track shadow for Prefix support

35 files changed, 3457 insertions, 0 deletions

diff --git a/sys-apps/shadow/ChangeLog b/sys-apps/shadow/ChangeLog
new file mode 100644
index 0000000..f8d0f2a
--- /dev/null
+++ b/sys-apps/shadow/ChangeLog
@@ -0,0 +1,1324 @@
+# ChangeLog for sys-apps/shadow
+# Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/ChangeLog,v 1.290 2013/09/15 19:11:22 vapier Exp $
+
+  15 Sep 2013; Mike Frysinger <vapier@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Add ttymxc{2,3} #484834 by Steev Klimaszewski.
+
+  05 Sep 2013; Mike Frysinger <vapier@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Mark m68k/s390/sh stable #454388.
+
+  03 Aug 2013; Agostino Sarubbo <ago@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Stable for sparc, wrt bug #454388
+
+  07 Jul 2013; Agostino Sarubbo <ago@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Stable for ia64, wrt bug #454388
+
+  07 Jul 2013; Agostino Sarubbo <ago@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Stable for arm, wrt bug #454388
+
+  06 Jul 2013; Agostino Sarubbo <ago@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Stable for alpha, wrt bug #454388
+
+  04 Jul 2013; Agostino Sarubbo <ago@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Stable for ppc64, wrt bug #454388
+
+  01 Jul 2013; Jeroen Roovers <jer@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Stable for HPPA (bug #454388).
+
+  30 Jun 2013; Agostino Sarubbo <ago@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Stable for ppc, wrt bug #454388
+
+  30 Jun 2013; Agostino Sarubbo <ago@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Stable for x86, wrt bug #454388
+
+  30 Jun 2013; Agostino Sarubbo <ago@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Stable for amd64, wrt bug #454388
+
+  09 Jun 2013; Mike Frysinger <vapier@gentoo.org> metadata.xml:
+  Add upstream CPE tag (security info) from ChromiumOS.
+
+  12 Mar 2013; Mike Frysinger <vapier@gentoo.org> shadow-4.1.4.3.ebuild,
+  shadow-4.1.5-r1.ebuild, shadow-4.1.5-r2.ebuild, shadow-4.1.5.1.ebuild,
+  shadow-4.1.5.ebuild:
+  Drop epunt_cxx call as we no longer need it #460922 by Roman Žilka.
+
+  03 Mar 2013; Mike Frysinger <vapier@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Drop /etc/pam.d/login sed since the file is in pambase now #458548 by Kobboi.
+
+  17 Feb 2013; Mike Frysinger <vapier@gentoo.org> shadow-4.1.5.1-r1.ebuild:
+  Drop epunt_cxx as this no longer needs it.
+
+*shadow-4.1.5.1-r1 (24 Dec 2012)
+
+  24 Dec 2012; Diego E. Pettenò <flameeyes@gentoo.org>
+  +shadow-4.1.5.1-r1.ebuild:
+  Fix pamd file for newusers (bug #448204 by Sergey Popov).
+
+  18 Aug 2012; Mike Frysinger <vapier@gentoo.org> shadow-4.1.4.3.ebuild,
+  shadow-4.1.5-r1.ebuild, shadow-4.1.5-r2.ebuild, shadow-4.1.5.1.ebuild,
+  shadow-4.1.5.ebuild:
+  Drop has_version from older versions, and upgrade latest to EAPI=2 #426474 by
+  Ilya Gordeev.
+
+  17 Aug 2012; Mike Frysinger <vapier@gentoo.org> shadow-4.1.5.1.ebuild:
+  Call epatch_user for custom auth patches #431750.
+
+*shadow-4.1.5.1 (07 Jul 2012)
+
+  07 Jul 2012; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.5.1.ebuild:
+  Version bump #424844 by Samuli Suominen.
+
+  07 Jul 2012; Mike Frysinger <vapier@gentoo.org> shadow-4.1.4.3.ebuild,
+  shadow-4.1.5.ebuild, shadow-4.1.5-r1.ebuild, shadow-4.1.5-r2.ebuild:
+  Fix building when rpc support is disabled #425052 by Dustin Polke.
+
+  31 May 2012; Pawel Hajdan jr <phajdan.jr@gentoo.org> shadow-4.1.5.ebuild,
+  shadow-4.1.5-r1.ebuild, shadow-4.1.5-r2.ebuild, metadata.xml:
+  Remove support for sys-auth/tcb which is being removed because of bugs:
+  #371167, #408647. Use sys-apps/hardened-shadow instead.
+
+*shadow-4.1.5-r2 (21 Apr 2012)
+
+  21 Apr 2012; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.5-r2.ebuild,
+  +files/shadow-4.1.5-grremove.patch,
+  +files/shadow-4.1.5-selinux-groupadd.patch:
+  Fix crash when calling userdel #405409 by Yuri Mamaev. Add patch for groupadd
+  on selinux #406819 by Amadeusz Sławiński. Depend on libsemanage when
+  USE=selinux #408173 by Markus Knetschke.
+
+*shadow-4.1.5-r1 (17 Apr 2012)
+
+  17 Apr 2012; Pawel Hajdan jr <phajdan.jr@gentoo.org> +shadow-4.1.5-r1.ebuild:
+  Version bump for new pambase.
+
+  26 Mar 2012; Mike Frysinger <vapier@gentoo.org> shadow-4.1.4.3.ebuild,
+  shadow-4.1.5.ebuild:
+  Add a few more serial ports for arm devices.
+
+  16 Feb 2012; Mike Frysinger <vapier@gentoo.org> shadow-4.1.5.ebuild:
+  Use "-R <root>" option with grp{ck,conv} as it exists in this version.
+
+*shadow-4.1.5 (13 Feb 2012)
+
+  13 Feb 2012; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.5.ebuild,
+  +files/shadow-4.1.5-nscd-ignore-exit-1.patch,
+  +files/shadow-4.1.5-nscd-newline-msg.patch, +files/shadow-4.1.5-stdarg.patch,
+  metadata.xml:
+  Version bump.
+
+  31 Dec 2011; Mike Frysinger <vapier@gentoo.org> shadow-4.1.4.3.ebuild:
+  Add more arm consoles to securetty #396011 by Raúl Porcel.
+
+  16 Dec 2011; Mike Frysinger <vapier@gentoo.org> shadow-4.1.4.3.ebuild:
+  Enable ttySAC secure logins by default. 
+
+  03 Sep 2011; Tomáš Chvátal <scarabeus@gentoo.org>
+  shadow-4.1.4.2-r6.ebuild, shadow-4.1.4.3.ebuild, metadata.xml:
+  Drop unused local desc and useless blockers over non-existing packages.
+
+  14 Jul 2011; Mike Frysinger <vapier@gentoo.org> shadow-4.1.4.2-r6.ebuild,
+  shadow-4.1.4.3.ebuild:
+  Update SRC_URI #375107 by zino.
+
+  26 Feb 2011; Raúl Porcel <armin76@gentoo.org> shadow-4.1.4.3.ebuild:
+  alpha/ia64/m68k/s390/sh/sparc stable wrt #355207
+
+  20 Feb 2011; Pawel Hajdan jr <phajdan.jr@gentoo.org>
+  shadow-4.1.4.3.ebuild:
+  x86 stable wrt security bug #355207
+
+  19 Feb 2011; Markus Meier <maekke@gentoo.org> shadow-4.1.4.3.ebuild:
+  arm stable, bug #355207
+
+  18 Feb 2011; Jeroen Roovers <jer@gentoo.org> shadow-4.1.4.3.ebuild:
+  Stable for HPPA (bug #355207).
+
+  17 Feb 2011; Kacper Kowalik <xarthisius@gentoo.org> shadow-4.1.4.3.ebuild:
+  ppc/ppc64 stable wrt #355207
+
+  17 Feb 2011; Markos Chandras <hwoarang@gentoo.org> shadow-4.1.4.3.ebuild:
+  Stable on amd64 wrt bug #355207
+
+*shadow-4.1.4.3 (17 Feb 2011)
+
+  17 Feb 2011; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.4.3.ebuild,
+  +files/shadow-4.1.4.3-dup-install-targets.patch:
+  Version bump for security love #355207 by Paweł Hajdan jr.
+
+  30 Oct 2010; Samuli Suominen <ssuominen@gentoo.org>
+  shadow-4.1.4.2-r6.ebuild:
+  ppc64 stable wrt #342015
+
+  24 Oct 2010; Raúl Porcel <armin76@gentoo.org> shadow-4.1.4.2-r6.ebuild:
+  alpha/ia64/m68k/s390/sh/sparc stable wrt #342015
+
+  24 Oct 2010; Brent Baude <ranger@gentoo.org> shadow-4.1.4.2-r6.ebuild:
+  stable ppc, bug 342015
+
+  22 Oct 2010; Markos Chandras <hwoarang@gentoo.org>
+  shadow-4.1.4.2-r6.ebuild:
+  Stable on amd64 wrt bug #342015
+
+  22 Oct 2010; Christian Faulhammer <fauli@gentoo.org>
+  shadow-4.1.4.2-r6.ebuild:
+  stable x86, bug 342015
+
+  22 Oct 2010; Jeroen Roovers <jer@gentoo.org> shadow-4.1.4.2-r6.ebuild:
+  Stable for HPPA (bug #342015).
+
+*shadow-4.1.4.2-r6 (21 Oct 2010)
+
+  21 Oct 2010; Diego E. Pettenò <flameeyes@gentoo.org>
+  -shadow-4.1.4.2-r1.ebuild, -shadow-4.1.4.2-r2.ebuild,
+  -shadow-4.1.4.2-r3.ebuild, -shadow-4.1.4.2-r4.ebuild,
+  +shadow-4.1.4.2-r6.ebuild, -files/login.pamd, -files/login.pamd.1,
+  metadata.xml:
+  Add pam herd to the maintainers (for USE=pam); unbreak /etc/pam.d/login
+  that was dropped during the 4.0.18.2 → 4.1.0 bump; remove 4.1.4.2
+  ebuilds with totally broken PAM support; remove two files that shouldn't
+  be used anymore.
+
+  10 Oct 2010; Raúl Porcel <armin76@gentoo.org> shadow-4.1.4.2-r5.ebuild:
+  alpha/arm/ia64/m68k/s390/sh/sparc stable wrt #338591
+
+  03 Oct 2010; Guy Martin <gmsoft@gentoo.org> shadow-4.1.4.2-r5.ebuild:
+  hppa stable wrt #338591
+
+  01 Oct 2010; Brent Baude <ranger@gentoo.org> shadow-4.1.4.2-r5.ebuild:
+  Marking shadow-4.1.4.2-r5 ppc64 for bug 338591
+
+  28 Sep 2010; Brent Baude <ranger@gentoo.org> shadow-4.1.4.2-r5.ebuild:
+  Marking shadow-4.1.4.2-r5 ppc for bug 338591
+
+  26 Sep 2010; Markus Meier <maekke@gentoo.org> shadow-4.1.4.2-r5.ebuild:
+  x86 stable, bug #338591
+
+  25 Sep 2010; Markos Chandras <hwoarang@gentoo.org>
+  shadow-4.1.4.2-r5.ebuild:
+  Stable on amd64 wrt bug #338591
+
+  12 Sep 2010; Tobias Klausmann <klausman@gentoo.org>
+  shadow-4.1.4.2-r4.ebuild:
+  Stable on alpha, bug #327987
+
+  06 Sep 2010; Brent Baude <ranger@gentoo.org> shadow-4.1.4.2-r2.ebuild:
+  Marking shadow-4.1.4.2-r2 ppc64 for bug 327987
+
+  14 Aug 2010; Markus Meier <maekke@gentoo.org> shadow-4.1.4.2-r4.ebuild:
+  arm stable, bug #327987
+
+*shadow-4.1.4.2-r5 (23 Jul 2010)
+
+  23 Jul 2010; Diego E. Pettenò <flameeyes@gentoo.org>
+  +shadow-4.1.4.2-r5.ebuild, files/pam.d-include/passwd:
+  Add a new revision of shadow that should fix bug #275555.
+
+  13 Jul 2010; Jeroen Roovers <jer@gentoo.org> shadow-4.1.4.2-r4.ebuild:
+  Stable for HPPA PPC (bug #327987).
+
+  12 Jul 2010; Markos Chandras <hwoarang@gentoo.org>
+  shadow-4.1.4.2-r4.ebuild:
+  Stable on amd64 wrt bug #308047
+
+  10 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
+  shadow-4.1.4.2-r4.ebuild:
+  stable x86, bug 308047
+
+*shadow-4.1.4.2-r4 (10 Jul 2010)
+
+  10 Jul 2010; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.4.2-r4.ebuild,
+  +files/shadow-4.1.4.2-fix-etc-gshadow-reading.patch:
+  Fix /etc/gshadow reading #327605 by Dirk Sondermann.
+
+  03 Jul 2010; Christian Faulhammer <fauli@gentoo.org>
+  shadow-4.1.4.2-r3.ebuild:
+  stable x86, security bug 308047
+
+*shadow-4.1.4.2-r3 (27 Jan 2010)
+
+  27 Jan 2010; Peter Volkov <pva@gentoo.org> +shadow-4.1.4.2-r3.ebuild,
+  +files/shadow-4.1.4.2-su_no_sanitize_env.patch:
+  Upstream patch: su should not sanitize_env(), bug #301957.
+
+*shadow-4.1.4.2-r2 (15 Jan 2010)
+
+  15 Jan 2010; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.4.2-r2.ebuild,
+  +files/shadow-4.1.4.2-groupmod-pam-check.patch:
+  Add fix from upstream for groupmod pam check #300790 by Esther Dalhuisen
+  and drop old adduser symlink #301027 by Vicente Olivert.
+
+*shadow-4.1.4.2-r1 (04 Dec 2009)
+
+  04 Dec 2009; Fabio Erculiani <lxnay@gentoo.org> -shadow-4.1.3.1.ebuild,
+  -shadow-4.1.4.1.ebuild, -shadow-4.1.4.2.ebuild, +shadow-4.1.4.2-r1.ebuild,
+  +files/shadow-4.1.4.2-env-reset-keep-locale.patch:
+  Fix invalid environment variables reset, close bug #283725, thanks to
+  myself for reporting, thanks to parafin for providing a working patch
+
+*shadow-4.1.4.2 (24 Jul 2009)
+
+  24 Jul 2009; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.4.2.ebuild:
+  Version bump.
+
+*shadow-4.1.4.1 (23 May 2009)
+
+  23 May 2009; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.4.1.ebuild:
+  Version bump.
+
+*shadow-4.1.4-r1 (18 May 2009)
+
+  18 May 2009; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.4-r1.ebuild,
+  +files/shadow-4.1.4-login-non-pam-crash.patch:
+  Add fix from upstream for crash with non-pam/empty user #270213 by Ulrich
+  Müller.
+
+*shadow-4.1.4 (11 May 2009)
+
+  11 May 2009; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.4.ebuild:
+  Version bump.
+
+*shadow-4.1.3.1 (18 Apr 2009)
+
+  18 Apr 2009; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.3.1.ebuild:
+  Version bump.
+
+*shadow-4.1.3 (12 Apr 2009)
+
+  12 Apr 2009; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.1.3-dots-in-usernames.patch, +shadow-4.1.3.ebuild:
+  Version bump.
+
+  15 Mar 2009; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.1.2.2-id-types.patch,
+  +files/shadow-4.1.2.2-optional-nscd.patch,
+  +files/shadow-4.1.2.2-optional-utimes.patch, shadow-4.1.2.2.ebuild:
+  Add fixes from upstream to get building on uClibc again.
+
+  12 Mar 2009; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.1.2.2-l64a.patch, shadow-4.1.2.2.ebuild:
+  Fix building for uClibc #260001 by Jos van der Ende.
+
+  11 Feb 2009; Mike Frysinger <vapier@gentoo.org>
+  +files/4.1.2.2/shadow-svn-2298.patch,
+  +files/4.1.2.2/shadow-svn-2364.patch, shadow-4.1.2.2.ebuild:
+  Grab some fixes from upstream to fix building on uClibc systems #256784.
+
+  02 Feb 2009; Raúl Porcel <armin76@gentoo.org> shadow-4.1.2.2.ebuild:
+  ia64 stable wrt #251320
+
+  01 Feb 2009; Tobias Scherbaum <dertobi123@gentoo.org>
+  shadow-4.1.2.2.ebuild:
+  ppc stable, bug #251320
+
+  26 Jan 2009; Jeroen Roovers <jer@gentoo.org> shadow-4.1.2.2.ebuild:
+  Stable for HPPA (bug #25132).
+
+  26 Jan 2009; Ferris McCormick <fmccor@gentoo.org> shadow-4.1.2.2.ebuild:
+  Sparc stable, Security Bug #251320.
+
+  25 Jan 2009; Tobias Klausmann <klausman@gentoo.org> shadow-4.1.2.2.ebuild:
+  Stable on alpha, bug #251320
+
+  25 Jan 2009; Brent Baude <ranger@gentoo.org> shadow-4.1.2.2.ebuild:
+  Marking shadow-4.1.2.2 ppc64 for bug 251320
+
+  25 Jan 2009; Markus Meier <maekke@gentoo.org> shadow-4.1.2.2.ebuild:
+  amd64/x86 stable, bug #251320
+
+  20 Dec 2008; Peter Volkov <pva@gentoo.org> shadow-4.1.2.2.ebuild:
+  ~mips rekeyworeded, bug #210769.
+
+  01 Dec 2008; Mike Frysinger <vapier@gentoo.org> shadow-4.1.2.1.ebuild,
+  shadow-4.1.2.2.ebuild:
+  Also run autoheader due to AC_CHECK_DECLS #249403.
+
+  30 Nov 2008; Mike Frysinger <vapier@gentoo.org> shadow-4.1.2.1.ebuild,
+  shadow-4.1.2.2.ebuild:
+  Only run eautoconf as openpam touches just configure #233286 by Sergey
+  Dryabzhinsky.
+
+*shadow-4.1.2.2 (23 Nov 2008)
+
+  23 Nov 2008; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.2.2.ebuild:
+  Version bump.
+
+  17 Nov 2008; Diego E. Pettenò <flameeyes@gentoo.org>
+  files/shadow-4.1.1-audit.patch:
+  Fix patch with absolute paths.
