diff --git a/ChangeLog b/ChangeLog index 0c2afdc8..8be1c3b2 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,11 @@ 2008-09-06 Nicolas François + * NEWS: Added configure --enable-account-tools-setuid (default) / + --disable-account-tools-setuid options. This permits to disable + the PAM authentication of the caller for chage, chgpasswd, + chpasswd, groupadd, groupdel, groupmod, newusers, useradd, + userdel, and usermod. This authentication is not necessary when + these tools are not installed setuid root. * configure.in: Added option --enable-account-tools-setuid to enable/disable the usage of PAM to authenticate the callers of account management tools: chage, chgpasswd, chpasswd, groupadd, diff --git a/NEWS b/NEWS index 4bc228e0..205dc2e9 100644 --- a/NEWS +++ b/NEWS @@ -6,6 +6,12 @@ shadow-4.1.2.1 -> shadow-4.1.3 UNRELEASED - packaging * Added support for OpenPAM. * Added support for uclibc. + * Added configure --enable-account-tools-setuid (default) / + --disable-account-tools-setuid options. This permits to disable the + PAM authentication of the caller for chage, chgpasswd, chpasswd, + groupadd, groupdel, groupmod, newusers, useradd, userdel, and usermod. + This authentication is not necessary when these tools are not + installed setuid root. - gpasswd * Added support for long options --add (-a), --delete (-d),