmann <tobias@stoeckmann.org> to fix
	  the equivalent of util-linux CVE-2017-2616.

2017-02-08  Serge Hallyn <serge@hallyn.com>

	* Update Kazakh translations
	* Consult configuration before calculating subuids
	* Remove misplaced semicolon

2017-01-29  Serge Hallyn <serge@hallyn.com>

	* Patch from Fedora to improve performance with SSSD, Winbind,
	  or nss_ldap. (Tomas Mraz)
	* Make sure knowndef_table is NULL-terminated.  (Bernhard Rosenkränzer)

2016-12-21  Serge Hallyn <serge@hallyn.com>

	* Drop leading underscore from _COMMONIO_H and _SHADOWIO_H
	* Fix readability in usermod error messages.
	* Reset user in tallylog
	* Add audit support to su

2016-12-02  Serge Hallyn <serge@hallyn.com>

	* changes since 4.4
	  - Use sizeof rather than hardcoding snprintf args
	  - Fix useradd improper default loading
	  - Update Vietnamese translations
	  - Update Polish translations
	  - Remove non-POSIX chmod option in Makefile
	  - Fix suidubins assignments
	  - Fix --add-subuids etc spelling in manpages
	  - Audit homedir ownership change.
	  - Print error on selinux file context update failure
	  - Keep original file perms when creating a backup

	* (henceforth we'll update Changelog with each commit
	  and proper credit)

2016-12-02  Serge Hallyn <serge@hallyn.com>

	* Changes since 4.2.1:
	  - Documentation, error report and translations updates
	  - Replace path_max with 32
	  - User namespace support fixes/updates including:
	    - Correct sanity checks in newXidmap
	    - Fix building without subuid support
	    - Add /etc/subuid support for UID matching
	    - Support subuid for nonlocal users
	    - Default to 65536 subuid allocations
	    - Respect -r
	    - Check for range overflows
	  - Add tests from svn tree
	  - Use AC_CHECK_SIZEOF for uid_t size checks
	  - Accomodate missing /etc and login.defs
	  - Support FORCE_SHADOW
	  - Be more robust in hostile environment
	  - Allow removing a primary group
	  - Clear passwords on __pw_dup errors
	  - Memory leak fix in commonio_update and get_map_ranges
	  - Fix resource leak in syslog_sg
	  - Fix user busy error at userdel
	  - Support set/clear lastlog record via lastlog command
	  - Add --no-create-home as longopt for -M
	  - Fix signal races
	  - Reduce syslog priority of common usage events

2013-08-25  Nicolas François  <nicolas.francois@centraliens.net>

	* src/vipw.c: After waitpid(), use errno only if waitpid returned
	-1. Debian#688260
	* src/vipw.c: Likewise for system().

2013-08-23  victory  <victory.deb@gmail.com>

	* po/ja.po: Updated to 558t

2013-08-22  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/shadow-man-pages.pot: Regenerated.
	* man/po/*.po: Updated PO files.

2013-08-22  Nicolas François  <nicolas.francois@centraliens.net>

	* man/newgrp.1.xml: Fix encoding.
	* man/sg.1.xml: Likewise.

2013-08-22  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/da.po: Unfuzzy according to previous change.
	* man/po/de.po: Likewise.
	* man/po/fr.po: Likewise.
	* man/po/it.po: Likewise.
	* man/po/pl.po: Likewise.
	* man/po/ru.po: Likewise.
	* man/po/sv.po: Likewise.
	* man/po/zh_CN.po: Likewise.

2013-08-22  Nicolas François  <nicolas.francois@centraliens.net>

	* man/chage.1.xml: Add a non breaking space between options and
	their parameter because xml2po removes those spaces. Alioth#314401
	* man/chfn.1.xml: Likewise.
	* man/chgpasswd.8.xml: Likewise.
	* man/chpasswd.8.xml: Likewise.
	* man/chsh.1.xml: Likewise.
	* man/faillog.8.xml: Likewise.
	* man/gpasswd.1.xml: Likewise.
	* man/groupadd.8.xml: Likewise.
	* man/groupdel.8.xml: Likewise.
	* man/groupmems.8.xml: Likewise.
	* man/groupmod.8.xml: Likewise.
	* man/grpck.8.xml: Likewise.
	* man/lastlog.8.xml: Likewise.
	* man/newusers.8.xml: Likewise.
	* man/passwd.1.xml: Likewise.
	* man/pwck.8.xml: Likewise.
	* man/pwconv.8.xml: Likewise.
	* man/su.1.xml: Likewise.
	* man/useradd.8.xml: Likewise.
	* man/userdel.8.xml: Likewise.
	* man/usermod.8.xml: Likewise.
	* man/vipw.8.xml: Likewise.