+
+  23 Aug 2008; Doug Goldstein <cardoe@gentoo.org> metadata.xml:
+  add GLEP 56 USE flag desc from use.local.desc
+
+  22 Jul 2008; Diego Pettenò <flameeyes@gentoo.org>
+  +files/shadow-4.1.2.1+openpam.patch, shadow-4.1.2.1.ebuild:
+  Add patch to build against OpenPAM, thanks to Seraphim Mellos in bug
+  #232586.
+
+*shadow-4.1.2.1 (28 Jun 2008)
+
+  28 Jun 2008; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.2.1.ebuild:
+  Version bump.
+
+*shadow-4.1.2-r1 (27 May 2008)
+
+  27 May 2008; Diego Pettenò <flameeyes@gentoo.org>
+  +files/login_defs_pam.sed, -shadow-4.1.2.ebuild, +shadow-4.1.2-r1.ebuild:
+  Fix bug #223631: upstream removed the note that the options don't apply to
+  PAM, so now list the unusable entries explicitly.
+
+*shadow-4.1.2 (25 May 2008)
+
+  25 May 2008; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.2.ebuild:
+  Version bump.
+
+  17 May 2008; nixnut <nixnut@gentoo.org> shadow-4.1.0-r1.ebuild:
+  Added ~ppc wrt bug 210769
+
+  11 May 2008; Ulrich Mueller <ulm@gentoo.org> shadow-4.0.18.1-r1.ebuild,
+  shadow-4.0.18.2.ebuild, shadow-4.1.0.ebuild, shadow-4.1.0-r1.ebuild,
+  shadow-4.1.1.ebuild:
+  Fix dependency: app-admin/skey moved to sys-auth/skey.
+
+  20 Apr 2008; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.1.1-audit.patch, shadow-4.1.1.ebuild:
+  Add fix from upstream for build failure with USE=audit #216291.
+
+  06 Apr 2008; Mike Frysinger <vapier@gentoo.org> shadow-4.1.1.ebuild:
+  Add support for USE=audit.
+
+*shadow-4.1.1 (05 Apr 2008)
+
+  05 Apr 2008; Mike Frysinger <vapier@gentoo.org> +shadow-4.1.1.ebuild:
+  Version bump.
+
+  31 Mar 2008; <ricmm@gentoo.org> shadow-4.0.18.1-r1.ebuild:
+  Drop to ~mips due to unstable deps
+
+  17 Mar 2008; Santiago M. Mola <coldwind@gentoo.org>
+  shadow-4.1.0-r1.ebuild:
+  ~amd64 added back
+
+  12 Mar 2008; Santiago M. Mola <coldwind@gentoo.org>
+  shadow-4.0.18.2.ebuild:
+  amd64 stable wrt bug #211252
+
+  06 Mar 2008; Raúl Porcel <armin76@gentoo.org> shadow-4.1.0-r1.ebuild:
+  Add ~alpha/~ia64 wrt #210769
+
+  05 Mar 2008; Ferris McCormick <fmccor@gentoo.org> shadow-4.1.0-r1.ebuild:
+  ~sparc for testing ---  Bug #210769.
+
+  04 Mar 2008; Brent Baude <ranger@gentoo.org> shadow-4.1.0-r1.ebuild:
+  keyworded ~arch for ppc64, bug 210769
+
+  04 Mar 2008; <cla@gentoo.org> shadow-4.1.0-r1.ebuild:
+  Marked ~x86 (bug #210769). Thanks to Michał Wołonkiewicz <volon@vp.pl> for
+  testing.
+
+  03 Mar 2008; Jeroen Roovers <jer@gentoo.org> shadow-4.1.0-r1.ebuild:
+  Marked ~hppa (bug #210769).
+
+  25 Feb 2008; Raúl Porcel <armin76@gentoo.org> shadow-4.0.18.2.ebuild:
+  alpha/ia64/sparc stable wrt #211252
+
+  25 Feb 2008; Jeroen Roovers <jer@gentoo.org> shadow-4.0.18.2.ebuild:
+  Stable for HPPA (bug #211252).
+
+  24 Feb 2008; Markus Meier <maekke@gentoo.org> shadow-4.0.18.2.ebuild:
+  x86 stable, bug #211252
+
+  24 Feb 2008; Brent Baude <ranger@gentoo.org> shadow-4.0.18.2.ebuild:
+  Marking shadow-4.0.18.2 ppc and ppc64 for bug 211252
+
+*shadow-4.1.0-r1 (24 Feb 2008)
+
+  24 Feb 2008; Diego Pettenò <flameeyes@gentoo.org>
+  -shadow-4.0.18.2-r2.ebuild, +shadow-4.1.0-r1.ebuild:
+  Port pambase to 4.1.0 version, and remove the version based off 4.0.18.2.
+
+*shadow-4.1.0 (24 Feb 2008)
+
+  24 Feb 2008; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.1.0-fix-useradd-usergroups.patch, +shadow-4.1.0.ebuild:
+  Version bump.
+
+  24 Feb 2008; Mike Frysinger <vapier@gentoo.org>
+  files/shadow-4.0.17-login.defs.patch, shadow-4.0.18.1-r1.ebuild,
+  shadow-4.0.18.2.ebuild, shadow-4.0.18.2-r2.ebuild:
+  Make sure we respect libdir for path to cracklib dicts.
+
+  20 Feb 2008; Diego Pettenò <flameeyes@gentoo.org>
+  shadow-4.0.18.2-r2.ebuild:
+  Fix dependencies for pambase/pam.
+
+*shadow-4.0.18.2-r2 (19 Feb 2008)
+
+  19 Feb 2008; Diego Pettenò <flameeyes@gentoo.org> files/login.pamd.3,
+  -shadow-4.0.18.2-r1.ebuild, +shadow-4.0.18.2-r2.ebuild:
+  Use system-local-login rather than system-login and depend on new pambase.
+
+*shadow-4.0.18.2-r1 (19 Feb 2008)
+
+  19 Feb 2008; Diego Pettenò <flameeyes@gentoo.org> +files/login.pamd.3,
+  +shadow-4.0.18.2-r1.ebuild:
+  Add a new revision that uses the new system-login provided by pambase.
+
+  04 Nov 2007; Diego Pettenò <flameeyes@gentoo.org> +files/login.pamd.2,
+  shadow-4.0.18.2.ebuild:
+  PAM support updates: change the dependency back to sys-libs/pam but ask for
+  at least version 0.99 (so that we know we have the proper pam_tally, and we
+  can drop some conditionals), OpenPAM wouldn't work for shadow for now.
+  Simplify the pam.d installation, without using the for loop and case
+  statement. Use the 'epam syntax' for the selinux conditional. Update the
+  options passed to pam_tally so that they don't throw warnings when used with
+  Linux-PAM 0.99.
+
+*shadow-4.0.18.2 (04 Nov 2007)
+
+  04 Nov 2007; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.18.2-useradd.patch, +shadow-4.0.18.2.ebuild:
+  Version bump.
+
+  05 Jul 2007; Brent Baude <ranger@gentoo.org> shadow-4.0.18.1-r1.ebuild:
+  Marking shadow-4.0.18.1-r1 ppc64 stable for bug 183886
+
+  04 Jul 2007; Mike Doty <kingtaco@gentoo.org> shadow-4.0.18.1-r1.ebuild:
+  amd64 stable, bug 183886
+
+  02 Jul 2007; Jeroen Roovers <jer@gentoo.org> shadow-4.0.18.1-r1.ebuild:
+  Stable for HPPA (bug #183886).
+
+  02 Jul 2007; Raúl Porcel <armin76@gentoo.org> shadow-4.0.18.1-r1.ebuild:
+  alpha/ia64/x86 stable wrt #183886
+
+  02 Jul 2007; Gustavo Zacarias <gustavoz@gentoo.org>
+  shadow-4.0.18.1-r1.ebuild:
+  Stable on sparc wrt #183886
+
+  02 Jul 2007; Lars Weiler <pylon@gentoo.org> shadow-4.0.18.1-r1.ebuild:
+  Stable on ppc; bug #183886.
+
+  01 Jul 2007; Joshua Kinard <kumba@gentoo.org> shadow-4.0.18.1-r1.ebuild:
+  Stable on mips, per #183886.
+
+*shadow-4.0.18.1-r1 (01 Jul 2007)
+
+  01 Jul 2007; Diego Pettenò <flameeyes@gentoo.org> +files/login.pamd.1,
+  +shadow-4.0.18.1-r1.ebuild:
+  Revision bump with a fixed pam.d/login file that actually honours stuff like
+  pam_nologin.
+
+  23 Jun 2007; Daniel Drake <dsd@gentoo.org> shadow-4.0.18.1.ebuild:
+  Add GPL to license, as vipw is GPL-licensed (bug #175257)
+
+  26 Feb 2007; Chris Gianelloni <wolf31o2@gentoo.org>
+  shadow-4.0.18.1.ebuild:
+  Added ttyPSC0 for PPC for EFIKA.  Closing bug #158208.
+
+  23 Nov 2006; <blubb@gentoo.org> shadow-4.0.18.1.ebuild:
+  stable on amd64
+
+  14 Nov 2006; Tom Gall <tgall@gentoo.org> shadow-4.0.18.1.ebuild:
+  stable on ppc64 bug154966
+
+  14 Nov 2006; Matti Bickel <mabi@gentoo.org> shadow-4.0.18.1.ebuild:
+  Stable on ppc (bug #154966)
+
+  14 Nov 2006; Jeroen Roovers <jer@gentoo.org> shadow-4.0.18.1.ebuild:
+  Stable for HPPA (bug #154966).
+
+  13 Nov 2006; Andrej Kacian <ticho@gentoo.org> shadow-4.0.18.1.ebuild:
+  Stable on x86, bug #154966.
+
+  13 Nov 2006; Gustavo Zacarias <gustavoz@gentoo.org>
+  shadow-4.0.18.1.ebuild:
+  Stable on sparc wrt #154966
+
+  05 Nov 2006; Mike Frysinger <vapier@gentoo.org> shadow-4.0.18.1.ebuild:
+  Block app-admin/nologin since shadow provides it as well #144541.
+
+  17 Oct 2006; Daniel Drake <dsd@gentoo.org> shadow-4.0.15-r2.ebuild,
+  shadow-4.0.16-r2.ebuild, shadow-4.0.17.ebuild, shadow-4.0.17-r1.ebuild,
+  shadow-4.0.18.1.ebuild:
+  Make cracklib support optional through USE flag
+
+*shadow-4.0.18.1 (04 Aug 2006)
+
+  04 Aug 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.18.1-useradd-usermod.patch, +shadow-4.0.18.1.ebuild:
+  Version bump.
+
+  18 Jul 2006; Martin Schlemmer <azarah@gentoo.org> +files/login_defs.awk,
+  shadow-4.0.17-r1.ebuild:
+  Also comment the already commented options as not supported by pam. Fix
+  Mike's problem with running sed multiple times.
+
+*shadow-4.0.17-r1 (15 Jul 2006)
+
+  15 Jul 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.17-login.defs.patch, +shadow-4.0.17-r1.ebuild:
+  Merge handling of login.defs (fixing #140451 along the way) and cut out
+  old/dead code related to forced upgrading of config files.
+
+  15 Jul 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.17-no-local-getpass.patch, shadow-4.0.17.ebuild:
+  Fix by Ulrich Mueller for building with USE=skey #139966.
+
+*shadow-4.0.17 (11 Jul 2006)
+
+  11 Jul 2006; Mike Frysinger <vapier@gentoo.org> +shadow-4.0.17.ebuild:
+  Version bump.
+
+  09 Jul 2006; Joshua Kinard <kumba@gentoo.org> shadow-4.0.15-r2.ebuild:
+  Marked stable on mips.
+
+*shadow-4.0.16-r2 (06 Jul 2006)
+
+  06 Jul 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.16-mail-creation.patch, +shadow-4.0.16-r2.ebuild:
+  Backport fix from upstream for mail spool creation #139346 by Wolfram Schlich.
+
+*shadow-4.0.16-r1 (04 Jul 2006)
+
+  04 Jul 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.16-check-opendir.patch,
+  +files/shadow-4.0.16-fix-useradd-usergroups.patch,
+  +shadow-4.0.16-r1.ebuild:
+  Fix useradd behavior when using -g #128715 by Max Lorenz and fix segfault in
+  userdel with -r and /dev/null #139148 by David Roussel.
+
+  10 Jun 2006; <roy@gentoo.org> shadow-4.0.14-r1.ebuild,
+  shadow-4.0.15-r2.ebuild, shadow-4.0.16.ebuild:
+  Move grpconv from baselayout to shadow where it belongs.
+
+  09 Jun 2006; Diego Pettenò <flameeyes@gentoo.org> ChangeLog:
+  Make the login.defs installed not throw warning about GETPASS_ASTERISKS, by
+  enabling it only skey.
+
+*shadow-4.0.16 (07 Jun 2006)
+
+  07 Jun 2006; Mike Frysinger <vapier@gentoo.org> +shadow-4.0.16.ebuild:
+  Version bump.
+
+  03 Jun 2006; Rene Nussbaumer <killerfox@gentoo.org>
+  shadow-4.0.15-r2.ebuild:
+  Stable on hppa. See bug #133615.
+
+  31 May 2006; Thomas Cort <tcort@gentoo.org> shadow-4.0.15-r2.ebuild:
+  Stable on alpha wrt security Bug #133615.
+
+  30 May 2006; Markus Ullmann <jokey@gentoo.org> shadow-4.0.15-r2.ebuild:
+  Stable on arm wrt bug #133615
+
+  30 May 2006; Gustavo Zacarias <gustavoz@gentoo.org>
+  shadow-4.0.15-r2.ebuild:
+  Stable on sparc wrt security #133615
+
+  30 May 2006; Luca Barbato <lu_zero@gentoo.org> shadow-4.0.15-r2.ebuild:
+  Marked ppc
+
+  30 May 2006; Chris Gianelloni <wolf31o2@gentoo.org>
+  shadow-4.0.15-r2.ebuild:
+  Stable on amd64 and x86 wrt bug #133615.
+
+  30 May 2006; Markus Rothe <corsair@gentoo.org> shadow-4.0.15-r2.ebuild:
+  Stable on ppc64; bug #133615
+
+*shadow-4.0.15-r2 (26 May 2006)
+
+  26 May 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.15-sanity-checks.patch, +shadow-4.0.15-r2.ebuild:
+  Patch from upstream to add some more sanity checks #133615 by Sune
+  Kloppenborg Jeppesen.
+
+  09 May 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.15-uclibc-missing-l64a.patch, shadow-4.0.15-r1.ebuild:
+  Last uClibc release still needs l64a() #132666 by solar.
+
+*shadow-4.0.15-r1 (07 May 2006)
+
+  07 May 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.15-no-default-MAIL.patch, +shadow-4.0.15-r1.ebuild:
+  Dont export MAIL if MAIL_CHECK_ENAB is disabled.
+
+  27 Apr 2006; Alec Warner <antarus@gentoo.org>
+  files/digest-shadow-4.0.7-r4, files/digest-shadow-4.0.11.1-r1,
+  files/digest-shadow-4.0.11.1-r2, files/digest-shadow-4.0.12,
+  files/digest-shadow-4.0.13, Manifest:
+  Fixing SHA256 digest, pass four
+
+  29 Apr 2006; Joshua Kinard <kumba@gentoo.org> shadow-4.0.14-r1.ebuild:
+  Marked stable on mips.
+
+  26 Mar 2006; Bryan Østergaard <kloeri@gentoo.org shadow-4.0.14-r1.ebuild:
+  Stable on alpha, bug 125419.
+
+*shadow-4.0.15 (21 Mar 2006)
+
+  21 Mar 2006; Mike Frysinger <vapier@gentoo.org> +shadow-4.0.15.ebuild:
+  Version bump.
+
+*shadow-4.0.14-r3 (17 Mar 2006)
+
+  17 Mar 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.14-userdel-group-remove.patch, +shadow-4.0.14-r3.ebuild:
+  Fix from upstream for bogus userdel warning #126432 by Gabriel Lavoie.
+
+  14 Mar 2006; Emanuele Giaquinta <exg@gentoo.org> shadow-4.0.14-r1.ebuild:
+  Stable on ppc; bug #125419
+
+  13 Mar 2006; Joshua Jackson <tsunam@gentoo.org> shadow-4.0.14-r1.ebuild:
+  Stable on x86; bug #125419
+
+*shadow-4.0.14-r2 (12 Mar 2006)
+
+  12 Mar 2006; Diego Pettenò <flameeyes@gentoo.org> +files/login.defs,
+  +files/login.pamd, +shadow-4.0.14-r2.ebuild:
+  Merge pam-login back into shadow, as 4.x version was already being used;
+  this means that upgrade from 4.0.14-r1 requires to remove pam-login before.
+
+  11 Mar 2006; Mike Frysinger <vapier@gentoo.org> shadow-4.0.11.1-r1.ebuild,
+  shadow-4.0.11.1-r2.ebuild, shadow-4.0.12.ebuild, shadow-4.0.13.ebuild,
+  shadow-4.0.14-r1.ebuild:
+  The skey configure option is just plain skey now, not libskey, as noted by
+  Torsten Veller #125419.
+
+  09 Mar 2006; Gustavo Zacarias <gustavoz@gentoo.org>
+  shadow-4.0.14-r1.ebuild:
+  Stable on sparc wrt #125419
+
+  09 Mar 2006; Luis Medinas <metalgod@gentoo.org> shadow-4.0.14-r1.ebuild:
+  Stable on amd64. Bug #125419.
+
+  08 Mar 2006; Markus Rothe <corsair@gentoo.org> shadow-4.0.14-r1.ebuild:
+  Stable on ppc64; bug #125419
+
+  10 Jan 2006; Chris PeBenito <pebenito@gentoo.org> shadow-4.0.13.ebuild,
+  shadow-4.0.14-r1.ebuild:
+  Fix libselinux version required.
+
+*shadow-4.0.14-r1 (10 Jan 2006)
+
+  10 Jan 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.14-su-cvs.patch, -shadow-4.0.14.ebuild,
+  +shadow-4.0.14-r1.ebuild:
+  Grab a fix from upstream cvs to fix `su -c boo` syntax #118342 by Wolfgang
+  Frisch.
