From dbd3527c032bcabf6969977b033049cd3e9bc4e6 Mon Sep 17 00:00:00 2001 From: Iker Pedrosa Date: Thu, 25 Apr 2024 09:12:39 +0200 Subject: [PATCH] share/containers: update build flags for fedora 40 libpam is enabled to provide `passwd` binary from this package, as there are several password quality checks that are enabled through a PAM module. Same reason to disable account-tools-setuid. sssd is disabled because `files provider` has been removed in sssd, and the underlying functionality in shadow isn't needed anymore. libcrack dependency was disabled some time ago, but the upstream repo wasn't updated. Doing it now. Signed-off-by: Iker Pedrosa Reviewed-by: Alejandro Colomar --- share/containers/fedora.dockerfile | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/share/containers/fedora.dockerfile b/share/containers/fedora.dockerfile index aefbee121..de4df5311 100644 --- a/share/containers/fedora.dockerfile +++ b/share/containers/fedora.dockerfile @@ -12,6 +12,7 @@ COPY ./ /usr/local/src/shadow/ WORKDIR /usr/local/src/shadow/ RUN ./autogen.sh \ + --disable-account-tools-setuid \ --enable-lastlog \ --enable-logind=no \ --enable-man \ @@ -20,11 +21,13 @@ RUN ./autogen.sh \ --with-audit \ --with-bcrypt \ --with-group-name-max-length=32 \ + --with-libpam \ --with-selinux \ --with-sha-crypt \ --with-yescrypt \ --without-libbsd \ - --without-libpam + --without-libcrack \ + --without-sssd RUN make -Orecurse -j4 RUN bash -c "trap 'cat &2' ERR; make check;" RUN make install -- 2.47.3