2013-08-22  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/shadow-man-pages.pot: Regenerated.
	* man/po/*.po: Updated PO files.

2013-08-22  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/de.po: Fix encoding.

2013-08-19  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/subordinateio.c (subordinate_next): Fix return value.

2013-08-16  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/idmapping.c: Include <stdio.h> needed for fprintf() and
	stderr.

2013-08-15  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.d/SUB_GID_COUNT.xml: Document newusers behavior
	when the user already have subordinate group IDs.
	* man/login.defs.d/SUB_UID_COUNT.xml: Likewise.
	* man/login.defs.d/SUB_GID_COUNT.xml: Fix typo (MAX<->MIN).
	* man/login.defs.d/SUB_UID_COUNT.xml: Likewise.

2013-08-15  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Check early if /etc/subuid (/etc/subgid) exists
	when option -v/-V (-w/-W) are provided. 

2013-08-15  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Fix parse of ranges. The hyphen might be followed
	by a negative integer.

2013-08-15  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/subordinateio.c (find_free_range): max is allowed for new
	ranges.

2013-08-15  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/find_new_sub_gids.c: Remove dead code.
	find_new_sub_gids() is always called with *range_count set to 0.
	It's more difficult to keep the subordinate GIDs and UIDs
	synchronized, than for the user's UID/GId because the count of
	subordinate IDs may differ.
	* libmisc/find_new_sub_uids.c: Likewise.
	* lib/subordinateio.h, lib/subordinateio.c: Remove APIs that are
	no more needed: is_sub_uid_range_free(), is_sub_gid_range_free(),
	is_range_free().

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: Check if sizeof uid_t and gid_t is larger than 32
	bit to support subordinate IDs.

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/subordinateio.c: Avoid dead branches.
	* lib/subordinateio.c: Add schematics with ranges to help reviews.
	* lib/subordinateio.c: Avoid implicit conversion of pointers and
	integers to booleans.
	* lib/subordinateio.c: Added brackets.

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/vipw.c: Fail in case arguments are provided after options.
	Debian#677812

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/subordinateio.c: Fix count for ranges truncated in
	remove_range().

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: Terminate the child (if needed) before closing the PAM
	session. This is probably more correct, and avoid reporting
	termination from signals possibly sent by PAM modules (e.g. former
	versions of pam_systemd). Debian#670132

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: When a SIGTSTP is caught, reset caught to 0. There is
	no need to kill the child in such case after su is resumed. This
	remove the "Session terminated, terminating shell...
	...terminated." messages in such case.

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* man/newgidmap.1.xml: Document the checks performed before
	setting the mapping in /proc.
	* man/newuidmap.1.xml: Likewise.

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/idmapping.h: Document what the upper and lower fields
	are in struct map_range.
	* man/newgidmap.1.xml: Document when the gid, gidlower and count
	argument are.
	* man/newuidmap.1.xml: Likewise for uid, uidlower and count.

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/salt.c (shadow_random): Use long instead of size_t.
	Compatibility with size_t is easier to check since it's used for
	smaller numbers (salt size).

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/groupmem.c: Add splint annotations. The added memset makes
	splint think data was allocated.
	* lib/pwmem.c: Likewise.
	* lib/sgroupio.c: Likewise.
	* lib/shadowmem.c: Likewise.

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.d/SUB_GID_COUNT.xml: Document that the behavior
	of useradd and newusers depends on the existence of /etc/subgid.
	* man/login.defs.d/SUB_UID_COUNT.xml: Likewise for /etc/subuid.

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Change message in case of find_new_sub_uids /
	find_new_sub_gids failure. This complements the messages already
	provided by these APIs.