+
+*shadow-4.0.14 (04 Jan 2006)
+
+  04 Jan 2006; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.14-nls-manpages.patch,
+  +files/shadow-4.0.14-su-fix-environment.patch, +shadow-4.0.14.ebuild:
+  Version bump.
+
+  25 Dec 2005; Diego Pettenò <flameeyes@gentoo.org> shadow-4.0.13.ebuild:
+  Use bindnow-flags function instead of -Wl,-z,now.
+
+*shadow-4.0.13 (10 Oct 2005)
+
+  10 Oct 2005; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.13-dots-in-usernames.patch,
+  +files/shadow-4.0.13-login.defs.patch,
+  +files/shadow-4.0.13-long-groupnames.patch,
+  +files/shadow-4.0.13-nonis.patch,
+  +files/shadow-4.0.13-su-fix-environment.patch, +shadow-4.0.13.ebuild:
+  Version bump.
+
+  24 Aug 2005; Martin Schlemmer <azarah@gentoo.org>
+  +files/shadow-4.0.12-gcc2.patch, shadow-4.0.12.ebuild:
+  Fix compiling with gcc-2.95.x
+
+*shadow-4.0.12 (23 Aug 2005)
+
+  23 Aug 2005; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.12-dots-in-usernames.patch,
+  +files/shadow-4.0.12-long-groupnames.patch, +shadow-4.0.12.ebuild:
+  Version bump.
+
+  09 Aug 2005; Aaron Walker <ka0ttic@gentoo.org> shadow-4.0.7-r3.ebuild:
+  Stable on mips.
+
+*shadow-4.0.11.1-r2 (04 Aug 2005)
+
+  04 Aug 2005; Martin Schlemmer <azarah@gentoo.org>
+  +files/shadow-4.0.11.1-su-fix-environment.patch,
+  +shadow-4.0.11.1-r2.ebuild:
+  Patch from upstream enables the new environment too early for PAM, causing
+  segfaults in some cases.
+
+*shadow-4.0.11.1-r1 (03 Aug 2005)
+
+  03 Aug 2005; Martin Schlemmer <azarah@gentoo.org>
+  +files/shadow-4.0.11.1-SUPATH.patch,
+  +files/shadow-4.0.11.1-ngettext.patch,
+  +files/shadow-4.0.11.1-uclibc-missing-l64a.patch,
+  +shadow-4.0.11.1-r1.ebuild:
+  Checked with upstream .. SUPATH and PATH valid again for PAM (bug #101047).
+  Fix building on UCLIBC.
+
+*shadow-4.0.11.1 (01 Aug 2005)
+
+  01 Aug 2005; Martin Schlemmer <azarah@gentoo.org>
+  +files/shadow-4.0.11.1-perms.patch, +shadow-4.0.11.1.ebuild:
+  Update version. Remove login.access, related manpages, etc for PAM enabled,
+  as its not used.
+
+*shadow-4.0.7-r4 (25 Jul 2005)
+
+  25 Jul 2005; <solar.@gentoo.org> +files/shadow-4.0.7-perms.patch,
+  shadow-4.0.10.ebuild, +shadow-4.0.7-r4.ebuild:
+  - added no /usr/bin suid option as local use flag nousuid for single user
+  systems
+
+  19 Jul 2005; Bryan Østergaard <kloeri@gentoo.org> shadow-4.0.7-r3.ebuild:
+  Stable on alpha.
+
+  10 Jul 2005; Joseph Jezak <josejx@gentoo.org> shadow-4.0.7-r3.ebuild:
+  Marked ppc stable.
+
+  10 Jul 2005; Daniel Ostrow <dostrow@gentoo.org> shadow-4.0.7-r3.ebuild:
+  Change check for ppc64 and securetty from tc-arch to tc-arch-kernel.
+
+  08 Jul 2005; Rene Nussbaumer <killerfox@gentoo.org>
+  shadow-4.0.7-r3.ebuild:
+  Stable on hppa.
+
+  08 Jul 2005; Gustavo Zacarias <gustavoz@gentoo.org>
+  shadow-4.0.7-r3.ebuild:
+  Stable on sparc
+
+  08 Jul 2005; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.10.ebuild:
+  Add NSCD patches from 4.0.7-r3 as well.
+
+*shadow-4.0.7-r3 (08 Jul 2005)
+
+  08 Jul 2005; Martin Schlemmer <azarah@gentoo.org>
+  +files/shadow-4.0.7-nscd-EPIPE-failure.patch,
+  +files/shadow-4.0.7-nscd-socket-path.patch, shadow-4.0.7-r3.ebuild:
+  Fix EPIPE when nscd is used, bug #80413.
+
+  07 Jul 2005; Markus Rothe <corsair@gentoo.org> shadow-4.0.7-r2.ebuild:
+  Stable on ppc64
+
+  07 Jul 2005; Diego Pettenò <flameeyes@gentoo.org> shadow-4.0.7-r2.ebuild:
+  Stable on amd64
+
+*shadow-4.0.10 (30 Jun 2005)
+
+  30 Jun 2005; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.10-dots-in-usernames.patch,
+  +files/shadow-4.0.10-fix-configure.patch,
+  +files/shadow-4.0.10-long-groupnames.patch,
+  +files/shadow-4.0.10-nls-manpages.patch, +files/shadow-4.0.10-nonis.patch,
+  +shadow-4.0.10.ebuild:
+  Version bump.
+
+  16 Jun 2005; Diego Pettenò <flameeyes@gentoo.org>
+  files/pam.d/system-auth-1.1, files/pam.d-include/system-auth-1.1,
+  files/pam.d/login, files/pam.d/other, files/pam.d/passwd,
+  files/pam.d/shadow, files/pam.d/su, files/pam.d/system-auth:
+  Make all pam.d files use just the modules' filenames instead of full path to
+  fix multilib setups.
+
+  10 Jun 2005; Chris Gianelloni <wolf31o2@gentoo.org> files/securetty:
+  Added vc/0 tty0 for uml.  Blame rocket.
+
+*shadow-4.0.7-r2 (03 Jun 2005)
+
+  03 Jun 2005; Diego Pettenò <flameeyes@gentoo.org>
+  +files/pam.d-include/system-auth-1.1, +files/pam.d-include/login,
+  +files/pam.d-include/other, +files/pam.d-include/passwd,
+  +files/pam.d-include/shadow, +files/pam.d-include/su,
+  +files/pam.d-include/su-openpam, +files/pam.d-include/system-auth,
+  +shadow-4.0.7-r2.ebuild:
+  New revision depending on virtual/pam and using include syntax. Fixes
+  OpenPAM and AMD64 compatibility.
+
+  29 May 2005; <solar@gentoo.org> shadow-4.0.4.1-r4.ebuild:
+  - update sys-apps/shadow to use libc expanded variable elibc_uclibc vs uclibc
+  so USE=-* works
+
+  23 Mar 2005; Chris Gianelloni <wolf31o2@gentoo.org> files/securetty:
+  Added hvc0 to securetty for ppc64 serial console.
+
+  22 Mar 2005; Martin Schlemmer <azarah@gentoo.org>
+  +files/shadow-4.0.7-lastlog.patch, shadow-4.0.7-r1.ebuild:
+  Fix last login logging for tty's - patch from upstream via
+  Robert Connolly <robert@linuxfromscratch.org>.
+
+*shadow-4.0.7-r1 (25 Feb 2005)
+
+  25 Feb 2005; Martin Schlemmer <azarah@gentoo.org>
+  files/pam.d/system-auth-1.1, +shadow-4.0.7-r1.ebuild:
+  No longer DEPEND on pam-login, but PDEPEND on pam-login-3.17 or later, as we
+  move the login pam.d file there. Remove the pam_console comments from
+  pam.d/system-auth-1.1, as it is needed in pam.d/login. Do not install other
+  and system-auth pam.d files if we have pam-0.78 or later.
+
+  10 Feb 2005; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.5-r3.ebuild:
+  Basically -r3 is the same as -r2, just with fix for the MAIL issue with su,
+  so mark stable for all that have -r2 stable.
+
+*shadow-4.0.7 (06 Feb 2005)
+
+  06 Feb 2005; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.7-iswheel.patch, +shadow-4.0.7.ebuild:
+  Version bump with wheel patch by Gregorio Guidi #80345.
+
+*shadow-4.0.6-r1 (11 Jan 2005)
+
+  11 Jan 2005; Mike Frysinger <vapier@gentoo.org> +shadow-4.0.6-r1.ebuild:
+  Fix patch to nscd socket #74395 by Phil Pennock.
+
+  10 Jan 2005; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.6-dots-in-usernames.patch,
+  +files/shadow-4.0.6-long-groupnames.patch, shadow-4.0.6.ebuild:
+  Add patches to enable long group names #3485 and usernames with a . in them
+  #22920.
+
+  06 Jan 2005; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.6-manpages.patch, shadow-4.0.6.ebuild:
+  Add minor patch by Eric Brown to SEE ALSO in manpages #70880.
+
+  04 Jan 2005; Markus Rothe <corsair@gentoo.org> shadow-4.0.5-r3.ebuild:
+  Stable on ppc64
+
+  02 Jan 2005; Ciaran McCreesh <ciaranm@gentoo.org> :
+  Change encoding to UTF-8 for GLEP 31 compliance
+
+  25 Nov 2004; <solar@gentoo.org> shadow-4.0.5-r2.ebuild,
+  shadow-4.0.5-r3.ebuild, shadow-4.0.6.ebuild:
+  Fix RDEPEND's for bug #67815 again
+
+  23 Nov 2004; Mike Frysinger <vapier@gentoo.org> shadow-4.0.5-r2.ebuild,
+  shadow-4.0.5-r3.ebuild, shadow-4.0.6.ebuild:
+  Update DEPENDs so that we either require pam-login or block it depending on
+  USE=pam #67815.
+
+*shadow-4.0.6 (11 Nov 2004)
+
+  11 Nov 2004; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.6-fix-configure.patch, +shadow-4.0.6.ebuild:
+  Version bump #70757 by Lindsay Jack.
+
+*shadow-4.0.5-r3 (07 Nov 2004)
+
+  07 Nov 2004; Martin Schlemmer <azarah@gentoo.org> :
+  Fix configure not detecting maildir, etc properly. Fix pam_env set variables
+  not being set.
+
+  07 Nov 2004; Joshua Kinard <kumba@gentoo.org> shadow-4.0.5-r2.ebuild:
+  Marked stable on mips.
+
+*shadow-4.0.5-r2 (03 Nov 2004)
+
+  03 Nov 2004; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.5-hack-X-envvars.patch, +shadow-4.0.5-r2.ebuild:
+  Restore DISPLAY/XAUTHORITY env passing hack for now #69925.
+
+*shadow-4.0.5-r1 (03 Nov 2004)
+
+  03 Nov 2004; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.5-remove-else.patch, +shadow-4.0.5-r1.ebuild,
+  shadow-4.0.5.ebuild:
+  Small security patch from upstream cvs #69212 and install more pam.d files
+  #69895.
+
+  02 Nov 2004; Jeremy Huddleston <eradicator@gentoo.org>
+  shadow-4.0.5.ebuild:
+  Stable amd64.
+
+  02 Nov 2004; Markus Rothe <corsair@gentoo.org> shadow-4.0.5.ebuild:
+  Stable on ppc64, bug #69212
+
+  02 Nov 2004; Mike Frysinger <vapier@gentoo.org> shadow-4.0.5.ebuild:
+  Mark arm/hppa/ia64/s390/x86 stable for security, fix duplicate manpage
+  install #69781, and block virtual/login when USE=-pam.
+
+  02 Nov 2004; Gustavo Zacarias <gustavoz@gentoo.org> shadow-4.0.5.ebuild:
+  Stable on sparc wrt #69212
+
+  02 Nov 2004; Bryan Østergaard <kloeri@gentoo.org> shadow-4.0.5.ebuild:
+  Stable on alpha, bug 69212.
+
+  02 Nov 2004; Lars Weiler <pylon@gentoo.org> shadow-4.0.5.ebuild:
+  Stable on ppc.  Bug #69212.
+
+  01 Nov 2004; Mike Frysinger <vapier@gentoo.org> shadow-4.0.5.ebuild,
+  +files/shadow-4.0.5-skey.patch:
+  Add patch by Mark Wagner to fix skey support #69741 by Thomas Matthijs.
+
+  28 Oct 2004; Mike Frysinger <vapier@gentoo.org> shadow-4.0.4.1-r4.ebuild,
+  shadow-4.0.5.ebuild, +files/shadow-4.0.4.1-passwd-typo.patch:
+  Fix small glitch in passwd.1 #68150 by rob holland.
+
+*shadow-4.0.5 (28 Oct 2004)
+
+  28 Oct 2004; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.5-nls-manpages.patch, +shadow-4.0.5.ebuild:
+  Version bump #69212 by me.
+
+  16 Oct 2004; Mike Frysinger <vapier@gentoo.org>
+  +files/shadow-4.0.4.1-nls-manpages.patch:
+  Add a small patch I made to not install manpages if USE=-nls.
+
+  15 Oct 2004; Gustavo Zacarias <gustavoz@gentoo.org>
+  shadow-4.0.4.1-r4.ebuild:
+  Stable on sparc
+
+  10 Oct 2004; Mike Frysinger <vapier@gentoo.org> shadow-4.0.4.1-r3.ebuild,
+  shadow-4.0.4.1-r4.ebuild:
+  Move /usr/bin/passwd -> /bin/passwd to aid system recovery #64441.
+
+  09 Oct 2004; Mike Frysinger <vapier@gentoo.org> shadow-4.0.4.1-r4.ebuild:
+  Clean up the manpage fixes and change setuid perms to 4711 by default #47208.
+
+*shadow-4.0.4.1-r4 (07 Oct 2004)
+
+  07 Oct 2004; Mike Frysinger <vapier@gentoo.org> +shadow-4.0.4.1-r4.ebuild
+  +files/shadow-4.0.4.1-userdel-missing-brackets.patch:
+  Add patch to fix exit status while using pam #66687 by Scott Beck/Jason
+  Rhinelander.
+
+  03 Sep 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
+  shadow-4.0.4.1-r1.ebuild, shadow-4.0.4.1-r2.ebuild:
+  Masked shadow-4.0.4.1-r2.ebuild stable for ppc
+
+  03 Sep 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
+  shadow-4.0.4.1-r1.ebuild:
+  Masked shadow-4.0.4.1-r1.ebuild stable for ppc
+
+  18 Aug 2004; Gustavo Zacarias <gustavoz@gentoo.org>
+  shadow-4.0.4.1-r3.ebuild:
+  Stable on sparc
+
+  29 Jul 2004; Guy Martin <gmsoft@gentoo.org> shadow-4.0.4.1-r3.ebuild:
+  Stable on hppa.
+
+  12 Jul 2004; Tom Gall <tgall@gentoo.org> shadow-4.0.3-r10:ebuild:
+  stable on ppc64, add ttyS0 to ppc64 securetty, and add in
+  epatch for gcc 34 Ibug #47455  (bug #56273)
+
+  03 Jul 2004; Guy Martin <gmsoft@gentoo.org> shadow-4.0.4.1-r2.ebuild:
+  Marked stable on hppa.
+
+*shadow-4.0.4.1-r3 (03 Jul 2004)
+
+  03 Jul 2004; Chris PeBenito <pebenito@gentoo.org>
+  files/shadow-4.0.4.1-selinux.diff, +shadow-4.0.4.1-r3.ebuild:
+  Fix /etc/passwd labeling issue in SELinux patch caught by Petre Rodan in
+  #55781. Otherwise same as 4.0.4.1-r2.
+
+  03 Jul 2004; Joshua Kinard <kumba@gentoo.org> shadow-4.0.4.1-r2.ebuild:
+  Marked stable on mips.
+
+  29 Jun 2004; Aron Griffis <agriffis@gentoo.org> shadow-4.0.4.1-r2.ebuild:
+  stable on x86, alpha, ia64
+
+  27 Jun 2004; Aron Griffis <agriffis@gentoo.org> shadow-4.0.3-r10.ebuild,
+  shadow-4.0.3-r9.ebuild, shadow-4.0.4.1-r1.ebuild, shadow-4.0.4.1.ebuild:
+  QA - fix use invocation
+
+  15 Jun 2004; <solar@gentoo.org> shadow-4.0.4.1-r2.ebuild,
+  files/shadow-4.0.4.1-nonis.patch:
+  added nonis patch and uclibc USE to allow shadow to be compiled under uclibc
+  envs
+
+  11 Jun 2004; Bryan Østergaard <kloeri@gentoo.org> shadow-4.0.4.1-r1.ebuild:
+  Stable on alpha.
+
+*shadow-4.0.4.1-r2 (28 May 2004)
+
+  28 May 2004; Aron Griffis <agriffis@gentoo.org> +shadow-4.0.4.1-r2.ebuild:
+  Remove libshadow and libmisc from the shadow package. They shouldn't be
+  installed; they're for package internal use only. Installing them breaks
+  packages that check for libshadow such as freeradius. See bug 37725 for more
+  information. Thanks to Hans W. Wurst for providing some good information in
+  that bug.
+
+*shadow-4.0.4.1-r1 (06 May 2004)
+
+  06 May 2004; Aron Griffis <agriffis@gentoo.org> +shadow-4.0.4.1-r1.ebuild,
+  shadow-4.0.4.1.ebuild:
+  Fix bug 35736: Use -fPIC when building on 64-bit systems so that other
+  packages which link shadow into their shared objects will build, for example
+  freeradius. Normally this is something to fix globally, but don't want to hurt
+  performance for other arches.
