2 Commits

Author	SHA1	Message	Date
Pierre Warnier	5d8ac9587d	review: address all 13 Copilot review comments ... - Fix cargo build --release --workspace in test scripts - Document setuid-on-symlinks as intentional in Makefile - Warn (not abort) on subid allocation failure in useradd - Propagate subid file read errors instead of unwrap_or_default - Update SELinux docs to describe best-effort behavior - Add env_clear() to getfattr subprocess in selinux.rs - Use hardening::sanitized_env() in nscd.rs instead of local reimpl - Create testuser in pam-e2e.sh, add cleanup - Document su-as-root limitation in pam-e2e.sh - Fix set -e exit code capture in gnu-compat.sh - Add 5 date validation unit tests in chage - Wire audit::log_user_event into all 7 tools	2026-03-24 15:42:08 +01:00
Pierre Warnier	8ba8f940fd	prod: GNU compat tests, PAM e2e, setuid, SELinux, audit, packaging ... Fixes #93 — GNU compatibility test suite (tests/gnu-compat.sh) Fixes #94 — PAM end-to-end test script (tests/pam-e2e.sh) Fixes #95 — Setuid permissions in Makefile (chmod 4755) Fixes #96 — nscd env_clear() on subprocess spawning Fixes #97 — SELinux file context support (getfattr/chcon/restorecon) Fixes #98 — Audit logging to syslog/auditd Fixes #99 — subuid/subgid allocation in useradd Fixes #100 — Debian packaging (debian/control, debian/rules) Fixes #101 — Fedora packaging (shadow-rs.spec) Fixes #103 — Recursive chown on usermod UID change Fixes #104 — Proper date validation (Feb 31 rejected) 456 tests, zero clippy warnings. Binary: 894KB (release-small).	2026-03-24 15:15:21 +01:00