2013-08-13  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/subordinateio.c: Fix handling of boundaries.
	* libmisc/find_new_sub_uids.c: Likewise.
	* libmisc/find_new_sub_gids.c: Likewise.

2013-08-12  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/subordinateio.c: Fix removal of ranges. The database needs
	to be marked as changed or commonio_close will discard any change.

2013-08-11  Nicolas François  <nicolas.francois@centraliens.net>

	* man/newusers.8.xml: Include documentation of SUB_GID_MIN,
	SUB_GID_MAX, SUB_GID_COUNT, SUB_UID_MIN, SUB_UID_MAX,
	SUB_UID_COUNT.
	* man/useradd.8.xml: Likewise.
	* man/usermod.8.xml: Likewise.
	* man/newusers.8.xml: Document usage of /etc/subgid /etc/subuid.
	* man/useradd.8.xml: Likewise.
	* man/userdel.8.xml: Likewise.
	* man/usermod.8.xml: Likewise.
	* man/newusers.8.xml: Add references to subgid(5) and subuid(5).
	* man/useradd.8.xml: Likewise.
	* man/userdel.8.xml: Likewise.
	* man/subgid.5.xml: Sort references alphabetically.
	* man/subuid.5.xml: Likewise.
	* man/subgid.5.xml: Add references to newusers(8), useradd(8),
	userdel(8), usermod(8), user_namespaces(7).
	* man/subuid.5.xml: Likewise.

2013-08-11  Nicolas François  <nicolas.francois@centraliens.net>

	* man/newgidmap.1.xml: Sort references alphabetically.
	* man/newuidmap.1.xml: Likewise.

2013-08-11  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: Add configure options --enable-subordinate-ids /
	--disable-subordinate-ids. Enabled by default.
	* lib/prototypes.h: Include <config.h> before using its macros.
	* lib/commonio.h, lib/commonio.c: Define commonio_append only when
	ENABLE_SUBIDS is defined.
	* lib/prototypes.h, libmisc/find_new_sub_gids.c,
	libmisc/find_new_sub_uids.c: Likewise.
	* lib/subordinateio.h, lib/subordinateio.c: Likewise.
	* libmisc/user_busy.c: Only check if subordinate IDs are in use if
	ENABLE_SUBIDS is defined.
	* src/Makefile.am: Create newgidmap and newuidmap only if
	ENABLE_SUBIDS is defined.
	* src/newusers.c: Check for ENABLE_SUBIDS to enable support for
	subordinate IDs.
	* src/useradd.c: Likewise.
	* src/userdel.c: Likewise.
	* src/usermod.c: Likewise.
	* man/Makefile.am: Install man1/newgidmap.1, man1/newuidmap.1,
	man5/subgid.5, and man5/subuid.5 only if ENABLE_SUBIDS is defined.
	* man/fr/Makefile.am: Install man1/newgidmap.1, man1/newuidmap.1,
	man5/subgid.5, and man5/subuid.5 (not translated yet).
	* man/generate_mans.mak: Add xsltproc conditionals
	subids/no_subids.
	* man/login.defs.d/SUB_GID_COUNT.xml: Add dependency on subids
	condition.
	* man/login.defs.d/SUB_UID_COUNT.xml: Likewise.
	* man/usermod.8.xml: Document options for subordinate IDs and
	reference subgid(5) / subuid(5) depending on the subids condition.

2013-08-09  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/salt.c: Remove unused variable.

2013-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/utmp.c: Add include files needed for getaddrinfo().
	See Alioth#314271

2013-08-07  Mike Frysinger  <vapier@gentoo.org>

	* configure.in: Check at configure time whether libc supports
	ruserok (support dropped by newer C libraries).

2013-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* man/usermod.8.xml: Fix typos and wording.
	* man/usermod.8.xml: Add references to subgid(5) and subuid(5).

2013-08-07  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/find_new_sub_gids.c: Fix wording: secondary ->
	subordinate.
	* libmisc/find_new_sub_uids.c: Likewise.

2013-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/find_new_sub_gids.c: Remove duplicate check (duplicate
	at least in its intent).
	* libmisc/find_new_sub_uids.c: Likewise.

2013-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c: Fix typos.

2013-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	* man/subgid.5.xml: Reorder words.
	* man/subuid.5.xml: Likewise.