+
+  04 May 2004; Gustavo Zacarias <gustavoz@gentoo.org> shadow-4.0.3-r10.ebuild,
+  shadow-4.0.4.1.ebuild:
+  hppa consoles added to securetty, sparc cleanup, for non-stable ebuilds
+
+  04 May 2004; Gustavo Zacarias <gustavoz@gentoo.org> shadow-4.0.3-r9.ebuild:
+  hppa consoles added to securetty, sparc cleanup
+
+  22 Apr 2004; Travis Tilley <lv@gentoo.org>
+  +files/shadow-4.0.3-gcc34-xmalloc.patch,
+  +files/shadow-4.0.4.1-gcc34-xmalloc.patch, shadow-4.0.3-r9.ebuild,
+  shadow-4.0.4.1.ebuild:
+  fixes for compiling with gcc 3.4 - bug #47455
+
+  29 Mar 2004; Jon Portnoy <avenj@gentoo.org> shadow-4.0.3-r9.ebuild,
+  shadow-4.0.3-r10.ebuild, shadow-4.0.4.1.ebuild :
+  Need nls in IUSE, referenced in DEPEND. Bug #44548.
+
+  16 Feb 2004; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3-r9.ebuild,
+  shadow-4.0.4.1.ebuild:
+  Fix sg, adduser and vigr symlinks (make them relative not absolute), bug
+  #41178.
+
+  23 Jan 2004; Chris PeBenito <pebenito@gentoo.org> shadow-4.0.4.1.ebuild,
+  files/shadow-4.0.4.1-selinux.diff:
+  Update SELinux patch.
+
+*shadow-4.0.4.1 (22 Jan 2004)
+
+  22 Jan 2004; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.4.1.ebuild,
+  files/shadow-4.0.4.1-su-pam_open_session.patch,
+  files/shadow-4.0.4.1-useradd-manpage-update.patch:
+  Update version.
+
+*shadow-4.0.3-r10 (09 Jan 2004)
+
+  09 Jan 2004; Aron Griffis <agriffis@gentoo.org> shadow-4.0.3-r10.ebuild:
+  Enable building of shared objects.  Thanks to Nico Baggus in bug 37725.
+  This also closes bug 37719 since freeradius should be able to build with
+  libshadow.so
+
+  15 Dec 2003; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3-r9.ebuild:
+  Install the correct version of /etc/pam.d/system-auth, and do not install
+  system-auth-1.1. Do not force update anymore.
+
+  10 Dec 2003; Seemant Kulleen <seemant@gentoo.org> shadow-4.0.3-r9.ebuild:
+  don't install man 5 passwd either, man-pages again
+
+  10 Dec 2003; Seemant Kulleen <seemant@gentoo.org> shadow-4.0.3-r9.ebuild:
+  don't install the getspnam manpage -- man-pages package handles that and does
+  it with a better version, to boot
+
+  09 Dec 2003; Seemant Kulleen <seemant@gentoo.org> shadow-4.0.3-r9.ebuild:
+  don't install the id man page, coreutils does that
+
+*shadow-4.0.3-r9 (06 Dec 2003)
+
+  06 Dec 2003; Seemant Kulleen <seemant@gentoo.org> shadow-4.0.3-r9.ebuild:
+  version bump to force /bin/groups to be on the system -- /bin/groups has been
+  removed from coreutils, and now only shadow will provide it. Note that
+  coreutils used to compile su and not install it.  This behaviour was
+  changed in the bumped coreutils as well (not that that has any effect on
+  this, but thought I'd mention it anyway)
+
+*shadow-4.0.3-r8 (17 Nov 2003)
+
+  17 Nov 2003; Joshua Brindle <method@gentoo.org> shadow-4.0.3-r8.ebuild:
+  added optional pam support
+
+  28 Oct 2003; Chris PeBenito <pebenito@gentoo.org> shadow-4.0.3-r7.ebuild,
+  files/shadow-4.0.3-selinux.diff:
+  Add new API SELinux patch
+
+  26 Sep 2003; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3-r7.ebuild:
+  Mark stable.
+
+  26 Sep 2003; Martin Holzer <mholzer@gentoo.org> shadow-4.0.3-r3.ebuild,
+  shadow-4.0.3-r4.ebuild, shadow-4.0.3-r5.ebuild, shadow-4.0.3-r6.ebuild,
+  shadow-4.0.3-r7.ebuild:
+  Added nls? sys-devel/gettext. Closes #29236.
+
+*shadow-4.0.3-r7 (04 Aug 2003)
+
+  04 Aug 2003; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3-r7.ebuild,
+  files/pam.d/system-auth-1.1:
+  Remove the 'nodelay' option from authentication (/etc/pam.d/system-auth), bug
+  #24081.
+
+  29 Jun 2003; Chris PeBenito <pebenito@gentoo.org> shadow-4.0.3-r6.ebuild:
+  Remove selinux stuff, as its no longer needed.  Using pam-login again.
+
+*shadow-4.0.3-r6 (18 May 2003)
+
+  18 May 2003; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3-r6.ebuild:
+  Get the fixed version that do not exclude selinux in as latest stable.
+
+*shadow-4.0.3-r5 (13 May 2003)
+
+  14 May 2003; Joshua Kinard <kumba@gentoo.org> shadow-4.0.3-r5.ebuild:
+  Added "gnuconfig" to inherit and "gnuconfig_update" to src_compile()
+  to make it detect mips systems correctly
+
+  13 May 2003; Daniel Ahlberg <aliz@gentoo.org> :
+  Security update. Added nodelay to second line of pam.d/system-auth.
+
+*shadow-4.0.3-r4 (23 Feb 2003)
+
+  24 Feb 2003; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3-r4.ebuild :
+  Remove the patch again, as it could be a security risk.  Users can use:
+     # sudo -u nobody ls
+  If they need to run commands as user with '/bin/false' as login ...
+
+  23 Feb 2003; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3-r4.ebuild :
+  If su should not simulate a login shell, use '/bin/sh' as shell to enable
+  running of commands as user with /bin/false as shell, closing bug #15015.
+
+  21 Feb 2003; Zach Welch <zwelch@gentoo.org> shadow-4.0.3-r3.ebuild :
+  Added arm to keywords.
+
+  09 Feb 2003; Guy Martin <gmsoft@gentoo.org> shadow-4.0.3-r3.ebuild :
+  Added hppa to keywords.
+
+  19 Jan 2003; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3-r3.ebuild :
+  Patch the useradd manpage to be a bit more clear, closing bug #13203.
+  Thanks to Guy <guycad@mindspring.com>.
+
+*shadow-4.0.3-r3 (25 Dec 2002)
+
+  24 Mar 2003; Joshua Brindle <method@gentoo.org> shadow-4.0.3-r3.ebuild:
+  added pam.d files for selinux builds
+
+  23 Mar 2003; Joshua Brindle <method@gentoo.org> shadow-4.0.3-r3.ebuild:
+  added selinux support, thanks sindian
+
+  18 Jan 2003; Jan Seidel <tuxus@gentoo.org> :
+  Added mips to keywords
+
+  25 Dec 2002; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3-r3.ebuild :
+  Added /etc/default/useradd with default shell of /bin/bash, closing bug #5629.
+
+  06 Dec 2002; Rodney Rees <manson@gentoo.org> :
+  Changed sparc ~sparc keywords.
+
+  03 Dec 2002; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3-r2.ebuild :
+  Mark as stable.  Update pam.d/su to use pam_filelist.so if uncommented.
+  This can be used as a type of /etc/suauth.  Should close bug #4210.
+
+  Fix an issue where /etc/pam.d/system-auth.new was still being installed.
+
+*shadow-4.0.3-r1 (20 Oct 2002)
+
+  20 Oct 2002; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3-r2.ebuild :
+  Update the su-pam_open_session.patch, as the old one did not export
+  XAUTHORITY, or call pam_close_session().
+
+*shadow-4.0.3-r1 (19 Oct 2002)
+
+  19 Oct 2002; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3-r1.ebuild :
+  Get su to call pam_open_session(), and also set DISPLAY and XAUTHORITY,
+  else the session entries in /etc/pam.d/su never get executed, and
+  pam_xauth for one, is then never used.  This should close bug #8831.
+
+  12 Oct 2002; Martin Schlemmer <azarah@gentoo.org> shadow-4.0.3.ebuild :
+  Fix bug #9031 (add /etc/default/ to fix useradd -D).
+
+*shadow-4.0.2-r4.ebuild (14 July 2002)
+
+  14 Jul 2002; phoen][x <phoenix@gentoo.org> shadow-4.0.2-r4.ebuild :
+  Added KEYWORDS, SLOT.
+
+*shadow-4.0.1-r2.ebuild (14 July 2002)
+
+  14 Jul 2002; phoen][x <phoenix@gentoo.org> shadow-4.0.1-r2.ebuild :
+  Added KEYWORDS, SLOT.
+
+  29 Jun 2002; M.Schlemmer <azarah@gentoo.org>
+  Update to use libtool.eclass.  This fix the compile problems without
+  having custom $LIBS and $LDFLAGS.
+
+*shadow-4.0.2-r5 (28 Apr 2002)
+
+  14 Jul 2002; phoen][x <phoenix@gentoo.org> shadow-4.0.2-r5.ebuild :
+  Added KEYWORDS.
+
+  28 Apr 2002; M.Schlemmer <azarah@gentoo.org>
+  Remove /etc/login.defs.
+
+  8 Apr 2002; M.Schlemmer <azarah@gentoo.org>
+  Removed /bin/login in favour of the one in util-linux, as the one
+  included here have a root exploit if pam_limits is in use.
+
+  Libtoolized to fix .la files.  Build is pretty broken if libtoolized, so had
+  to put a unortodox LIBS= and LDFLAGS= there.
+
+*shadow-4.0.3 (3 Apr 2002)
+
+  14 Jul 2002; phoen][x <phoenix@gentoo.org> shadow-4.0.3.ebuild :
+  Added KEYWORDS.
+
+  3 Apr 2002; Jared H. Hudson <jhhudso@gentoo.org>
+  Added new shadow version, currently masked out until it's been
+  tested better.
+
+*shadow-4.0.2-r3 (3 Apr 2002)
+
+  3 Apr 2002; Jared H. Hudson <jhhudso@gentoo.org>
+  Cleaned up earlier fix to account for all possibilities, such as
+  binary packages, different ROOT's, and an already existing good
+  system-auth file.
+
+*shadow-4.0.2-r2 (3 Apr 2002)
+
+  3 Apr 2002; Jared H. Hudson <jhhudso@gentoo.org>
+  Fixed /etc/pam.d/system-auth to use pam_unix instead of pam_pwdb due
+  to security bug.
+
+*shadow-4.0.2-r1 (25 Mar 2002)
+
+  25 Mar 2002; M.Schlemmer <azarah@gentoo.org>
+  Fix the "libdir" in /usr/lib/libmisc.la.
+
+*shadow-20001016-r10 (12 Mar 2002)
+
+  14 Jul 2002; phoen][x <phoenix@gentoo.org> shadow-20001016-r10.ebuild :
+  Added KEYWORDS, SLOT.
+
+  12 Mar 2002; Seemant Kulleen <seemant@gentoo.org>
+  Added USE dependent nls compilation.
+
+*shadow-20001016-r9 (26 Feb 2002)
+
+  14 Jul 2002; phoen][x <phoenix@gentoo.org> shadow-20001016-r9.ebuild :
+  Added KEYWORDS, SLOT.
+
+  26 Feb 2002; T.Neidt <tod@gentoo.org> shadow-20001016-r9.ebuild, login.defs
+  Changed 'CREATE_HOME yes' to 'CREATE_HOME no' in login.defs.
+  CREATE_HOME is a RedHat'ism and is not supported by the stock shadow
+  package (see src/useradd.c).  When CREATE_HOME is set to 'yes',
+  useradd generates a warning meassage.
+
+  Bumped ebuild revision so login.defs will be updated by emerge updates.
+
+  Note to users:  'useradd -m <user>' will create the home directory and
+  add any files in /etc/skel (see 'man useradd')
+
+
+*shadow-20001016-r8 (25 Feb 2002)
+
+  14 Jul 2002; phoen][x <phoenix@gentoo.org> shadow-20001016-r8.ebuild :
+  Added KEYWORDS, SLOT.
+
+  25 Feb 2002; M.Schlemmer <azarah@gentoo.org> shadow-20001016-r8.ebuild
+  Added a 'rm -rf ${D}/usr/share/man/*' to Chris's man fix to clean the
+  Polish pages.  Added the line for installing /etc/pam.d/chage again, which
+  should close bug #837.
+
+*shadow-20001016-r7 (20 Feb 2002)
+
+  14 Jul 2002; phoen][x <phoenix@gentoo.org> shadow-20001016-r7.ebuild :
+  Added KEYWORDS, SLOT.
+
+  20 Feb 2002; Chris Houser <chouser@gentoo.org> shadow-20001016-r7.ebuild
+  files/digest-shadow-20001016-r7 ChangeLog :
+
+  Changed man page installation.  More man pages are now included, and all
+  should be in English (instead of the occasional Polish page).  This closes
+  bug #594.
+
+*shadow-20001016-r6 (1 Feb 2002)
+
+  1 Feb 2002; G.Bevin <gbevin@gentoo.org> ChangeLog :
+  Added initial ChangeLog which should be updated whenever the package is
+  updated in any way. This changelog is targetted to users. This means that the
+  comments should well explained and written in clean English. The details about
+  writing correct changelogs are explained in the skel.ChangeLog file which you
+  can find in the root directory of the portage repository.
