share/containers: update build flags for fedora 40

libpam is enabled to provide `passwd` binary from this package, as there
are several password quality checks that are enabled through a PAM
module. Same reason to disable account-tools-setuid.

sssd is disabled because `files provider` has been removed in sssd, and
the underlying functionality in shadow isn't needed anymore.

libcrack dependency was disabled some time ago, but the upstream repo
wasn't updated. Doing it now.

Signed-off-by: Iker Pedrosa <ipedrosa@redhat.com>
Reviewed-by: Alejandro Colomar <alx@kernel.org>

diff --git a/share/containers/fedora.dockerfile b/share/containers/fedora.dockerfile
index aefbee121b83770e98bb5559c5ef58427fa9a97e..de4df5311a40f160c421bd780084b702c254974f 100644 (file)
--- a/share/containers/fedora.dockerfile
+++ b/share/containers/fedora.dockerfile
@@ -12,6 +12,7 @@ COPY ./ /usr/local/src/shadow/
 WORKDIR /usr/local/src/shadow/
 
 RUN ./autogen.sh \
+       --disable-account-tools-setuid \
        --enable-lastlog \
        --enable-logind=no \
        --enable-man \
@@ -20,11 +21,13 @@ RUN ./autogen.sh \
        --with-audit \
        --with-bcrypt \
        --with-group-name-max-length=32 \
+       --with-libpam \
        --with-selinux \
        --with-sha-crypt \
        --with-yescrypt \
        --without-libbsd \
-       --without-libpam
+       --without-libcrack \
+       --without-sssd
 RUN make -Orecurse -j4
 RUN bash -c "trap 'cat <tests/unit/test-suite.log >&2' ERR; make check;"
 RUN make install