2013-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	* man/subgid.5.xml: Fix typos.
	* man/subuid.5.xml: Likewise.
	* man/subgid.5.xml: Fix copy-paste errors from subuid.5.xml.

2013-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	* man/newgidmap.1.xml: Remove copy-pasted NOTE.
	* man/newuidmap.1.xml: Likewise.

2013-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/subordinateio.c: Remove unused variables.

2013-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	* man/login.defs.d/SUB_GID_COUNT.xml: Fix typo.
	* man/login.defs.d/SUB_UID_COUNT.xml: Likewise.
	* man/login.defs.d/SUB_UID_COUNT.xml: Fix copy-paste issue from
	SUB_GID_COUNT.
	* man/newgidmap.1.xml: Fix Typo.
	* src/useradd.c: Fix typos.
	* lib/subordinateio.c: Fix typos.

2013-08-06  Nicolas François  <nicolas.francois@centraliens.net>

	Fix Debian bug #675824
	* lib/groupmem.c (__gr_dup): Support libc which define other
	fields in struct group.
	* lib/pwmem.c: Likewise for struct passwd.
	* lib/shadowmem.c: Likewise for struct spwd.
	* lib/sgroupio.c: Apply same logic, even if this structure is
	defined internally.

2013-08-05  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/groupio.c: Revert change from 2013-07-29. The length of the
	concatenated 2 lines was correct.

2013-08-05  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/salt.c: random() max value is 2^31-1 (same as RAND_MAX
	on GNU). As it is not clear whether on some systems the max value
	can exceed this number and whether some systems have max values
	which would be lower, we take this into account when defining the
	salt size and number of rounds for SHA encrypted passwords. Higher
	values are favored.

2013-08-04  Nicolas François  <nicolas.francois@centraliens.net>

	* man/su.1.xml: With getopt, '-' does not need to be the last
	option, but it is recommended for portability.
	Closes https://bugs.launchpad.net/bugs/1100775

2013-08-04  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS: Add NEWS entries.

2013-08-04  Nicolas François  <nicolas.francois@centraliens.net>

	* man/po/da.po: Fix translation (--home became --home-dir).
	* man/po/de.po: Likewise.
	* man/po/fr.po: Likewise.
	* man/po/pl.po: Likewise.
	* man/po/ru.po: Likewise.
	* man/po/sv.po: Likewise.

2013-08-04  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/groupio.c (merge_group_entries): Do not allocate more than
	necessary (sizeof char* instead of char).
	Thanks for Tomáš Mráz (alioth#313962)
	* lib/groupio.c (merge_group_entries): Document that new_members
	is correctly NULL terminated. (alioth:#313940)

2013-08-03  Nicolas François  <nicolas.francois@centraliens.net>

	* Changelog: Update documentation of 2013-07-28  mancha entry.
	* lib/prototypes.h, lib/encrypt.c: Update splint marker,
	pw_encrypt can return NULL.
	* lib/encrypt.c: Fix outdated statement on GNU crypt.
	* src/chgpasswd.c: Improve diagnostic to user when pw_encrypt
	fails and use fail_exit() instead of exit().
	* src/chpasswd.c: Likewise.
	* src/newusers.c: Likewise.
	* src/passwd.c: Likewise when new password is encrypted.
	* src/newgrp.c: Improve diagnostic to user and syslog when
	pw_encrypt fails.  Do not apply 1s penalty as this is not an
	invalid password issue.
	* src/passwd.c: Likewise when password is checked.

2013-08-02  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/setupenv.c: xstrdup the static char* temp_pw_dir /
	temp_pw_shell. That way we can continue to use pw_free() without
	segving. Thanks to Serge Hallyn for the patch.
	* libmisc/setupenv.c: Free pw_dir and pw_shell before reallocating
	them.