diff --git a/sys-apps/shadow/Manifest b/sys-apps/shadow/Manifest
new file mode 100644
index 0000000..aa4ef6b
--- /dev/null
+++ b/sys-apps/shadow/Manifest
@@ -0,0 +1,38 @@
+AUX default/useradd 96 SHA256 31aa2cbe4a34a9f7d4d134c1fecd007c9bbf4d40e19d0dcddbcd396f1853b490 SHA512 87b01ac88c2065392fa988871489d8403ef93341b4cfbadb4504f39a2a3396ddef756efc6378868d00627a58a1feb9612eb52a8135558a211a09c6a9ccf3404f WHIRLPOOL 9022a371e34e96a4c3193f24752979da27cdcd60aec1c8db1d2b427ab880b16917578ddcb4d8af02fd1d0eedc6b346cf43d7ae892e8580321e32e50f5498980b
+AUX login.defs 6254 SHA256 b7bfd7b1c34ce3d35865b572abc69d278dea4eef4f349c26b238735547c4ac22 SHA512 7d21d6f72693e5485bde8bbf18a66b3aefef58fae057825fa84beeb548b78d7e12c00149d9c63a5fbdc32daaf1ee5bfa57f63b523b391562d4d2e81a6c06cf27 WHIRLPOOL 756549cd21f0101c861ece9194405a13a1fc4e7c3b9bae080103a3e1bb94b5073d90904d63c7c25fd2f02ef1c4a0d43b9eac4879adc0e1ad4ade4d2ee4532ab9
+AUX login.pamd.3 190 SHA256 1009e196b630dae5d1f40b1cc6ee42a38ecdb7c2cd4bfa40fb7114ee74e0bfd0 SHA512 7181fcdf5dc798230f482cd52827680839f054f79d67498bbdbc20d9926752d34858af37d0b5afc28be9ef5247ad884e027d6ccf29ea0f69ba75a6cdd80918f1 WHIRLPOOL 63012c9e4899f644e2f91fa31348d76718811035e42e5a94425a1e9689b8a67f92e11228b629ce70b9114a44ce4bdf54770fb6805aaacbc4beba4ab302589b24
+AUX login_defs.awk 738 SHA256 6ceb9e03c2f7df817f3162de48886c9c66a596cb2af98fbf523c93e26840113b SHA512 06a19785c55dd7b389342535c3dd9f56114eba54e27c415d921b8598f9862bad4c8d1b251bd0eb036ecefdf4124c444f30c504d7921d93dab3a0eaea03625f72 WHIRLPOOL 047cc78b7faf93b4508efa3f6238d2c013af4cffc920a7ffc0f0197d69cb301189f32ae2d74a9dceafea4999a33e0656dfd43aa4f791b5855e12a553e770ccde
+AUX login_defs_pam.sed 479 SHA256 587239d5b1425c5766f10cea5352b325699fb35829d9375bda68bbfd74f1d839 SHA512 c4bda7776b5a0bdaa8e7e36c09fb005699cf8b1ef5b474021f7e95d98e62a39aebd354dcc8ad0c49316e8e5d0123429b893c3ff9e4024c18ac0e25b4ab4b45ed WHIRLPOOL a6c5ce16824dde56b4ae899cb9b8effc9b7d61133e88e262a22a5e0db080c85ead15d6d9a13c5583b6e55b368ffd890bf037a3957ce6071b370dd7fb50d63bf4
+AUX pam.d-include/login 245 SHA256 39bbe2ed696a22c7549a39a7cfd47c16e347e5af4fd71b8c01ec87fce59ba0a0 SHA512 87a503ed5df2c522cbf97dcb7f6c252fe9e6e4a4fd34e6641b5cbbaebd2ff4a4d861eeadb0196c7cb30717db8fa2194072500af2336f4b81d4bd87b106699c35 WHIRLPOOL 85a34f81ad9337d06c3162c4c897d8e20f26e9ad9eb399adf11e5eea4538d274ecd9498da37a4e374521d480eadcbcdf98b1991a79580af6e8bb1890f6e02f2f
+AUX pam.d-include/other 142 SHA256 5e05df2743ec0021364b05f4bbe2e5a3a670abb5af845c3fa760731e5b7272ca SHA512 639db65a3f573e5d800790931ddac0f378a2d678338ff45068b9f5dda8aa9ebd858fed86c0c1e4f45c2ce3d04e3d8d4ec4ced57837a54e3c18e209711cfe2522 WHIRLPOOL ea34f5db2897fc506c63d0e0a2efc20d5f8c7b1f7353d1ab98c5becf8d0e73c1299a357114412376f17b42f43e0f1685810afe5dc86f42a400b86d7f9a314936
+AUX pam.d-include/passwd 144 SHA256 8c54d2e3aab50b2a8d3d36aa37f7d7bb32c15d9a3af9a10b7ec5b5ffcff9a5fb SHA512 31611a08d97cd2c129f18d451a555ff6c781f91603c77fc0c66ff406b5fa4a97db19ae4ce104816a6324529d10e131de0d5329646bdab2abc8dc3ee5b82b057f WHIRLPOOL 879370adfb6a78c0acdeebf2c10a503d94925c34dceadb8677693f6c34e4e973f2584b221a9a81fdf23f084c430bbafa23a03440c1a95c798b58faedf4d412bd
+AUX pam.d-include/shadow 152 SHA256 7fc1ccca85d2b1ac4dad9909792453c8d26e9aeab48c620d861a92b9355ac69f SHA512 d07611c350d0d6f3386db5080c80a84e4135cf33e44fd3a390cb1092e034f9bd2a69495fadd4bda6ede9962e9658e77f2c8e12d3189cdcda6c7b3c607336f0c3 WHIRLPOOL 2b5282f983b5bf52c0311c2153dba2d12f6c07ae803d1723010bf4bbf4962d120aea026d32b1f3b062778da5222e7cb16dc39660e53b72173fba723a57b616de
+AUX pam.d-include/su 1059 SHA256 63a6a6fb6194f4dff8fdd16214a563242a4ea6cb682f49af337378dfddaf2962 SHA512 c9535434437221fad058b9fad878da13f3a3d4fc9290e4a7366e6d4dab7e320ac40de297bcc874fbe83e50b5ea29c5aac39d7d250632f045d964150604381550 WHIRLPOOL 33283dee1e71ae36112c72d36852680291bab919158e8faab478f7fd32035732b2cf62d83df373fa06869d3c84f05b34477598e776f8e65a39dbc0ef8a2c3724
+AUX pam.d-include/su-openpam 249 SHA256 8d26b735b1b5aa598fc29a88a2d52eeed587210dd1dbd3180ef9bb440a3375b7 SHA512 242328ac89744a5178fdf904b4068d358e07a3ab69035ed586de05ae31a59a4d9929ae6e5f3aa0c60b61b22d8df8584aca47e3f682416979e89d4c7dbc76bdcd WHIRLPOOL 3f7e52c38abc07d9d289edc0b6b31ea8d5d84520e737f4e289e75c5df965eda424f0a4706bb3e5fd6e556b274a6472dc5ca90ba23d17f609ae1311b013b0aef7
+AUX pam.d-include/system-auth 380 SHA256 704c07b9bab8201d55d80970e5a086ea35d93d62969aeb27ee9ebef85a029ed9 SHA512 4a359425064711a4194cff517175f708c829e6f1ca24a77ce38eb10482a8ca5a7ac1f9e25ce301d1f0278963768483344d6caf0548685eb33019f8d4a7d4f847 WHIRLPOOL 8607d4d2a12ac3252902c5a5c592b07903e843a8ada2ed87bf589ab9ab358eef9734a5294862baa5558eef1381c5a77c4fd3e62b1bb9898232aab78f60fbe5d3
+AUX pam.d-include/system-auth-1.1 365 SHA256 e073f573c88515cf38fb22faa26ccf87d55d34e6d460d28ad25682958de4c13e SHA512 3633aff2be598a108d75bd5c2b92b399f0b244327be54ff29d498ef8f95107d0c39a62ffe983e19198d54540c36c028316b628081abf5e8f85cb946db41055c2 WHIRLPOOL 1cb61620c3fbc8ada4676b04d9e38da345f300e1115a13f81790decaa57d56d6d8ada8d1fa12c1857b0ea3591583cb9fa6f195237ebfa1e0ba48e667defa2c5f
+AUX securetty 262 SHA256 9bc3c187d5535ebe83cf22129b7189a9d8e4c05520af187bff6cff4d8f083c67 SHA512 d841f00a4c83e9672ec3620cdff73f2cd02a1a9e883115b329720b5f6ffbf6faa0ff8ac975f1494f7ad07f0ffa91f6eb983a617e604af67dd46062069b09f7f2 WHIRLPOOL 4b7ee107532d1a2e528745c5e3dcb770fc54f7f2a7dcc0f706613e5623f9a5521ee808900a5ffeb68073d9787ebe08606e6eaf95cdb400c9490b0da3614deaa8
+AUX shadow-4.1.3-dots-in-usernames.patch 302 SHA256 2299ffaec204d20e00d791bf5b982571c9261a74c7a7b865a9f7cad1cdcb43ba SHA512 ad20fb3f4f0292f39b5da796e41df71e9e8b1b81dd11a99b2d988440c1b435b0061333a0a5a37a909598d5a840a75946e8c59c74426bae7452de88cf673a5f7d WHIRLPOOL f0258b24f7731ab7b15a1fca391593c8bbd6bdf2ddad57af1d7960d05af49bc5b706039caa576646cb3d817d2d4ad8e89526b12fe046301c63c1518d01dcf173
+AUX shadow-4.1.4.2-env-reset-keep-locale.patch 436 SHA256 5dd113c5cc0ea77dc8d8903b8c327b3b5e2cc9a529306ca85651631f06652e8f SHA512 aea56eae416d4f7d415486dd8c897130ff364fc6e227af7099998718d50e8d306862d17c1038fdce73ca4409bda6b269dc6592a3e74c4cff3fb623d82b0a35f9 WHIRLPOOL 4e306521cb13933da3eec1f93cbddeeede36c69eab680d7a2dd664552b6072f2784d00ac4920868f6e01d8ebbcf505ae2ea54283610afa307a2e6fd3a1429aad
+AUX shadow-4.1.4.2-fix-etc-gshadow-reading.patch 570 SHA256 091effa9c0336ffdc269d60a26af707b21ce849bdec7128baa21ce2bb5cba6b2 SHA512 6ac87a999188471413b124739228663712289aab929a883dc1e9153040886dc411fbf61080f84fea6ee0d56c8fc715a2a316bdc2260900856917c3b328a7b5e9 WHIRLPOOL c9f4210efdf8da9cf8bd92f58533a6575a12e5f6571e24888bd87ee11066c57ba6ae719f0471df5d3d659d6e78a05babc5345bb23506370054c4a0d6925266d2
+AUX shadow-4.1.4.2-groupmod-pam-check.patch 689 SHA256 ad60c0c26b70007750da034223eca38f1a98512fc80ce2fe40440e31a7585c52 SHA512 964bcc8ae71e66d121a270b204588446eaa87b21355e6c029818fe29b7b24b9dc1849ca6dfd9d4c1f661cb49b93df13c522ff3092b645d188849323f6c848c17 WHIRLPOOL 16cbf1e1dee1a4577867b71ec4c847d9005455cc562f047b20c7aa750b7cee1ea4a2e024a3369b64950455c03b600156bd865f64692953f2fb1c7f8ba12b77c7
+AUX shadow-4.1.4.2-su_no_sanitize_env.patch 315 SHA256 675098bb3dca4d8ac78e6c1c4ae7f513cb4017583b34b6b4d67611578bff8723 SHA512 91fb6a6ba77fb069e12785bd88394c737fc04d9cded50c3851e031506a9021384e975a95775ac1c381ab026b5e06aae9687dda5e163fa45e69221096519679f8 WHIRLPOOL 16831cc3e9f062e790cde8c78a919e64c6be15b5c28e060e5ea866c4a4f24329b53d2a20b577ec328ff4dd910c23c81cda1dfe71d7414ed925826d8415a1f73b
+AUX shadow-4.1.4.3-dup-install-targets.patch 695 SHA256 8d8cebd032acb9f20a1ff99d8db2b95952ebb8a3592a7b1088364ed88cf70d11 SHA512 4ec5a936b315c8d556ede610ed47be599ae34207f4360014a66d149d542966d23e2af5b1a8255c5c63529317e8428af5979a62d1a2a2261b14a6333159b53607 WHIRLPOOL 0ed0e3bd457c2538389cfb5b3d36d646ff11443a5c72c2db74dc212e4140aa414d35d62fc989155aaee69ffd3047f3850d7b2f29daccd43bbe5f53459d38cf9a
+AUX shadow-4.1.5-grremove.patch 1664 SHA256 626536837e0cdc6903200de0d63b23c5a0d4a88f8d9b668e830a7035ab5f7e01 SHA512 a9d5bb16307fe40f50ee2e921bcf833220382d108f68ca1f973955bd77820e4987b435420bb0dbf8d9da5f6d7f52a1973bd566bf1868e5dacaa6635f69b3b934 WHIRLPOOL 8c20548471577ed5e1b6fe894af4b7dc4fac15c0dcb3cc02972343556d5113e8d9e8d97d1a91701df352f2dbd48c8a2416e1c70221e7cc5f9d913e85d41bd57e
+AUX shadow-4.1.5-nscd-ignore-exit-1.patch 988 SHA256 b44d1706553f084b9949467c10be17661d8a01dda308f323ea14e406caf84347 SHA512 19c604b48c3a78086248f01307c425fc1265d3ed5ee13ac783ff885f6ea019d28918df6d570c927c5ce5a5f5e003ff089553db1964661f3fd0b70812f57bb324 WHIRLPOOL 2970ded35b1ceda3b103bb8b30b6bdff5741e325a935919c3178bf378e04f5e279b2c65b1096698843ca56320f80742c3713624abea19cb35b0232a089aa673e
+AUX shadow-4.1.5-nscd-newline-msg.patch 1332 SHA256 37142316d0c06584801d65e902798108995d59f52eda8c76d322479a31c9cff1 SHA512 d1e155fcb82b5ce5531fa76385576feced1c9d520cd18a62d9af418a4403c72a7e47155e5535d3182a8f68f960188eadc211d1017e1df6637f0217398d8b7774 WHIRLPOOL 36b1550b3b41597bf302236f1bc8bda675e51c11797d03210ff1c8a61d1b4a27486cfb614997688ffd8f384a1d76a746d50c50ed17a1f4348d040093b402e961
+AUX shadow-4.1.5-selinux-groupadd.patch 703 SHA256 62cce19aa1c702bc099948e694166f19d057849a6fdde99ffea52a4e3e2dab99 SHA512 a9c258b3b316abe57e85c556edcd37a1cea18f9125273ca7c79c136fb256f6847d0d4c5a78155882900ce280c83aac6ba1f428c9b3aaa020d7cf35a13409ffb0 WHIRLPOOL 1c301b32f6bb5927fac5626a724446ac1a865234dda5021dbdb908607b2887a534c2499246ef355888b5d0c6fcf8111faa2fa5bb6c5b33eebb3132c916e6120a
+AUX shadow-4.1.5-stdarg.patch 1137 SHA256 9280f8337651dc25f22f52acd8f4467b592d1f664bd35ce1f2f431335b1aef5b SHA512 aeda218afa859c9b121f54500be4bdf3676386448c04cffda3ec4aefc4b7fdd8b7e2b5e24545dad2d64fc7748cc68bdce337931d7313d608df0b153330f9912a WHIRLPOOL 42dd1686196f503950905d40728f8e74a75b64014e39cb5d3ed8aa379718a7c00893a1ef8834e8aa887807a4a08556464e0d2b65b79e2e7a0512d89e79e358db
+DIST shadow-4.1.4.2.tar.bz2 1790400 SHA256 97987f6a7967a85e6aa0dba2a1d52db8bd69af5a717391de5693db768fb78990 SHA512 d18f60b892e9a1e7599090e8b8f65537b03258b6124b3dc0333ad0a21c78e1e1331435e08b391d6ea559d04e45319a19d18da6837af9d1ba7f423ca08cc06d3f WHIRLPOOL 8faa9ccc438c86e734c1a8fefd89a27a043beebd87018fed0e1bf82181c52568a75c003c9aa9ea28fc2c0137f2130d101b1221be55aabe7cfaf3248e3ccd06b6
+DIST shadow-4.1.4.3.tar.bz2 1804034 SHA256 633f5bb4ea0c88c55f3642c97f9d25cbef74f82e0b4cf8d54e7ad6f9f9caa778 SHA512 b9707d8bd4a934461898a2474bda8e66a3ec92b450236f0f4a6a13a7337600e816e972de51beed7833f16ba056b90e56af9cd971f90172e440daabce2cc53859 WHIRLPOOL 723c22933d256556b84c91e72eaa6f2ed1caf66a85b53b224176e84389be0d89ba7e8c84c3d3a31157a339aa3a302604bd965af69ad3d675f281caf96d6b1e22
+DIST shadow-4.1.5.1.tar.bz2 2193325 SHA256 aa32333748d68b58ed3a83625f0165e0f6b9dc4639e6377c9300c6bf4fe978fb SHA512 c3bc605de1ca5b774b80d0d92cef5d4c0d5b4a206acadcf5a819f195453093bfe7990d7e32b98799180847ae4fadecfc7876c8ee7297f343acce2230d805d02c WHIRLPOOL 08751597b5b57057f0a3141be97204df49fada25adf0a9f43106a4099ce1b06fec6e90592e43ff1d789bf0a7e16a40b45f29830879ea5c71e9f5a1a81e7a7357
+DIST shadow-4.1.5.tar.bz2 2155227 SHA256 e3c1ac70fa08d932777639c861155dc61024c2d4961e76f0d07fd239ba10cd87 SHA512 c830958bf25f633ac41273acac62a62d755ab8fa4e9d01b9498fe4701890797bf81fef6a8bd5cabbd052ca33a9b8fb20072f40f97dcb9efbbf8ae0e1cccf8df8 WHIRLPOOL 2e0c3bdedd3c898f3b87ee10224d81e544636e2e5190685ce7e045f35cbf63e77b59f8d5657a923156ee927a4e705ec1b73bf6fc1bc556848bb0fbd0c0cfe916
+EBUILD shadow-4.1.4.2-r6.ebuild 5321 SHA256 4a77c13904a42a146ce4c6becb1d98c692491947b45e249cf615c2bed88278a6 SHA512 48d55fa1bd570adee8e0a79d6b68bf7126d36c6c7ca5758e1debf4a17c97fc300f5bf17e556353965c4c789ecdf7634b46c7396278d26002729657849b688b22 WHIRLPOOL b9dbf818cec4f2b897ae977f126a10d6e428233724afdba70730372e29e4e3692cbec245a7cd4524982c94afd2e1715a7bb537149aeb338d504cce1915406a97
+EBUILD shadow-4.1.4.3.ebuild 5433 SHA256 9cd68ab3673251660b0b0fa7eb6dfda14e6854dd26829aaa023d04d679a3736f SHA512 dceb231f732f8e60a2e7ddc174ba39ccbaedf6f94ff335b1004e8df3766ad562675b756ea136eea5b58aeefe0ff5924ab5f8af1468e59927e9446d32ba1a09d8 WHIRLPOOL 9aceaa5ed676e560bdcc242bea7142633b1b8c21ba69cb5f2a9c764bd335251367f3a5661ff9de4c235f18495376da0547aebbf540f51846982ceee9af09739d
+EBUILD shadow-4.1.5-r1.ebuild 5349 SHA256 b9ead510aa68120a0e76139e5086353e7a5769c9dc2f2e9ad340d19292ceef6b SHA512 99404fe2ac68b7944e9a08f1341255a189f15e7a6b1b4b4ebfd7f71826a8fb1c24a7c12b66e1c115752ecbfe2041c700bd5e69718136e8d062d0254ec937793f WHIRLPOOL 3d92e0ad17fe077e094582907a59b15a2867c33744bc84c86905d7c27427ac2588c43bd5ce63a099e1c88f983bdb88c0de9f4d7bb7271504a0e4658ed741d596
+EBUILD shadow-4.1.5-r2.ebuild 5497 SHA256 b161237ccda5f6203ff45ea2fd503357d5877b8cdc75a5708f1a9f26d86c616d SHA512 d1c7f2fb410e3de2a4fb7480b58787da939071281218fa379310cee221b15718a5050977c29aef2ebf0989e31f59e5b90f44cdb02746c27f8a0fd4c3f9dfa6d4 WHIRLPOOL e200796e956f42a58999319e44e217754acf5126fd8df855969fe62099410984dc60edd492588566919044a2e43ed180dbc4a3b72f66ede07c141e57dee6e64b
+EBUILD shadow-4.1.5.1-r1.ebuild 5246 SHA256 2a64d02d8124b214ad179d0ca85875e04d88fa82bf31042eeb229fd18c826168 SHA512 1fc01b10a556828539d0cbd68ece449c6073711a1ad81024f4ebd8adb3db70fb8432f22ba26cbeb41922a6656b218f8f5333b419995ca7e294015d2d586b907a WHIRLPOOL 0b450c9b42728251b426bc736b3b93db31c333a050c5943048081b20843b4df785df79735c1faa5bfdcbc6124df2711c3f953be7b1aa794508719c35cb1cb76e
+EBUILD shadow-4.1.5.1.ebuild 5275 SHA256 c48557c40429e0bc8ef3cf3876f145e4d06b2071fc0e84dd70ccfa16f6c0c08f SHA512 c400cab7c2080feca95960793221a6a416ef7d08860376f0a005951a63581c20d81a0a710bf24275cdc9e37b1d2c5e864c43eb789e13f16150a18384ff505138 WHIRLPOOL e954239d3129acab29c3a085a3c69d14c841558dcad1504dd4ab891d4695c25f6ec2528b0adea97ebc559b10a4651b7a9bbe41cd3e20668456c3e02ab50fc6b7
+EBUILD shadow-4.1.5.ebuild 5305 SHA256 1c820f73cdaf46b1850e0ec0bfa685dc2685dd66cf9461c78cb33240794af91c SHA512 30bb0841e008ca0b83c88915457b896a3156a4a085f0dec181e6c6a3771198da4f1993c13e97983bc32ca53ff7fa6e30f99a0bbde36d2d793c30acd88802ad48 WHIRLPOOL 482925e851a2134d836620e74b4f2231b8040bdade032e41f340fcef7bbfcf6c456003e22e819dbd9db6137d0aad7559231945b59df1f2cff6954911d1bc8a50
+MISC ChangeLog 48839 SHA256 c6ae4d80bda7a8442b93e501cdee85e56fa1bcffd8eb10835482a42cf21d18d5 SHA512 fa5133f7b8e7aee9281fb89d4ee3c8f97dc2fef88915b6ec15c71cb0e84428f35ebcd90bf40b0fa7ae874fc0809ee714e8460ad20b2609613700fa7a91ebe028 WHIRLPOOL 9a27cbcb2c0c330f0c39ba6bbe4eb3ebc2a42afad773bb4eff03d19575296edbd8c7af416eebfaa06ce51dc280184a9bce3be92241824d3366a75c1b5e8b83a7
+MISC metadata.xml 374 SHA256 1675a5791603e79e431df63215162737553fa8018360b026739ac3284bca54b2 SHA512 0bb65b45fa94ddea89f7e0a879fd996b3f363b3e58eb6cbd71251fd79416667f103af4bac0c87f3ba240e0ce3f323c77ce7be9f6ea92c13d619ff8cef8797add WHIRLPOOL e7f4f5d975440fe71dbb35dee4394aa808fce7b5e58ac64d162418a47ed99cb002c7622563be4f6800967d6b8530d29dbd895e431c78f75a5cdf490b8c1afc45
diff --git a/sys-apps/shadow/files/default/useradd b/sys-apps/shadow/files/default/useradd
new file mode 100644
index 0000000..ae81dbb
--- /dev/null
+++ b/sys-apps/shadow/files/default/useradd
@@ -0,0 +1,7 @@
+# useradd defaults file
+GROUP=100
+HOME=/home
+INACTIVE=-1
+EXPIRE=
+SHELL=/bin/bash
+SKEL=/etc/skel
diff --git a/sys-apps/shadow/files/login.defs b/sys-apps/shadow/files/login.defs
new file mode 100644
index 0000000..4aa7044
--- /dev/null
+++ b/sys-apps/shadow/files/login.defs
@@ -0,0 +1,212 @@
+#
+# /etc/login.defs - Configuration control definitions for the login package.
