[Pkg-shadow-commits] r3175 - debian/trunk/debian

[Nicolas FRANÇOIS]

Author: nekral-guest
Date: 2010-03-20 10:45:12 +0000 (Sat, 20 Mar 2010)
New Revision: 3175

Added:
   debian/trunk/debian/passwd.cron.daily
Modified:
   debian/trunk/debian/changelog
Log:
  * debian/passwd.cron.daily: Handle the backups of the user and group
    databases so that it can be removed from the standard daily cron job.
    Closes: #554170


Modified: debian/trunk/debian/changelog
===================================================================
--- debian/trunk/debian/changelog	2010-03-20 10:31:36 UTC (rev 3174)
+++ debian/trunk/debian/changelog	2010-03-20 10:45:12 UTC (rev 3175)
@@ -31,6 +31,9 @@
     protect against mis-typed root login can use "requisite", but will be
     vulnerable to user enumeration attacks on insecure lines, and should use
     pam 1.1.0-4 at least. Closes: #574082, #531341
+  * debian/passwd.cron.daily: Handle the backups of the user and group
+    databases so that it can be removed from the standard daily cron job.
+    Closes: #554170
 
  -- Nicolas FRANCOIS (Nekral) <nicolas.francois at centraliens.net>  Sun, 24 Jan 2010 18:28:33 +0100
 

Added: debian/trunk/debian/passwd.cron.daily
===================================================================
--- debian/trunk/debian/passwd.cron.daily	                        (rev 0)
+++ debian/trunk/debian/passwd.cron.daily	2010-03-20 10:45:12 UTC (rev 3175)
@@ -0,0 +1,9 @@
+#!/bin/sh
+
+cd /var/backups || exit 0
+
+for FILE in passwd group shadow gshadow; do
+        test -f /etc/$FILE              || continue
+        cmp -s $FILE.bak /etc/$FILE     && continue
+        cp -p $FILE $FILE.bak && chmod 600 $FILE.bak
+done