2013-08-01  Yuri Kozlov  <yuray@komyakino.ru>

        * po/ru.po: completed translation
	  Closes: Debian#718356

2013-07-29  Michael Scherer <misc-guest@alioth.debian.org>

        * libmisc/root_flag.c: use chdir() before calling chroot() to
	  avoid potential security issue (see
	  http://www.bpfh.net/simes/computing/chroot-break.html)
	  Closes: alioth#313962

2013-07-29  Christian Perrier  <christian@perrier.eu.org>

        * man/useradd.xml: use "--home-dir" instead of "--home"
	  Fix translations too.
	  Thanks to Ville Skyttä
	  Closes: alioth#313880

2013-07-29  Ville Skyttä  <scop-guest@alioth.debian.org>

        * man/ja/man8/groupmod.8: Syntax fix
	  Closes: alioth#313785

2013-07-29  Brad Hubbard  <badone-guest@alioth.debian.org>

	* lib/groupio.c: add newline char when two lines
	are concatenated
	Closes: alioth#313942
	* lib/groupio.c: fix uninitialised memory in
	merge_group_entries causes segfault in useradd by changing
	a call to malloc to a call to calloc
	Closes: alioth:#313940

2013-07-28  Guido Trentalancia  <guido@trentalancia.com>

        * etc/login.defs: fix typographic errors and use a better format
	  Closes: Debian#685415

2013-07-28  Simon Brandmair  <sbrandmair@gmx.net>

        * man/po/de.po: translation completed : 1203 translated messages
	  Closes: Debian#679152

2013-07-28  mancha  <mancha1@hush.com>

	* lib/encrypt.c (pw_encrypt): crypt() in glibc/eglibc 2.17 now
	fails if passed a salt that violates specs. On Linux, crypt() also
	fails with DES/MD5 salts in FIPS140 mode. Rather than exit() on
	NULL returns we send them back to the caller for appropriate
	handling (instead of exiting).  Closes: alioth#314234
	* lib/pwauth.c: Handle NULL return from pw_crypt(), return non
	zero (as in case of failure).
	* libmisc/valid.c: Likewise.
	* src/chgpasswd.c: Handle NULL return from pw_crypt(), report
	crypt error to stderr and exit.
	* src/chpasswd.c: Likewise.
	* src/gpasswd.c: Likewise.
	* src/newusers.c: Likewise.
	* src/passwd.c: Likewise when new password is encrypted.
	* src/newgrp.c: Handle NULL return from pw_crypt(), report crypt
	error to stderr and syslog and return to report unchanged
	password.
	* src/passwd.c: Likewise when password is checked.

2013-07-28  Christian Perrier  <christian@perrier.eu.org>

	* configure.in: Prepare for next point release 4.2.
	* if using the static char* for pw_dir, strdup it so
	  pw_free() can be used. (Closes: Debian#691459, alioth#313957) 
	* Kill the child process group, rather than just the 
	  immediate child; this is needed now that su no
	  longer starts a controlling terminal when not running an
	  interactive shell (closes: Debian#713979)
	  Thansk to Colin Watson for the patch.

2012-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS: Set release date.
	* man/po/shadow-man-pages.pot: Regenerated.
	* man/po/*.po: Updated PO files.

2012-05-25  Nicolas François  <nicolas.francois@centraliens.net>

	* man/*.xml: Add author based on copyright statement.
	* man/<ll>/*.[1358], man/<ll>/man[1358]/*.[1358],
	man/<ll>/Makefile.am: Sort manpages per section as the generated
	manpages.

2012-05-20  Nicolas François  <nicolas.francois@centraliens.net>

	* po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
	* po/*.po, man/po/*.po: Updated PO files.

2012-05-20  Nicolas François  <nicolas.francois@centraliens.net>

	* man/Makefile.am, man/generate_mans.mak: Update clean targets,
	due to the generation in separate sub folders.

2012-05-20  Nicolas François  <nicolas.francois@centraliens.net>

	* man/su.1.xml: Document author to avoid warnings during
	generation. This needs to be rolled out to other manpages.
	* man/generate_mans.mak: Do not add a AUTHOR section in the man
	pages.

2012-05-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/su.c: non PAM enabled versions: do not fail if su is called
	without a controlling terminal. Ignore ENXIO errors when opening
	/dev/tty.

2012-05-20  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Cleanup, return code 13 no more used.
	* man/useradd.8.xml: Document return code 14, and remove return
	code 13.