+#
+#	$Id: login.defs,v 1.6 2006/03/12 23:47:08 flameeyes Exp $
+#
+# Three items must be defined:  MAIL_DIR, ENV_SUPATH, and ENV_PATH.
+# If unspecified, some arbitrary (and possibly incorrect) value will
+# be assumed.  All other items are optional - if not specified then
+# the described action or option will be inhibited.
+#
+# Comment lines (lines beginning with "#") and blank lines are ignored.
+#
+# Modified for Linux.  --marekm
+
+#
+# Delay in seconds before being allowed another attempt after a login failure
+#
+FAIL_DELAY		3
+
+#
+# Enable display of unknown usernames when login failures are recorded.
+#
+LOG_UNKFAIL_ENAB	no
+
+#
+# Enable logging of successful logins
+#
+LOG_OK_LOGINS		no
+
+#
+# Enable "syslog" logging of su activity - in addition to sulog file logging.
+# SYSLOG_SG_ENAB does the same for newgrp and sg.
+#
+SYSLOG_SU_ENAB		yes
+SYSLOG_SG_ENAB		yes
+
+#
+# If defined, either full pathname of a file containing device names or
+# a ":" delimited list of device names.  Root logins will be allowed only
+# upon these devices.
+#
+CONSOLE		/etc/securetty
+#CONSOLE	console:tty01:tty02:tty03:tty04
+
+#
+# If defined, all su activity is logged to this file.
+#
+#SULOG_FILE	/var/log/sulog
+
+#
+# If defined, file which maps tty line to TERM environment parameter.
+# Each line of the file is in a format something like "vt100  tty01".
+#
+#TTYTYPE_FILE	/etc/ttytype
+
+#
+# If defined, the command name to display when running "su -".  For
+# example, if this is defined as "su" then a "ps" will display the
+# command is "-su".  If not defined, then "ps" would display the
+# name of the shell actually being run, e.g. something like "-sh".
+#
+SU_NAME		su
+
+#
+# *REQUIRED*
+#   Directory where mailboxes reside, _or_ name of file, relative to the
+#   home directory.  If you _do_ define both, MAIL_DIR takes precedence.
+#
+MAIL_DIR	/var/spool/mail
+
+#
+# If defined, file which inhibits all the usual chatter during the login
+# sequence.  If a full pathname, then hushed mode will be enabled if the
+# user's name or shell are found in the file.  If not a full pathname, then
+# hushed mode will be enabled if the file exists in the user's home directory.
+#
+HUSHLOGIN_FILE	.hushlogin
+#HUSHLOGIN_FILE	/etc/hushlogins
+
+#
+# *REQUIRED*  The default PATH settings, for superuser and normal users.
+#
+# (they are minimal, add the rest in the shell startup files)
+ENV_SUPATH	PATH=/sbin:/bin:/usr/sbin:/usr/bin
+ENV_PATH	PATH=/bin:/usr/bin
+
+#
+# Terminal permissions
+#
+#	TTYGROUP	Login tty will be assigned this group ownership.
+#	TTYPERM		Login tty will be set to this permission.
+#
+# If you have a "write" program which is "setgid" to a special group
+# which owns the terminals, define TTYGROUP to the group number and
+# TTYPERM to 0620.  Otherwise leave TTYGROUP commented out and assign
+# TTYPERM to either 622 or 600.
+#
+TTYGROUP	tty
+TTYPERM		0600
+
+#
+# Login configuration initializations:
+#
+#	ERASECHAR	Terminal ERASE character ('\010' = backspace).
+#	KILLCHAR	Terminal KILL character ('\025' = CTRL/U).
+#	UMASK		Default "umask" value.
+#
+# The ERASECHAR and KILLCHAR are used only on System V machines.
+# The ULIMIT is used only if the system supports it.
+# (now it works with setrlimit too; ulimit is in 512-byte units)
+#
+# Prefix these values with "0" to get octal, "0x" to get hexadecimal.
+#
+ERASECHAR	0177
+KILLCHAR	025
+UMASK		022
+
+#
+# Password aging controls:
+#
+#	PASS_MAX_DAYS	Maximum number of days a password may be used.
+#	PASS_MIN_DAYS	Minimum number of days allowed between password changes.
+#	PASS_WARN_AGE	Number of days warning given before a password expires.
+#
+PASS_MAX_DAYS	99999
+PASS_MIN_DAYS	0
+PASS_WARN_AGE	7
+
+#
+# Min/max values for automatic uid selection in useradd
+#
+UID_MIN			 1000
+UID_MAX			60000
+
+#
+# Min/max values for automatic gid selection in groupadd
+#
+GID_MIN			  100
+GID_MAX			60000
+
+#
+# Max number of login retries if password is bad
+#
+LOGIN_RETRIES		3
+
+#
+# Max time in seconds for login
+#
+LOGIN_TIMEOUT		60
+
+#
+# Which fields may be changed by regular users using chfn - use
+# any combination of letters "frwh" (full name, room number, work
+# phone, home phone).  If not defined, no changes are allowed.
+# For backward compatibility, "yes" = "rwh" and "no" = "frwh".
+# 
+CHFN_RESTRICT		rwh
+
+#
+# List of groups to add to the user's supplementary group set
+# when logging in on the console (as determined by the CONSOLE
+# setting).  Default is none.
+#
+# Use with caution - it is possible for users to gain permanent
+# access to these groups, even when not logged in on the console.
+# How to do it is left as an exercise for the reader...
+#
+#CONSOLE_GROUPS		floppy:audio:cdrom
+
+#
+# Should login be allowed if we can't cd to the home directory?
+# Default in no.
+#
+DEFAULT_HOME	yes
+
+#
+# If defined, this command is run when removing a user.
+# It should remove any at/cron/print jobs etc. owned by
+# the user to be removed (passed as the first argument).
+#
+#USERDEL_CMD	/usr/sbin/userdel_local
+
+#
+# When prompting for password without echo, getpass() can optionally
+# display a random number (in the range 1 to GETPASS_ASTERISKS) of '*'
+# characters for each character typed.  This feature is designed to
+# confuse people looking over your shoulder when you enter a password :-).
+# Also, the new getpass() accepts both Backspace (8) and Delete (127)
+# keys to delete previous character (to cope with different terminal
+# types), Control-U to delete all characters, and beeps when there are
+# no more characters to delete, or too many characters entered.
+#
+# Setting GETPASS_ASTERISKS to 1 results in more traditional behaviour -
+# exactly one '*' displayed for each character typed.
+#
+# Setting GETPASS_ASTERISKS to 0 disables the '*' characters (Backspace,
+# Delete, Control-U and beep continue to work as described above).
+#
+# Setting GETPASS_ASTERISKS to -1 reverts to the traditional getpass()
+# without any new features.  This is the default.
+#
+GETPASS_ASTERISKS 0
+
+#
+# Enable setting of the umask group bits to be the same as owner bits
+# (examples: 022 -> 002, 077 -> 007) for non-root users, if the uid is
+# the same as gid, and username is the same as the primary group name.
+#
+# This also enables userdel to remove user groups if no members exist.
+#
+USERGROUPS_ENAB yes
+
diff --git a/sys-apps/shadow/files/login.pamd.3 b/sys-apps/shadow/files/login.pamd.3
new file mode 100644
index 0000000..13abd27
--- /dev/null
+++ b/sys-apps/shadow/files/login.pamd.3
@@ -0,0 +1,6 @@
+auth       required	pam_securetty.so
+auth       include	system-local-login
+
+account    include	system-local-login
+password   include	system-local-login
+session    include	system-local-login
diff --git a/sys-apps/shadow/files/login_defs.awk b/sys-apps/shadow/files/login_defs.awk
new file mode 100644
index 0000000..56087c6
--- /dev/null
+++ b/sys-apps/shadow/files/login_defs.awk
@@ -0,0 +1,32 @@
+# Fixes up login defs for PAM by commenting all non-PAM options and adding a
+# comment that it is not supported with PAM.
+#
+# Call with lib/getdef.c and etc/login.defs as args in the root source directory
+# of shadow, ie:
+#
+#   gawk -f login_defs.awk lib/getdef.c etc/login.defs > login.defs.new
+#
+
+(FILENAME == "lib/getdef.c") {
+	if ($2 == "USE_PAM")
+		start_printing = 1
+	else if ($1 == "#endif")
+		nextfile
+	else if (start_printing == 1)
+		VARS[count++] = substr($1, 3, length($1) - 4)
+}
+
+(FILENAME != "lib/getdef.c") {
+	print_line = 1
+	for (x in VARS) {
+		regex = "(^|#)" VARS[x]
+		if ($0 ~ regex) {
+			print_line = 0
+			printf("%s%s\t(NOT SUPPORTED WITH PAM)\n",
+				($0 ~ /^#/) ? "" : "#", $0)
+		}
+	}
+	if (print_line)
+		print $0
+}
+
diff --git a/sys-apps/shadow/files/login_defs_pam.sed b/sys-apps/shadow/files/login_defs_pam.sed
new file mode 100644
index 0000000..ba308ba
--- /dev/null
+++ b/sys-apps/shadow/files/login_defs_pam.sed
@@ -0,0 +1,24 @@
+/^FAILLOG_ENAB/b comment
+/^LASTLOG_ENAB/b comment
+/^MAIL_CHECK_ENAB/b comment
+/^OBSCURE_CHECKS_ENAB/b comment
+/^PORTTIME_CHECKS_ENAB/b comment
+/^QUOTAS_ENAB/b comment
+/^MOTD_FILE/b comment
+/^FTMP_FILE/b comment
+/^NOLOGINS_FILE/b comment
+/^ENV_HZ/b comment
+/^PASS_MIN_LEN/b comment
+/^SU_WHEEL_ONLY/b comment
+/^CRACKLIB_DICTPATH/b comment
+/^PASS_CHANGE_TRIES/b comment
+/^PASS_ALWAYS_WARN/b comment
+/^CHFN_AUTH/b comment
+/^ENVIRON_FILE/b comment
+
+b exit
+
+: comment
+  s:^:#:
+
+: exit
diff --git a/sys-apps/shadow/files/pam.d-include/login b/sys-apps/shadow/files/pam.d-include/login
new file mode 100644
index 0000000..9d21677
--- /dev/null
+++ b/sys-apps/shadow/files/pam.d-include/login
@@ -0,0 +1,12 @@
+#%PAM-1.0
+
+auth       required	pam_securetty.so
+auth       include	system-auth
+auth       required	pam_nologin.so
+
+account    include	system-auth
+
+password   include	system-auth
+
+session    include	system-auth
+session    optional	pam_console.so
diff --git a/sys-apps/shadow/files/pam.d-include/other b/sys-apps/shadow/files/pam.d-include/other
new file mode 100644
index 0000000..bb0b964
--- /dev/null
+++ b/sys-apps/shadow/files/pam.d-include/other
@@ -0,0 +1,9 @@
+#%PAM-1.0
+
+auth       required	pam_deny.so
+
+account    required	pam_deny.so
+
+password   required	pam_deny.so
+
+session    required	pam_deny.so
diff --git a/sys-apps/shadow/files/pam.d-include/passwd b/sys-apps/shadow/files/pam.d-include/passwd
new file mode 100644
index 0000000..960b32e
--- /dev/null
+++ b/sys-apps/shadow/files/pam.d-include/passwd
@@ -0,0 +1,8 @@
+#%PAM-1.0
+
+auth       sufficient   pam_rootok.so
+auth       include	system-auth
+
+account    include	system-auth
+
+password   include	system-auth
diff --git a/sys-apps/shadow/files/pam.d-include/shadow b/sys-apps/shadow/files/pam.d-include/shadow
new file mode 100644
index 0000000..743b2f0
--- /dev/null
+++ b/sys-apps/shadow/files/pam.d-include/shadow
@@ -0,0 +1,8 @@
+#%PAM-1.0 
+
+auth       sufficient	pam_rootok.so
+auth       required		pam_permit.so
+
+account    include		system-auth
+
+password   required		pam_permit.so
diff --git a/sys-apps/shadow/files/pam.d-include/su b/sys-apps/shadow/files/pam.d-include/su
new file mode 100644
index 0000000..d15c7ed
--- /dev/null
+++ b/sys-apps/shadow/files/pam.d-include/su
@@ -0,0 +1,32 @@
+#%PAM-1.0
+
+auth       sufficient	pam_rootok.so
+
+# If you want to restrict users begin allowed to su even more,
+# create /etc/security/suauth.allow (or to that matter) that is only
+# writable by root, and add users that are allowed to su to that
+# file, one per line.
+#auth       required     pam_listfile.so item=ruser sense=allow onerr=fail file=/etc/security/suauth.allow
+
+# Uncomment this to allow users in the wheel group to su without
+# entering a passwd.
+#auth       sufficient   pam_wheel.so use_uid trust
+
+# Alternatively to above, you can implement a list of users that do
+# not need to supply a passwd with a list.
+#auth       sufficient   pam_listfile.so item=ruser sense=allow onerr=fail file=/etc/security/suauth.nopass
+
+# Comment this to allow any user, even those not in the 'wheel'
+# group to su
+auth       required     pam_wheel.so use_uid
+
+auth       include		system-auth
+
+account    include		system-auth
+
+password   include		system-auth
+
+session    include		system-auth
+session    required     pam_env.so
+session    optional		pam_xauth.so
+
diff --git a/sys-apps/shadow/files/pam.d-include/su-openpam b/sys-apps/shadow/files/pam.d-include/su-openpam
new file mode 100644
index 0000000..e9ec7d3
--- /dev/null
+++ b/sys-apps/shadow/files/pam.d-include/su-openpam
@@ -0,0 +1,14 @@
+#%PAM-1.0
+
+auth       sufficient	pam_rootok.so
+
+auth       include		system-auth
+
+account    include		system-auth
+
+password   include		system-auth
+
+session    include		system-auth
+session    required     pam_env.so
+session    optional		pam_xauth.so
+
diff --git a/sys-apps/shadow/files/pam.d-include/system-auth b/sys-apps/shadow/files/pam.d-include/system-auth
new file mode 100644
index 0000000..b7c37af
--- /dev/null
+++ b/sys-apps/shadow/files/pam.d-include/system-auth
@@ -0,0 +1,14 @@
+#%PAM-1.0
+
+auth       required		pam_env.so
+auth       sufficient	pam_unix.so likeauth nullok nodelay
+auth       required		pam_deny.so
+
+account    required		pam_unix.so
+
+password   required		pam_cracklib.so retry=3
+password   sufficient	pam_unix.so nullok md5 shadow use_authtok
+password   required		pam_deny.so
+
+session    required		pam_limits.so
+session    required		pam_unix.so
diff --git a/sys-apps/shadow/files/pam.d-include/system-auth-1.1 b/sys-apps/shadow/files/pam.d-include/system-auth-1.1
new file mode 100644
index 0000000..fe80483
--- /dev/null
+++ b/sys-apps/shadow/files/pam.d-include/system-auth-1.1
@@ -0,0 +1,14 @@
+#%PAM-1.0
+
+auth       required	pam_env.so
+auth       sufficient	pam_unix.so likeauth nullok
+auth       required	pam_deny.so
+
+account    required	pam_unix.so
+
+password   required	pam_cracklib.so retry=3
+password   sufficient	pam_unix.so nullok md5 shadow use_authtok
+password   required	pam_deny.so
+
+session    required	pam_limits.so
+session    required	pam_unix.so
diff --git a/sys-apps/shadow/files/securetty b/sys-apps/shadow/files/securetty
new file mode 100644
index 0000000..c7042fa
--- /dev/null
+++ b/sys-apps/shadow/files/securetty
@@ -0,0 +1,33 @@
+# /etc/securetty: list of terminals on which root is allowed to login.
+# See securetty(5) and login(1).
