Debian Patches

Status for accountsservice/22.08.8-6

Patch Description Author Forwarded Bugs Origin Last update
tests-fix-the-signature-for-the-SetLocked-call.patch tests: fix the signature for the SetLocked call
It's a boolean, not a string
Peter Hutterer <peter.hutterer@who-t.net> no upstream, 23.0, commit:https://gitlab.freedesktop.org/accountsservice/accountsservice/-/commit/fea3ecdc 2022-04-04
tests-fix-invocation-of-AddUser.patch tests: fix invocation of AddUser
AddUser is a DBus method with a signature so we need to provide all
required arguments, we can't rely on python defaults. This worked
before dbusmock commit f8709a9 because these methods were never really
looked at.
Peter Hutterer <peter.hutterer@who-t.net> no upstream, 23.0, commit:https://gitlab.freedesktop.org/accountsservice/accountsservice/-/commit/c588aea0 2022-04-04
0002-create-and-manage-groups-like-on-a-debian-system.patch Create and manage groups like on a debian system.
Reworked by Philip Withnall <withnall@endlessm.com> to support the new
`-Dextra_admin_groups` option.
Frederic Peters <fpeters@debian.org> not-needed debian 2019-10-12
0005-gdm_config_file_path.patch Fix path to the GDM configuration file
It's different in Debian.
Josselin Mouette <joss@debian.org> yes debian upstream 2019-10-12
0007-add-lightdm-support.patch Support setting/reading LightDM autologin setings Michael Terry <michael.terry@canonical.com> no 2017-12-21
user-Replace-usermod-p-with-chpasswd-e.patch user: Replace usermod -p with chpasswd -e
Writing the password to chpasswd's standard input avoids it becoming
visible in `/proc/$pid/cmdline` (CVE-2012-6655).

[backported: continue to try to set loginuid for parity with existing code]
Simon McVittie <smcv@debian.org> yes debian upstream 2023-02-03
daemon-Clarify-use-of-generator_state-users.patch daemon: Clarify use of generator_state->users Simon McVittie <smcv@debian.org> yes 2023-02-05
daemon-Define-local-users-as-being-exactly-those-present-.patch daemon: Define local users as being exactly those present in /etc/shadow

According to https://bugs.freedesktop.org/show_bug.cgi?id=48177 and
https://gitlab.freedesktop.org/accountsservice/accountsservice/-/merge_requests/116,
the intention is that merely existing in /etc/passwd is not enough to
consider an account to be local; it must also be listed in /etc/shadow.
This was done to provide graceful handling of systems where the
complete list of LDAP/NIS/etc. users is written into /etc/passwd by
rsync or similar instead of using a NSS plugin (but authentication still
uses a PAM plugin). However, this unintentionally regressed in 34bedecf
which continues reading after an account not in /etc/shadow is found.

entry_generator_fgetpwent() intentionally only outputs a maximum of 50
users, and only outputs users that are classified as likely to be human
users' accounts, as opposed to system uids. However, when enumerating
cached or explicitly requested users, we need to look them up in a
complete list of local users. Otherwise, we can incorrectly classify
local users as remote (if they are beyond the limit of 50 or have a
username or shell that is more typically used for system users), which
makes at least GNOME Settings display a misleading user interface for
those users.
Simon McVittie <smcv@debian.org> yes debian upstream 2023-02-05
user-Use-correct-format-strings-to-print-accounts_user_ge.patch user: Use correct format strings to print accounts_user_get_uid()
The Uid property is defined in the D-Bus introspection XML to be a
64-bit unsigned integer, so we need to treat it as such when using
varargs. Otherwise, architectures that do not align arguments on the
stack at 64-bit boundaries can parse the stack incorrectly, resulting
in a crash.

For whatever obscure ABI reason, among Debian's supported architectures
this only showed up as a segmentation fault on 32-bit ARM (specifically
ARMv5 softfloat and ARMv7 hardfloat), and not on (for example) i386.
Simon McVittie <smcv@debian.org> yes upstream 2023-02-07
Annotate-varargs-functions-with-G_GNUC_PRINTF.patch Annotate varargs functions with G_GNUC_PRINTF
This lets the compiler detect and diagnose type mismatches like the one
fixed in the previous commit.
Simon McVittie <smcv@debian.org> yes upstream 2023-02-07
daemon-Don-t-crash-if-etc-shadow-doesn-t-exist.patch daemon: Don't crash if /etc/shadow doesn't exist
Turning off shadow passwords with `shadowconfig off` or `pwunconv` is
something that distributions still at least half-support, and
apparently some people genuinely do this. In this situation, treat all
users as non-local (until cached) but don't crash.
Simon McVittie <smcv@debian.org> yes debian 2023-02-17

All known versions for source package 'accountsservice'

Links