2012-05-20  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, man/generate_mans.mak: Generate manpages in man1, man3,
	man5, man8 subdirectories. This fix the generation of .so links
	which did not point to a path relative to the top-level manual
	hierarchy.
	* man/generate_mans.mak: Update man paths accordingly.
	* man/Makefile.am: Likewise.
	* man/da/Makefile.am: Likewise.
	* man/de/Makefile.am: Likewise.
	* man/fr/Makefile.am: Likewise.
	* man/it/Makefile.am: Likewise.
	* man/pl/Makefile.am: Likewise.
	* man/ru/Makefile.am: Likewise.
	* man/sv/Makefile.am: Likewise.
	* man/zh_CN/Makefile.am: Likewise.

2012-05-20  Nicolas François  <nicolas.francois@centraliens.net>

	* configure.in: Prepare for next point release 4.1.5.1.

2012-05-19  Nitin A Kamble  <nitin.a.kamble@intel.com>

	* configure.in: Remove deprecated AM_C_PROTOTYPES (no more
	supported in automake 1.12).

2012-05-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/useradd.c: Keep the default file as much as possible to
	avoid issue in case of crash. Use link instead of rename.

2012-05-18  Peter Vrabec  <pvrabec@redhat.com>

	* lib/commonio.c: Fix labeling of /etc/{passwd,shadow,group,gshadow}.
	It will basically label them with same context as
	/etc/{passwd+,shadow+,group+,gshadow+}

2012-05-18  Nicolas François  <nicolas.francois@centraliens.net>

	* src/pwunconv.c: Do not check spw_close() return value (file is
	opened readonly).
	* src/grpunconv.c: Do not check sgr_close() return value (file is
	opened readonly).

2012-05-18  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/userdel.c: Fix segfault when userdel removes the
	user's group.

2012-05-17  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, src/login.c: Log in utmp / utmpx / wtmp also when PAM is
	enabled. This is not done by pam_lastlog. This was broken on
	2011-07-23.
	* NEWS, libmisc/utmp.c: Do not log in wtmp when PAM is enabled.
	This is done by pam_lastlog.

2012-05-17  Christian Perrier  <bubulle@Êebian.org>

	* man/po/fr.po: French translation of manpages completed

2012-05-17  Simon Brandmair  <sbrandmair@gmx.net>

	* man/po/de.po: German translation of manpages completed

2012-02-12  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS: New placeholder for the next release (4.1.5.1 expected)

2012-04-15  Robert Luberda  <robert@debian.org>

	* man/po/pl.po: Complete translation of logoutd(8) in Polish.

2012-02-13  Mike Frysinger  <vapier@gentoo.org>

	* src/passwd.c: (non PAM flavour) Report permission denied when
	access to /etc/shadow fails with EACCES.

2012-02-13  Mike Frysinger  <vapier@gentoo.org>

	* lib/nscd.c: Add missing newline to error message.
	* lib/nscd.c: If nscd is installed but not in use, then running
	`nscd -i` will exit(1). We shouldn't warn in this case since this
	is not abnormal behavior.

2012-02-13  Mike Frysinger  <vapier@gentoo.org>

	* man/.gitignore: Add generate_mans.deps

2012-02-13  Mike Frysinger  <vapier@gentoo.org>

	* man/grpck.8.xml: Relocate space.

2012-02-13  Mike Frysinger  <vapier@gentoo.org>

	* libmisc/copydir.c: Add missing #include <stdarg.h>

2012-02-12  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS: Set release date.

2012-02-12  Nicolas François  <nicolas.francois@centraliens.net>

	* po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
	* po/*.po, man/po/*.po: Updated PO files.

2012-02-11  Giuseppe Sacco  <eppesuig@debian.org>

	* man/po/it.po: Updated after review.

2012-02-11  Nicolas François  <nicolas.francois@centraliens.net>

	* man/it/Makefile.am: Activate all manpages.
	* man/po/it.po: Fix formal issues (end of lines).

2012-02-11  Giuseppe Sacco  <eppesuig@debian.org>

	* man/po/it.po: Updated to 1173t.

