shadow

Description:Utilities to deal with user accounts
Homepage:https://github.com/shadow-maint/shadow
Location:Portage
Legend:
  • + - stable
  • ~ - unstable
  • M - hardmask
alpha amd64 arm hppa ia64 m68k mips ppc ppc64 s390 sh sparc x86
4.14.0-r3 diff ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ - ~ ~
4.13-r4 diff ~ + + + ~ ~ ~ ~ + ~ - ~ +
4.13-r3 ~ + + + ~ ~ ~ + + ~ - + +

USE flags

  • acl - Add support for Access Control Lists
  • audit - Enable support for Linux audit subsystem using sys-process/audit
  • bcrypt - build the bcrypt password encryption algorithm
  • cracklib - Support for cracklib strong password checking
  • nls - Add Native Language Support (using gettext - GNU locale utilities)
  • pam - Add support for PAM (Pluggable Authentication Modules) - DANGEROUS to arbitrarily flip
  • selinux - !!internal use only!! Security Enhanced Linux support, this must be set by the selinux profile or breakage will occur
  • skey - Enable S/Key (Single use password) authentication support
  • split-usr - Enable behavior to support maintaining /bin, /lib*, /sbin and /usr/sbin separately from /usr/bin and /usr/lib*
  • su - build the su program
  • systemd - Enable use of systemd-specific libraries and features like socket activation or session tracking
  • verify-sig - Verify upstream signatures on distfiles
  • xattr - Add support for extended attributes (filesystem-stored metadata)

Security Advisory

Date Severity Title
about 2 years normal Shadow: TOCTOU Race
about 4 years high Shadow: Privilege escalation
over 6 years normal Shadow: security bypass
about 7 years normal Shadow: Buffer overflow
over 7 years high Shadow: Multiple vulnerabilities
almost 10 years high Multiple packages, Multiple vulnerabilities fixed in 2011
over 15 years high Shadow: Privilege escalation
over 18 years normal shadow: Privilege escalation
about 20 years low shadow: Unauthorized modification of account information

Also available in: Atom

Thank you!