+console
+
+vc/0
+vc/1
+vc/2
+vc/3
+vc/4
+vc/5
+vc/6
+vc/7
+vc/8
+vc/9
+vc/10
+vc/11
+vc/12
+tty0
+tty1
+tty2
+tty3
+tty4
+tty5
+tty6
+tty7
+tty8
+tty9
+tty10
+tty11
+tty12
+
+tts/0
+ttyS0
diff --git a/sys-apps/shadow/files/shadow-4.1.3-dots-in-usernames.patch b/sys-apps/shadow/files/shadow-4.1.3-dots-in-usernames.patch
new file mode 100644
index 0000000..efcb33d
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.1.3-dots-in-usernames.patch
@@ -0,0 +1,10 @@
+--- shadow-4.1.3/libmisc/chkname.c
++++ shadow-4.1.3/libmisc/chkname.c
+@@ -66,6 +66,7 @@
+ 		      ( ('0' <= *name) && ('9' >= *name) ) ||
+ 		      ('_' == *name) ||
+ 		      ('-' == *name) ||
++		      ('.' == *name) ||
+ 		      ( ('$' == *name) && ('\0' == *(name + 1)) )
+ 		     )) {
+ 			return false;
diff --git a/sys-apps/shadow/files/shadow-4.1.4.2-env-reset-keep-locale.patch b/sys-apps/shadow/files/shadow-4.1.4.2-env-reset-keep-locale.patch
new file mode 100644
index 0000000..7c83f7c
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.1.4.2-env-reset-keep-locale.patch
@@ -0,0 +1,14 @@
+http://bugs.gentoo.org/283725
+https://alioth.debian.org/tracker/index.php?func=detail&aid=311740&group_id=30580&atid=411480
+
+--- shadow-4.1.4.2/libmisc/env.c
++++ shadow-4.1.4.2/libmisc/env.c
+@@ -251,7 +251,7 @@
+ 			if (strncmp (*cur, *bad, strlen (*bad)) != 0) {
+ 				continue;
+ 			}
+-			if (strchr (*cur, '/') != NULL) {
++			if (strchr (*cur, '/') == NULL) {
+ 				continue;	/* OK */
+ 			}
+ 			for (move = cur; NULL != *move; move++) {
diff --git a/sys-apps/shadow/files/shadow-4.1.4.2-fix-etc-gshadow-reading.patch b/sys-apps/shadow/files/shadow-4.1.4.2-fix-etc-gshadow-reading.patch
new file mode 100644
index 0000000..f8025a0
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.1.4.2-fix-etc-gshadow-reading.patch
@@ -0,0 +1,27 @@
+http://bugs.debian.org/569899
+http://bugs.gentoo.org/327605
+
+buf is not an array, it's a static pointer, so we have to use buflen
+
+--- lib/gshadow.c
++++ lib/gshadow.c
+@@ -222,6 +222,7 @@
+ 		if (NULL == buf) {
+ 			return NULL;
+ 		}
++		buflen = BUFSIZ;
+ 	}
+ 
+ 	if (NULL == fp) {
+@@ -229,9 +230,9 @@
+ 	}
+ 
+ #ifdef	USE_NIS
+-	while (fgetsx (buf, (int) sizeof buf, fp) == buf)
++	while (fgetsx (buf, buflen, fp) == buf)
+ #else
+-	if (fgetsx (buf, (int) sizeof buf, fp) == buf)
++	if (fgetsx (buf, buflen, fp) == buf)
+ #endif
+ 	{
+ 		while (   ((cp = strrchr (buf, '\n')) == NULL)
diff --git a/sys-apps/shadow/files/shadow-4.1.4.2-groupmod-pam-check.patch b/sys-apps/shadow/files/shadow-4.1.4.2-groupmod-pam-check.patch
new file mode 100644
index 0000000..f25c4e1
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.1.4.2-groupmod-pam-check.patch
@@ -0,0 +1,21 @@
+http://bugs.gentoo.org/300790
+http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/2009-November/007850.html
+
+2009-11-05  Nicolas François  <nicolas.francois@centraliens.net>
+
+	* NEWS, src/groupmod.c: Fixed groupmod when configured with
+	--enable-account-tools-setuid.
+
+diff --git a/src/groupmod.c b/src/groupmod.c
+index 4205df2..da6d77f 100644
+--- a/src/groupmod.c
++++ b/src/groupmod.c
+@@ -724,7 +724,7 @@ int main (int argc, char **argv)
+ 	{
+ 		struct passwd *pampw;
+ 		pampw = getpwuid (getuid ()); /* local, no need for xgetpwuid */
+-		if (NULL == pamh) {
++		if (NULL == pampw) {
+ 			fprintf (stderr,
+ 			         _("%s: Cannot determine your user name.\n"),
+ 			         Prog);
diff --git a/sys-apps/shadow/files/shadow-4.1.4.2-su_no_sanitize_env.patch b/sys-apps/shadow/files/shadow-4.1.4.2-su_no_sanitize_env.patch
new file mode 100644
index 0000000..0cf74f8
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.1.4.2-su_no_sanitize_env.patch
@@ -0,0 +1,14 @@
+http://bugs.gentoo.org/show_bug.cgi?id=301957
+https://alioth.debian.org/scm/browser.php?group_id=30580
+
+--- a/src/su.c
++++ b/src/su.c
+@@ -342,7 +342,7 @@
+ #endif
+ #endif				/* !USE_PAM */
+ 
+-	sanitize_env ();
++	/* sanitize_env (); */
+ 
+ 	(void) setlocale (LC_ALL, "");
+ 	(void) bindtextdomain (PACKAGE, LOCALEDIR);
diff --git a/sys-apps/shadow/files/shadow-4.1.4.3-dup-install-targets.patch b/sys-apps/shadow/files/shadow-4.1.4.3-dup-install-targets.patch
new file mode 100644
index 0000000..6452d17
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.1.4.3-dup-install-targets.patch
@@ -0,0 +1,15 @@
+the Makefile.am manualy adds man_nopam to the install list, and then also
+optionally appends it which leads to the `install` error:
+	... will not overwrite just-created ...
+
+--- shadow-4.1.4.3/man/ru/Makefile.in
++++ shadow-4.1.4.3/man/ru/Makefile.in
+@@ -222,7 +222,7 @@
+ top_build_prefix = @top_build_prefix@
+ top_builddir = @top_builddir@
+ top_srcdir = @top_srcdir@
+-man_MANS = $(man_nopam) chage.1 chfn.1 chgpasswd.8 chpasswd.8 chsh.1 \
++man_MANS = chage.1 chfn.1 chgpasswd.8 chpasswd.8 chsh.1 \
+ 	expiry.1 faillog.5 faillog.8 getspnam.3 gpasswd.1 groupadd.8 \
+ 	groupdel.8 groupmems.8 groupmod.8 groups.1 grpck.8 grpconv.8 \
+ 	grpunconv.8 gshadow.5 lastlog.8 login.1 login.defs.5 logoutd.8 \
diff --git a/sys-apps/shadow/files/shadow-4.1.5-grremove.patch b/sys-apps/shadow/files/shadow-4.1.5-grremove.patch
new file mode 100644
index 0000000..96062ae
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.1.5-grremove.patch
@@ -0,0 +1,49 @@
+https://bugs.gentoo.org/405409
+
+http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/2012-February/009159.html
+http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/2012-March/009196.html
+
+--- shadow-4.1.5/src/userdel.c
++++ shadow-4.1.5/src/userdel.c
+@@ -333,22 +333,22 @@ static void remove_usergroup (void)
+ 		 * We can remove this group, it is not the primary
+ 		 * group of any remaining user.
+ 		 */
+-		if (gr_remove (grp->gr_name) == 0) {
++		if (gr_remove (user_name) == 0) {
+ 			fprintf (stderr,
+ 			         _("%s: cannot remove entry '%s' from %s\n"),
+-			         Prog, grp->gr_name, gr_dbname ());
++			         Prog, user_name, gr_dbname ());
+ 			fail_exit (E_GRP_UPDATE);
+ 		}
+ 
+ #ifdef WITH_AUDIT
+ 		audit_logger (AUDIT_DEL_GROUP, Prog,
+ 		              "deleting group",
+-		              grp->gr_name, AUDIT_NO_ID,
++		              user_name, AUDIT_NO_ID,
+ 		              SHADOW_AUDIT_SUCCESS);
+ #endif				/* WITH_AUDIT */
+ 		SYSLOG ((LOG_INFO,
+ 		         "removed group '%s' owned by '%s'\n",
+-		         grp->gr_name, user_name));
++		         user_name, user_name));
+ 
+ #ifdef	SHADOWGRP
+ 		if (sgr_locate (user_name) != NULL) {
+@@ -361,12 +361,12 @@ static void remove_usergroup (void)
+ #ifdef WITH_AUDIT
+ 			audit_logger (AUDIT_DEL_GROUP, Prog,
+ 			              "deleting shadow group",
+-			              grp->gr_name, AUDIT_NO_ID,
++			              user_name, AUDIT_NO_ID,
+ 			              SHADOW_AUDIT_SUCCESS);
+ #endif				/* WITH_AUDIT */
+ 			SYSLOG ((LOG_INFO,
+ 			         "removed shadow group '%s' owned by '%s'\n",
+-			         grp->gr_name, user_name));
++			         user_name, user_name));
+ 
+ 		}
+ #endif				/* SHADOWGRP */
diff --git a/sys-apps/shadow/files/shadow-4.1.5-nscd-ignore-exit-1.patch b/sys-apps/shadow/files/shadow-4.1.5-nscd-ignore-exit-1.patch
new file mode 100644
index 0000000..49f75e0
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.1.5-nscd-ignore-exit-1.patch
@@ -0,0 +1,30 @@
+From 357ff92218a68f2ea74b9d08867c662571012bbe Mon Sep 17 00:00:00 2001
+From: Mike Frysinger <vapier@gentoo.org>
+Date: Sun, 12 Feb 2012 23:37:04 -0500
+Subject: [PATCH 3/3] nscd: ignore exit 1 code
+
+If nscd is installed but not in use, then running `nscd -i` will exit(1).
+We shouldn't warn in this case since this is not abnormal behavior.
+
+Signed-off-by: Mike Frysinger <vapier@gentoo.org>
+---
+ lib/nscd.c |    3 +++
+ 1 files changed, 3 insertions(+), 0 deletions(-)
+
+diff --git a/lib/nscd.c b/lib/nscd.c
+index ea1dc55..7adb58f 100644
+--- a/lib/nscd.c
++++ b/lib/nscd.c
+@@ -39,6 +39,9 @@ int nscd_flush_cache (const char *service)
+ 		/* nscd is not installed, or it is installed but uses an
+ 		   interpreter that is missing.  Probably the former. */
+ 		return 0;
++	} else if (code == 1) {
++		/* nscd is installed, but it isn't active. */
++		return 0;
+ 	} else if (code != 0) {
+ 		(void) fprintf (stderr, _("%s: nscd exited with status %d\n"),
+ 		                Prog, code);
+-- 
+1.7.8.4
+
diff --git a/sys-apps/shadow/files/shadow-4.1.5-nscd-newline-msg.patch b/sys-apps/shadow/files/shadow-4.1.5-nscd-newline-msg.patch
new file mode 100644
index 0000000..2df107f
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.1.5-nscd-newline-msg.patch
@@ -0,0 +1,38 @@
+From 360351b9b99bba0a278923c4237d158cbd726df5 Mon Sep 17 00:00:00 2001
+From: Mike Frysinger <vapier@gentoo.org>
+Date: Sun, 12 Feb 2012 23:08:42 -0500
+Subject: [PATCH 1/3] nscd: add missing newline to warning msg
+
+Trying to run `passwd` without nscd running shows the messages:
+...
+Re-enter new password:
+passwd: nscd exited with status 1passwd: Failed to flush the nscd cache.
+passwd: nscd exited with status 1passwd: Failed to flush the nscd cache.
+passwd: nscd exited with status 1passwd: Failed to flush the nscd cache.
+passwd: nscd exited with status 1passwd: Failed to flush the nscd cache.
+passwd: password changed.
+...
+
+You can see the status message missing a newline, so add it.
+
+Signed-off-by: Mike Frysinger <vapier@gentoo.org>
+---
+ lib/nscd.c |    2 +-
+ 1 files changed, 1 insertions(+), 1 deletions(-)
+
+diff --git a/lib/nscd.c b/lib/nscd.c
+index 227c205..ea1dc55 100644
+--- a/lib/nscd.c
++++ b/lib/nscd.c
+@@ -40,7 +40,7 @@ int nscd_flush_cache (const char *service)
+ 		   interpreter that is missing.  Probably the former. */
+ 		return 0;
+ 	} else if (code != 0) {
+-		(void) fprintf (stderr, _("%s: nscd exited with status %d"),
++		(void) fprintf (stderr, _("%s: nscd exited with status %d\n"),
+ 		                Prog, code);
+ 		(void) fprintf (stderr, _(MSG_NSCD_FLUSH_CACHE_FAILED), Prog);
+ 		return -1;
+-- 
+1.7.8.4
+
diff --git a/sys-apps/shadow/files/shadow-4.1.5-selinux-groupadd.patch b/sys-apps/shadow/files/shadow-4.1.5-selinux-groupadd.patch
new file mode 100644
index 0000000..5a95c0f
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.1.5-selinux-groupadd.patch
@@ -0,0 +1,32 @@
+http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/2012-March/009205.html
+
+https://bugs.gentoo.org/406819
+
+--- shadow-4.1.5/lib/commonio.c
++++ shadow-4.1.5/lib/commonio.c
+@@ -977,6 +977,12 @@ int commonio_close (struct commonio_db *
+ 
+ 	snprintf (buf, sizeof buf, "%s+", db->filename);
+ 
++#ifdef WITH_SELINUX
++	if (set_selinux_file_context (buf) != 0) {
++		errors++;
++	}
++#endif
++
+ 	db->fp = fopen_set_perms (buf, "w", &sb);
+ 	if (NULL == db->fp) {
+ 		goto fail;
+@@ -1011,6 +1017,12 @@ int commonio_close (struct commonio_db *
+ 		goto fail;
+ 	}
+ 
++#ifdef WITH_SELINUX
++	if (reset_selinux_file_context () != 0) {
++		goto fail;
++	}
++#endif
++
+ 	nscd_need_reload = true;
+ 	goto success;
+       fail:
diff --git a/sys-apps/shadow/files/shadow-4.1.5-stdarg.patch b/sys-apps/shadow/files/shadow-4.1.5-stdarg.patch
new file mode 100644
index 0000000..4ed370c
--- /dev/null
+++ b/sys-apps/shadow/files/shadow-4.1.5-stdarg.patch
@@ -0,0 +1,37 @@
+From 04d19a920ea0cf74f977006e3f8241bf77cbc16b Mon Sep 17 00:00:00 2001
+From: Mike Frysinger <vapier@gentoo.org>
+Date: Sun, 12 Feb 2012 22:41:05 -0500
+Subject: [PATCH] copydir: include stdarg.h for va_* funcs
+
+Building on newer systems fails due to using stdargs but not including
+the header file:
+
+copydir.c: In function 'error_acl':
+copydir.c:126:2: warning: implicit declaration of function 'va_start' [-Wimplicit-function-declaration]
+copydir.c:132:2: warning: implicit declaration of function 'va_end' [-Wimplicit-function-declaration]
+...
+libmisc/copydir.c:126: undefined reference to 'va_start'
+libmisc/copydir.c:132: undefined reference to 'va_end'
+...
+make[2]: *** [useradd] Error 1
+
+Signed-off-by: Mike Frysinger <vapier@gentoo.org>
+---
+ libmisc/copydir.c |    1 +
+ 1 files changed, 1 insertions(+), 0 deletions(-)
+
+diff --git a/libmisc/copydir.c b/libmisc/copydir.c
+index 7cb5f56..c6cbe6b 100644
+--- a/libmisc/copydir.c
++++ b/libmisc/copydir.c
+@@ -40,6 +40,7 @@
+ #include <sys/time.h>
+ #include <fcntl.h>
+ #include <stdio.h>
++#include <stdarg.h>
+ #include "prototypes.h"
+ #include "defines.h"
+ #ifdef WITH_SELINUX
+-- 
+1.7.8.4
+
diff --git a/sys-apps/shadow/metadata.xml b/sys-apps/shadow/metadata.xml
new file mode 100644
index 0000000..5979227
--- /dev/null
+++ b/sys-apps/shadow/metadata.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+<herd>base-system</herd>
+<herd>pam</herd> <!-- only for USE=pam -->
+<use>
+ <flag name='audit'>Enable support for <pkg>sys-process/audit</pkg></flag>
+</use>
+<upstream>
+ <remote-id type="cpe">cpe:/a:debian:shadow</remote-id>
+</upstream>
+</pkgmetadata>
diff --git a/sys-apps/shadow/shadow-4.1.4.2-r6.ebuild b/sys-apps/shadow/shadow-4.1.4.2-r6.ebuild
new file mode 100644
index 0000000..c12a1b0
--- /dev/null
+++ b/sys-apps/shadow/shadow-4.1.4.2-r6.ebuild
@@ -0,0 +1,193 @@
+# Copyright 1999-2011 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.1.4.2-r6.ebuild,v 1.9 2011/09/03 09:13:57 scarabeus Exp $
+
+inherit eutils libtool toolchain-funcs pam multilib
+
+DESCRIPTION="Utilities to deal with user accounts"
+HOMEPAGE="http://shadow.pld.org.pl/ http://pkg-shadow.alioth.debian.org/"
+SRC_URI="http://pkg-shadow.alioth.debian.org/releases/${P}.tar.bz2"
+
+LICENSE="BSD GPL-2"
+SLOT="0"
+KEYWORDS="alpha amd64 arm hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86"
+IUSE="audit cracklib nls pam selinux skey"
+
+RDEPEND="audit? ( sys-process/audit )
+	cracklib? ( >=sys-libs/cracklib-2.7-r3 )
+	pam? ( virtual/pam )
+	skey? ( sys-auth/skey )
+	selinux? ( >=sys-libs/libselinux-1.28 )
+	nls? ( virtual/libintl )"
+DEPEND="${RDEPEND}
+	nls? ( sys-devel/gettext )"
+RDEPEND="${RDEPEND}
+	pam? ( >=sys-auth/pambase-20080219.1 )"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+	epatch "${FILESDIR}"/${PN}-4.1.4.2-env-reset-keep-locale.patch #283725
+	epatch "${FILESDIR}"/${PN}-4.1.3-dots-in-usernames.patch #22920
+	epatch "${FILESDIR}"/${PN}-4.1.4.2-groupmod-pam-check.patch #300790
+	epatch "${FILESDIR}"/${PN}-4.1.4.2-su_no_sanitize_env.patch #301957
+	epatch "${FILESDIR}"/${PN}-4.1.4.2-fix-etc-gshadow-reading.patch #327605
+	elibtoolize
+	epunt_cxx
+}
+
+src_compile() {
+	tc-is-cross-compiler && export ac_cv_func_setpgrp_void=yes
+	econf \
+		--without-group-name-max-length \
+		--enable-shared=no \
+		--enable-static=yes \
+		$(use_with audit) \
+		$(use_with cracklib libcrack) \
+		$(use_with pam libpam) \
+		$(use_with skey) \
+		$(use_with selinux) \
+		$(use_enable nls) \
+		$(use_with elibc_glibc nscd)
+	emake || die "compile problem"
+}
+
+set_login_opt() {
+	local comment="" opt=$1 val=$2
+	[[ -z ${val} ]] && comment="#"
+	sed -i -r \
+		-e "/^#?${opt}/s:.*:${comment}${opt} ${val}:" \
+		"${D}"/etc/login.defs
+	local res=$(grep "^${comment}${opt}" "${D}"/etc/login.defs)
+	einfo ${res:-Unable to find ${opt} in /etc/login.defs}
+}
+
+src_install() {
+	emake DESTDIR="${D}" suidperms=4711 install || die "install problem"
+
+	# Remove libshadow and libmisc; see bug 37725 and the following
+	# comment from shadow's README.linux:
+	#   Currently, libshadow.a is for internal use only, so if you see
+	#   -lshadow in a Makefile of some other package, it is safe to
+	#   remove it.