2012-01-30  Nicolas François  <nicolas.francois@centraliens.net>

	* man/useradd.8.xml, man/su.1.xml, man/po/da.po, man/po/ru.po,
	man/po/fr.po, man/po/de.po, man/po/sv.po, man/po/pl.po,
	man/po/it.po, man/po/shadow-man-pages.pot, man/po/zh_CN.po: Fix
	two typos. Thanks to Giuseppe Sacco. Unfuzzy translations
	* po/kk.po, po/nb.po, po/el.po, po/ca.po, po/ja.po: Re-generate.
	* man/login.defs.d/ENV_PATH.xml, man/login.defs.d/ENV_SUPATH.xml:
	Fix typo.

2012-01-28  Innocent De Marchi  <tangram.peces@gmail.com>

	* po/ca.po: Updated to 557t.

2012-01-28  Nicolas François  <nicolas.francois@centraliens.net>

	* NEWS, configure.in, man/da/Makefile.am, man/Makefile.am: Build
	manpages with more than 50% translated messages.
	* man/fr/Makefile.am: Add missing manpages: chgpasswd.8,
	groupmems.8, nologin.8, sulogin.8.
	* man/de/Makefile.am: Add missing manpages: chage.1, chgpasswd.8,
	chpasswd.8, expiry.1, faillog.5, faillog.8, getspnam.3, gpasswd.1,
	groupadd.8, groupdel.8, groupmems.8, groupmod.8, grpck.8,
	grpconv.8, grpunconv.8, gshadow.5, lastlog.8, login.defs.5,
	logoutd.8, newusers.8, nologin.8, pwck.8, pwconv.8, pwunconv.8,
	sg.1, shadow.3, shadow.5, suauth.5, useradd.8, userdel.8,
	usermod.8, limits.5, login.access.5, porttime.5, id.1, sulogin.8
	* man/zh_CN/Makefile.am: Add missing manpages: chgpasswd.8,
	groupmems.8, nologin.8, sulogin.8
	* man/pl/Makefile.am, man/sv/Makefile.am, man/it/Makefile.am:
	Translate only manpages with more than 50% translated messages.
	* man/po/da.po: Do not translate names of manpages (newusers,
	limits, groups)

2012-01-28  Yuri Kozlov  <yuray@komyakino.ru>

	* man/po/ru.po: Updated to 1173t.

2012-01-27  Thomas Blein  <tblein@tblein.eu>

	* po/fr.po: Updated to 557t.
	* man/po/fr.po: Updated to 1173t.

2012-01-26  Joe Hansen  <joedalton2@yahoo.dk>

	* po/da.po: Updated to 557t.
	* man/po/da.po: Updated to 294t879u.

2012-01-23  Thomas Vasileiou  <thomas-v@wildmail.com>

	* po/el.po: Updated to 553t.

2012-01-22  Baurzhan Muftakhidinov  <baurthefirst@gmail.com>

	* po/kk.po: Updated to 557t.

2012-01-21  Miguel Figueiredo  <elmig@debianpt.org>

	* po/pt.po: Updated to 557t.

2012-01-19  Holger Wansing  <linux@wansing-online.de> 

	* po/de.po: Updated to 557t.

2012-01-18  Bjørn Steensrud  <bjornst@skogkatt.homelinux.org>

	* po/nb.po: Updated to 557t. Thanks also to Hans Fredrik Nordhaug.

2012-01-16  NAKANO Takeo  <nakano@webmasters.gr.jp>

	* po/ja.po: Updated to 557t

2012-01-16  Simon Brandmair  <sbrandmair@gmx.net>

	* man/po/de.po: Updated to 1173t.

2012-01-14  YunQiang Su  <wzssyqa@gmail.com>

	* po/zh_CN.po: Updated to 551t2f4u
	* man/po/zh_CN.po: Updated to 1026t15f132u

2012-01-09  Yuri Kozlov  <yuray@komyakino.ru>

	* po/ru.po: Updated to 557t.

2012-01-09  Nicolas François  <nicolas.francois@centraliens.net>

	* po/shadow.pot, man/po/shadow-man-pages.pot: Regenerated.
	* po/*.po, man/po/*.po: Updated PO files.

2012-01-08  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/prototypes.h: Cleanup.
	* lib/selinux.c, lib/semanage.c: prototypes.h was not included.

