lib/commonio.c | 12 12 + 0 - 0 !
lib/sgroupio.c | 2 1 + 1 - 0 !
lib/shadowio.c | 2 1 + 1 - 0 !
3 files changed, 14 insertions(+), 2 deletions(-)

 set group and mode for [g]shadow files

Set group 'shadow' and mode 0400.

Fixes: #166793

man/useradd.8.xml | 2 1 + 1 - 0 !
src/useradd.c | 4 2 + 2 - 0 !
2 files changed, 3 insertions(+), 3 deletions(-)

 keep using debian's adduser defaults

Bug: https://github.com/shadow-maint/shadow/issues/501
Bug-Debian: https://bugs.debian.org/1004710

src/useradd.c | 11 9 + 2 - 0 !
1 file changed, 9 insertions(+), 2 deletions(-)

 exclude debian-globally allocated uids from sys_uid range warning

Bug: http://bugs.debian.org/1100563

man/Makefile.am | 1 1 + 0 - 0 !
man/man8/shadowconfig.8 | 34 34 + 0 - 0 !
2 files changed, 35 insertions(+)

 document the shadowconfig utility

Status wrt upstream: The shadowconfig utility is Debian-specific.
The man page is Debian-specific, but it used to be distributed by
upstream.

man/useradd.8.xml | 6 6 + 0 - 0 !
man/userdel.8.xml | 6 6 + 0 - 0 !
2 files changed, 12 insertions(+)

 recommend using adduser and deluser

Fixes: #406046

Status wrt upstream: Debian specific patch.

tests/run_some | 68 0 + 68 - 0 !
1 file changed, 68 deletions(-)

 upstream testsuite: disable su tests

Debian uses su from util-linux, pointless/impossible to test shadow's su
here.

etc/login.defs | 367 25 + 342 - 0 !
1 file changed, 25 insertions(+), 342 deletions(-)

 adapt login.defs for debian

Remove settings only applicable to shadow's su, which we do not use.
Remove settings only applicable without PAM support enabled.
Remove obscure commented-out settings.
Remove explanation about write(1), which Debian does not ship anymore.

man/Makefile.am | 15 0 + 15 - 0 !
man/cs/Makefile.am | 9 0 + 9 - 0 !
man/da/Makefile.am | 3 0 + 3 - 0 !
man/de/Makefile.am | 10 0 + 10 - 0 !
man/fr/Makefile.am | 10 0 + 10 - 0 !
man/hu/Makefile.am | 3 0 + 3 - 0 !
man/id/Makefile.am | 1 0 + 1 - 0 !
man/it/Makefile.am | 10 0 + 10 - 0 !
man/ja/Makefile.am | 8 0 + 8 - 0 !
man/ko/Makefile.am | 2 0 + 2 - 0 !
man/pl/Makefile.am | 6 0 + 6 - 0 !
man/ru/Makefile.am | 9 0 + 9 - 0 !
man/sv/Makefile.am | 8 0 + 8 - 0 !
man/tr/Makefile.am | 2 0 + 2 - 0 !
man/uk/Makefile.am | 9 0 + 9 - 0 !
man/zh_CN/Makefile.am | 10 0 + 10 - 0 !
man/zh_TW/Makefile.am | 2 0 + 2 - 0 !
src/Makefile.am | 7 3 + 4 - 0 !
18 files changed, 3 insertions(+), 121 deletions(-)

 stop building programs we do not install

src/newusers.c | 5 4 + 1 - 0 !
src/pwck.c | 5 4 + 1 - 0 !
src/useradd.c | 5 4 + 1 - 0 !
src/usermod.c | 5 4 + 1 - 0 !
4 files changed, 16 insertions(+), 4 deletions(-)

 warn when --badname (and variants) are given

Upstream PR 1158 will remove them, probably in the forky timeframe.

configure.ac | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 configure.ac: align exec_prefix with prefix

Hopefully upstream will fix this one day.
Reported as https://github.com/shadow-maint/shadow/issues/1229