Bug 215036 - In useradd make faillog reset optional with -l flag
In useradd make faillog reset optional with -l flag
Status: CLOSED CURRENTRELEASE
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: shadow-utils (Show other bugs)
5.0
All Linux
medium Severity medium
: ---
: ---
Assigned To: Peter Vrabec
David Lawrence
: Regression, Reopened
Depends On: 209646
Blocks:
  Show dependency treegraph
 
Reported: 2006-11-10 13:08 EST by Bastien Nocera
Modified: 2007-11-30 17:07 EST (History)
2 users (show)

See Also:
Fixed In Version: beta2
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2006-12-22 21:31:37 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)
shadow-useradd-minus-l-dont-touch-faillog.patch (382 bytes, patch)
2006-11-10 13:08 EST, Bastien Nocera
no flags Details | Diff

  None (edit)
Description Bastien Nocera 2006-11-10 13:08:57 EST
+++ This bug was initially created as a clone of Bug #209646 +++

Description of problem:
For correctnes and for getting the SELinux labels correctly set pam package
should contain empty /var/log/tallylog and /var/log/faillog files.

-- Additional comment from sgrubb@redhat.com on 2006-10-06 12:56 EST --
Setting beta blocker request since labels being correct is part of beta2 release
criteria.

-- Additional comment from pm-rhel@redhat.com on 2006-10-06 13:03 EST --
This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux release.  Product Management has requested further review
of this request by Red Hat Engineering.  This request is not yet committed for
inclusion in release.

-- Additional comment from tmraz@redhat.com on 2006-10-13 14:54 EST --
Fixed in pam-0.99.6.2-3.1.el5.



This means that /var/log/faillog will be huge after a new install, on 64-bit
machines, as "useradd -l" for the nfsnobody user (see nfs-utils scripts) only
handles not touching /var/log/lastlog, and not /var/log/faillog

ie.
$ ls -l /var/log/faillog 
-rw------- 1 root root 137438953440 Nov 10 15:20 /var/log/faillog
$ du /var/log/faillog 
28      /var/log/faillog

See bug 165058 for details on why it should be updated.

Quick and easy patch attached below.
Comment 1 Bastien Nocera 2006-11-10 13:08:57 EST
Created attachment 140917 [details]
shadow-useradd-minus-l-dont-touch-faillog.patch
Comment 2 RHEL Product and Program Management 2006-11-10 13:20:55 EST
This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux major release.  Product Management has requested further
review of this request by Red Hat Engineering, for potential inclusion in a Red
Hat Enterprise Linux Major release.  This request is not yet committed for
inclusion.
Comment 3 Peter Vrabec 2006-11-13 05:48:24 EST

*** This bug has been marked as a duplicate of 213450 ***
Comment 5 Peter Vrabec 2006-11-13 05:57:27 EST
This problem is fixed in 
shadow-utils-4.0.17-8.el5.
Comment 6 RHEL Product and Program Management 2006-12-12 11:50:50 EST
This bugzilla has Keywords: Regression.  

Since no regressions are allowed between releases, 
it is also being proposed as a blocker for this release.  

Please resolve ASAP.
Comment 7 Jay Turner 2006-12-14 08:21:21 EST
QE ack for RHEL5.
Comment 8 RHEL Product and Program Management 2006-12-22 21:31:37 EST
A package has been built which should help the problem described in 
this bug report. This report is therefore being closed with a resolution 
of CURRENTRELEASE. You may reopen this bug report if the solution does 
not work for you.

Note You need to log in before you can comment on or make changes to this bug.