2011-12-09  Peter Vrabec  <pvrabec@redhat.com>

	* lib/prototypes.h, lib/Makefile.am, po/POTFILES.in,
	libmisc/copydir.c, lib/selinux.c: Move set_selinux_file_context()
	and reset_selinux_file_context() from libmisc/copydir.c to
	lib/selinux.c.
	* lib/commonio.c: Use set_selinux_file_context() and
	reset_selinux_file_context() instead of using the existing
	database SELinux context to set the context for the newly created
	files.

2011-12-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/vipw.c: Do not use a hardcoded program name in the usage
	message.

2011-12-04  Nicolas François  <nicolas.francois@centraliens.net>

	* po/ca.po, po/cs.po, po/da.po, po/de.po, po/es.po, po/eu.po,
	po/fr.po, po/ja.po, po/kk.po, po/pt.po, po/pt_BR.po, po/ru.po,
	po/sk.po, po/sv.po, po/vi.po, po/zh_CN.po: Quick unfuzzy.

2011-12-09  Nicolas François  <nicolas.francois@centraliens.net>

	* src/newusers.c, src/chpasswd.c, src/chgpasswd.c: Harmonize
	usage messages.

2011-12-09  Nicolas François  <nicolas.francois@centraliens.net>

	* lib/Makefile.am, lib/prototypes.h, lib/selinux.c,
	lib/semanage.c, po/POTFILES.in: Move lib/selinux.c to
	lib/semanage.c.

2011-11-21  Nicolas François  <nicolas.francois@centraliens.net>

	* src/usermod.c, man/usermod.8.xml: usermod -Z "" removes the
	SELinux user mapping for the modified user.
	* src/useradd.c: Zflg is #defined as user_selinux non empty.

2011-11-21  Peter Vrabec  <pvrabec@redhat.com>

	* libmisc/copydir.c: Ignore errors to copy ACLs if the operation
	is not supported.

2011-11-19  Nicolas François  <nicolas.francois@centraliens.net>

	* libmisc/root_flag.c, src/gpasswd.c, src/chsh.c: Add splint
	annotations.
	* src/pwconv.c, src/pwunconv.c, src/grpconv.c, src/grpunconv.c:
	Ignore return value of spw_rewind, pw_rewind, sgr_rewind, and
	gr_rewind.
	* lib/commonio.h: Both head and tail cannot be owned. Set tail as
	dependent.
	* src/expiry.c: Ignore return value of expire ().
	* src/expiry.c: The catch_signals function does not use its sig
	parameter.
	* src/userdel.c: Last audit_logger parameter is a
	shadow_audit_result, use SHADOW_AUDIT_FAILURE instead of 0.
	* lib/selinux.c: vasprintf requires _GNU_SOURCE to be defined
	before including stdio.h.
	* src/chage.c: Cast 3rd date_to_str parameter to a time_t
	* src/passwd.c: Add missing cast.
	* lib/commonio.c: Avoid multiple statements per line.
	* lib/commonio.c: Ignore fclose return value when the file was
	open read only or was not changed, or if an error is already
	reported.

2011-11-19  Nicolas François  <nicolas.francois@centraliens.net>

	* src/faillog.c: The fail_max field is a short, use a short also
	for the max argument of setmax / setmax_one.
	* src/faillog.c: Fail with an error message when faillog fails to
	write to the faillog database.

2011-11-19  Nicolas François  <nicolas.francois@centraliens.net>

	* man/gpasswd.1.xml: Document the difference between the -r and -R
	options.

2011-11-19  Nicolas François  <nicolas.francois@centraliens.net>

	* man/useradd.8.xml, man/groupadd.8.xml, man/usermod.8.xml,
	man/groupmod.8.xml: Avoid hardcoded values, and reference instead
	the configuration options (e.g. UID_MIN)
	* man/groupmod.8.xml, man/usermod.8.xml: Add missing reference to
	login.defs
	* man/login.defs.d/UID_MAX.xml, man/login.defs.d/SYS_UID_MAX.xml,
	man/login.defs.d/GID_MAX.xml, man/login.defs.d/SYS_GID_MAX.xml:
	Document the default values.

2011-11-19  Nicolas François  <nicolas.francois@centraliens.net>

	* src/gpasswd.c: Change of group password enforces gshadow
	password. Set /etc/group password to "x".

2011-11-16  Peter Vrabec  <pvrabec@redhat.com>