+	rm -f "${D}"/{,usr/}$(get_libdir)/lib{misc,shadow}.{a,la}
+
+	insinto /etc
+	# Using a securetty with devfs device names added
+	# (compat names kept for non-devfs compatibility)
+	insopts -m0600 ; doins "${FILESDIR}"/securetty
+	if ! use pam ; then
+		insopts -m0600
+		doins etc/login.access etc/limits
+	fi
+	# Output arch-specific cruft
+	local devs
+	case $(tc-arch) in
+		ppc*)  devs="hvc0 hvsi0 ttyPSC0";;
+		hppa)  devs="ttyB0";;
+		arm)   devs="ttyFB0";;
+		sh)    devs="ttySC0 ttySC1";;
+	esac
+	[[ -n ${devs} ]] && printf '%s\n' ${devs} >> "${D}"/etc/securetty
+
+	# needed for 'useradd -D'
+	insinto /etc/default
+	insopts -m0600
+	doins "${FILESDIR}"/default/useradd
+
+	# move passwd to / to help recover broke systems #64441
+	mv "${D}"/usr/bin/passwd "${D}"/bin/
+	dosym /bin/passwd /usr/bin/passwd
+
+	cd "${S}"
+	insinto /etc
+	insopts -m0644
+	newins etc/login.defs login.defs
+
+	if ! use pam ; then
+		set_login_opt MAIL_CHECK_ENAB no
+		set_login_opt SU_WHEEL_ONLY yes
+		set_login_opt CRACKLIB_DICTPATH /usr/$(get_libdir)/cracklib_dict
+		set_login_opt LOGIN_RETRIES 3
+		set_login_opt ENCRYPT_METHOD SHA512
+	else
+		dopamd "${FILESDIR}/pam.d-include/"{su,shadow}
+
+		newpamd "${FILESDIR}/login.pamd.3" login
+
+		for x in passwd chpasswd chgpasswd; do
+			newpamd "${FILESDIR}"/pam.d-include/passwd ${x} || die
+		done
+
+		for x in chage chsh chfn newusers \
+				 user{add,del,mod} group{add,del,mod} ; do
+			newpamd "${FILESDIR}"/pam.d-include/shadow ${x} || die
+		done
+
+		# comment out login.defs options that pam hates
+		local opt
+		for opt in \
+			CHFN_AUTH \
+			CRACKLIB_DICTPATH \
+			ENV_HZ \
+			ENVIRON_FILE \
+			FAILLOG_ENAB \
+			FTMP_FILE \
+			LASTLOG_ENAB \
+			MAIL_CHECK_ENAB \
+			MOTD_FILE \
+			NOLOGINS_FILE \
+			OBSCURE_CHECKS_ENAB \
+			PASS_ALWAYS_WARN \
+			PASS_CHANGE_TRIES \
+			PASS_MIN_LEN \
+			PORTTIME_CHECKS_ENAB \
+			QUOTAS_ENAB \
+			SU_WHEEL_ONLY
+		do
+			set_login_opt ${opt}
+		done
+
+		sed -i -f "${FILESDIR}"/login_defs_pam.sed \
+			"${D}"/etc/login.defs
+
+		# remove manpages that pam will install for us
+		# and/or don't apply when using pam
+		find "${D}"/usr/share/man \
+			'(' -name 'limits.5*' -o -name 'suauth.5*' ')' \
+			-exec rm {} +
+	fi
+
+	# Remove manpages that are handled by other packages
+	find "${D}"/usr/share/man \
+		'(' -name id.1 -o -name passwd.5 -o -name getspnam.3 ')' \
+		-exec rm {} +
+
+	cd "${S}"
+	dodoc ChangeLog NEWS TODO
+	newdoc README README.download
+	cd doc
+	dodoc HOWTO README* WISHLIST *.txt
+}
+
+pkg_preinst() {
+	rm -f "${ROOT}"/etc/pam.d/system-auth.new \
+		"${ROOT}/etc/login.defs.new"
+
+	use pam && pam_epam_expand "${D}"/etc/pam.d/login
+}
+
+pkg_postinst() {
+	# Enable shadow groups (we need ROOT=/ here, as grpconv only
+	# operate on / ...).
+	if [[ ${ROOT} == / && ! -f /etc/gshadow ]] ; then
+		if grpck -r 2>/dev/null ; then
+			grpconv
+		else
+			ewarn "Running 'grpck' returned errors.  Please run it by hand, and then"
+			ewarn "run 'grpconv' afterwards!"
+		fi
+	fi
+
+	einfo "The 'adduser' symlink to 'useradd' has been dropped."
+}
diff --git a/sys-apps/shadow/shadow-4.1.4.3.ebuild b/sys-apps/shadow/shadow-4.1.4.3.ebuild
new file mode 100644
index 0000000..89ff721
--- /dev/null
+++ b/sys-apps/shadow/shadow-4.1.4.3.ebuild
@@ -0,0 +1,193 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.1.4.3.ebuild,v 1.15 2013/03/12 14:19:37 vapier Exp $
+
+inherit eutils libtool toolchain-funcs pam multilib
+
+DESCRIPTION="Utilities to deal with user accounts"
+HOMEPAGE="http://shadow.pld.org.pl/ http://pkg-shadow.alioth.debian.org/"
+SRC_URI="http://pkg-shadow.alioth.debian.org/releases/${P}.tar.bz2"
+
+LICENSE="BSD GPL-2"
+SLOT="0"
+KEYWORDS="alpha amd64 arm hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86"
+IUSE="audit cracklib nls pam selinux skey"
+
+RDEPEND="audit? ( sys-process/audit )
+	cracklib? ( >=sys-libs/cracklib-2.7-r3 )
+	pam? ( virtual/pam )
+	skey? ( sys-auth/skey )
+	selinux? ( >=sys-libs/libselinux-1.28 )
+	nls? ( virtual/libintl )"
+DEPEND="${RDEPEND}
+	nls? ( sys-devel/gettext )"
+RDEPEND="${RDEPEND}
+	pam? ( >=sys-auth/pambase-20080219.1 )"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+	epatch "${FILESDIR}"/${PN}-4.1.4.3-dup-install-targets.patch
+	epatch "${FILESDIR}"/${PN}-4.1.4.2-env-reset-keep-locale.patch #283725
+	epatch "${FILESDIR}"/${PN}-4.1.3-dots-in-usernames.patch #22920
+	epatch "${FILESDIR}"/${PN}-4.1.4.2-groupmod-pam-check.patch #300790
+	epatch "${FILESDIR}"/${PN}-4.1.4.2-su_no_sanitize_env.patch #301957
+	epatch "${FILESDIR}"/${PN}-4.1.4.2-fix-etc-gshadow-reading.patch #327605
+	elibtoolize
+}
+
+src_compile() {
+	tc-is-cross-compiler && export ac_cv_func_setpgrp_void=yes
+	econf \
+		--without-group-name-max-length \
+		--enable-shared=no \
+		--enable-static=yes \
+		$(use_with audit) \
+		$(use_with cracklib libcrack) \
+		$(use_with pam libpam) \
+		$(use_with skey) \
+		$(use_with selinux) \
+		$(use_enable nls) \
+		$(use_with elibc_glibc nscd)
+	emake || die "compile problem"
+}
+
+set_login_opt() {
+	local comment="" opt=$1 val=$2
+	[[ -z ${val} ]] && comment="#"
+	sed -i -r \
+		-e "/^#?${opt}/s:.*:${comment}${opt} ${val}:" \
+		"${D}"/etc/login.defs
+	local res=$(grep "^${comment}${opt}" "${D}"/etc/login.defs)
+	einfo ${res:-Unable to find ${opt} in /etc/login.defs}
+}
+
+src_install() {
+	emake DESTDIR="${D}" suidperms=4711 install || die "install problem"
+
+	# Remove libshadow and libmisc; see bug 37725 and the following
+	# comment from shadow's README.linux:
+	#   Currently, libshadow.a is for internal use only, so if you see
+	#   -lshadow in a Makefile of some other package, it is safe to
+	#   remove it.
+	rm -f "${D}"/{,usr/}$(get_libdir)/lib{misc,shadow}.{a,la}
+
+	insinto /etc
+	# Using a securetty with devfs device names added
+	# (compat names kept for non-devfs compatibility)
+	insopts -m0600 ; doins "${FILESDIR}"/securetty
+	if ! use pam ; then
+		insopts -m0600
+		doins etc/login.access etc/limits
+	fi
+	# Output arch-specific cruft
+	local devs
+	case $(tc-arch) in
+		ppc*)  devs="hvc0 hvsi0 ttyPSC0";;
+		hppa)  devs="ttyB0";;
+		arm)   devs="ttyFB0 ttySAC0 ttySAC1 ttySAC2 ttySAC3 ttymxc0 ttymxc1 ttyO0 ttyO1 ttyO2";;
+		sh)    devs="ttySC0 ttySC1";;
+	esac
+	[[ -n ${devs} ]] && printf '%s\n' ${devs} >> "${D}"/etc/securetty
+
+	# needed for 'useradd -D'
+	insinto /etc/default
+	insopts -m0600
+	doins "${FILESDIR}"/default/useradd
+
+	# move passwd to / to help recover broke systems #64441
+	mv "${D}"/usr/bin/passwd "${D}"/bin/
+	dosym /bin/passwd /usr/bin/passwd
+
+	cd "${S}"
+	insinto /etc
+	insopts -m0644
+	newins etc/login.defs login.defs
+
+	if ! use pam ; then
+		set_login_opt MAIL_CHECK_ENAB no
+		set_login_opt SU_WHEEL_ONLY yes
+		set_login_opt CRACKLIB_DICTPATH /usr/$(get_libdir)/cracklib_dict
+		set_login_opt LOGIN_RETRIES 3
+		set_login_opt ENCRYPT_METHOD SHA512
+	else
+		dopamd "${FILESDIR}/pam.d-include/"{su,shadow}
+
+		newpamd "${FILESDIR}/login.pamd.3" login
+
+		for x in passwd chpasswd chgpasswd; do
+			newpamd "${FILESDIR}"/pam.d-include/passwd ${x} || die
+		done
+
+		for x in chage chsh chfn newusers \
+				 user{add,del,mod} group{add,del,mod} ; do
+			newpamd "${FILESDIR}"/pam.d-include/shadow ${x} || die
+		done
+
+		# comment out login.defs options that pam hates
+		local opt
+		for opt in \
+			CHFN_AUTH \
+			CRACKLIB_DICTPATH \
+			ENV_HZ \
+			ENVIRON_FILE \
+			FAILLOG_ENAB \
+			FTMP_FILE \
+			LASTLOG_ENAB \
+			MAIL_CHECK_ENAB \
+			MOTD_FILE \
+			NOLOGINS_FILE \
+			OBSCURE_CHECKS_ENAB \
+			PASS_ALWAYS_WARN \
+			PASS_CHANGE_TRIES \
+			PASS_MIN_LEN \
+			PORTTIME_CHECKS_ENAB \
+			QUOTAS_ENAB \
+			SU_WHEEL_ONLY
+		do
+			set_login_opt ${opt}
+		done
+
+		sed -i -f "${FILESDIR}"/login_defs_pam.sed \
+			"${D}"/etc/login.defs
+
+		# remove manpages that pam will install for us
+		# and/or don't apply when using pam
+		find "${D}"/usr/share/man \
+			'(' -name 'limits.5*' -o -name 'suauth.5*' ')' \
+			-exec rm {} +
+	fi
+
+	# Remove manpages that are handled by other packages
+	find "${D}"/usr/share/man \
+		'(' -name id.1 -o -name passwd.5 -o -name getspnam.3 ')' \
+		-exec rm {} +
+
+	cd "${S}"
+	dodoc ChangeLog NEWS TODO
+	newdoc README README.download
+	cd doc
+	dodoc HOWTO README* WISHLIST *.txt
+}
+
+pkg_preinst() {
+	rm -f "${ROOT}"/etc/pam.d/system-auth.new \
+		"${ROOT}/etc/login.defs.new"
+
+	use pam && pam_epam_expand "${D}"/etc/pam.d/login
+}
+
+pkg_postinst() {
+	# Enable shadow groups (we need ROOT=/ here, as grpconv only
+	# operate on / ...).
+	if [[ ${ROOT} == / && ! -f /etc/gshadow ]] ; then
+		if grpck -r 2>/dev/null ; then
+			grpconv
+		else
+			ewarn "Running 'grpck' returned errors.  Please run it by hand, and then"
+			ewarn "run 'grpconv' afterwards!"
+		fi
+	fi
+
+	einfo "The 'adduser' symlink to 'useradd' has been dropped."
+}
diff --git a/sys-apps/shadow/shadow-4.1.5-r1.ebuild b/sys-apps/shadow/shadow-4.1.5-r1.ebuild
new file mode 100644
index 0000000..d675951
--- /dev/null
+++ b/sys-apps/shadow/shadow-4.1.5-r1.ebuild
@@ -0,0 +1,196 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.1.5-r1.ebuild,v 1.5 2013/03/12 14:19:37 vapier Exp $
+
+inherit eutils libtool toolchain-funcs pam multilib
+
+DESCRIPTION="Utilities to deal with user accounts"
+HOMEPAGE="http://shadow.pld.org.pl/ http://pkg-shadow.alioth.debian.org/"
+SRC_URI="http://pkg-shadow.alioth.debian.org/releases/${P}.tar.bz2"
+
+LICENSE="BSD GPL-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE="acl audit cracklib nls pam selinux skey xattr"
+
+RDEPEND="acl? ( sys-apps/acl )
+	audit? ( sys-process/audit )
+	cracklib? ( >=sys-libs/cracklib-2.7-r3 )
+	pam? ( virtual/pam )
+	skey? ( sys-auth/skey )
+	selinux? ( >=sys-libs/libselinux-1.28 )
+	nls? ( virtual/libintl )
+	xattr? ( sys-apps/attr )"
+DEPEND="${RDEPEND}
+	nls? ( sys-devel/gettext )"
+RDEPEND="${RDEPEND}
+	pam? ( >=sys-auth/pambase-20120417 )"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+	epatch "${FILESDIR}"/${PN}-4.1.3-dots-in-usernames.patch #22920
+	epatch "${FILESDIR}"/${PN}-4.1.5-stdarg.patch
+	epatch "${FILESDIR}"/${PN}-4.1.5-nscd-newline-msg.patch
+	epatch "${FILESDIR}"/${PN}-4.1.5-nscd-ignore-exit-1.patch
+	elibtoolize
+}
+
+src_compile() {
+	tc-is-cross-compiler && export ac_cv_func_setpgrp_void=yes
+	econf \
+		--without-group-name-max-length \
+		--without-tcb \
+		--enable-shared=no \
+		--enable-static=yes \
+		$(use_with acl) \
+		$(use_with audit) \
+		$(use_with cracklib libcrack) \
+		$(use_with pam libpam) \
+		$(use_with skey) \
+		$(use_with selinux) \
+		$(use_enable nls) \
+		$(use_with elibc_glibc nscd) \
+		$(use_with xattr attr)
+	emake || die
+}
+
+set_login_opt() {
+	local comment="" opt=$1 val=$2
+	[[ -z ${val} ]] && comment="#"
+	sed -i -r \
+		-e "/^#?${opt}/s:.*:${comment}${opt} ${val}:" \
+		"${D}"/etc/login.defs
+	local res=$(grep "^${comment}${opt}" "${D}"/etc/login.defs)
+	einfo ${res:-Unable to find ${opt} in /etc/login.defs}
+}
+
+src_install() {
+	emake DESTDIR="${D}" suidperms=4711 install || die
+
+	# Remove libshadow and libmisc; see bug 37725 and the following
+	# comment from shadow's README.linux:
+	#   Currently, libshadow.a is for internal use only, so if you see
+	#   -lshadow in a Makefile of some other package, it is safe to
+	#   remove it.
+	rm -f "${D}"/{,usr/}$(get_libdir)/lib{misc,shadow}.{a,la}
+
+	insinto /etc
+	# Using a securetty with devfs device names added
+	# (compat names kept for non-devfs compatibility)
+	insopts -m0600 ; doins "${FILESDIR}"/securetty
+	if ! use pam ; then
+		insopts -m0600
+		doins etc/login.access etc/limits
+	fi
+	# Output arch-specific cruft
+	local devs
+	case $(tc-arch) in
+		ppc*)  devs="hvc0 hvsi0 ttyPSC0";;
+		hppa)  devs="ttyB0";;
+		arm)   devs="ttyFB0 ttySAC0 ttySAC1 ttySAC2 ttySAC3 ttymxc0 ttymxc1 ttyO0 ttyO1 ttyO2";;
+		sh)    devs="ttySC0 ttySC1";;
+	esac
+	[[ -n ${devs} ]] && printf '%s\n' ${devs} >> "${D}"/etc/securetty
+
+	# needed for 'useradd -D'
+	insinto /etc/default
+	insopts -m0600
+	doins "${FILESDIR}"/default/useradd
+
+	# move passwd to / to help recover broke systems #64441
+	mv "${D}"/usr/bin/passwd "${D}"/bin/
+	dosym /bin/passwd /usr/bin/passwd
+
+	cd "${S}"
+	insinto /etc
+	insopts -m0644
+	newins etc/login.defs login.defs
+
+	if ! use pam ; then
+		set_login_opt MAIL_CHECK_ENAB no
+		set_login_opt SU_WHEEL_ONLY yes
+		set_login_opt CRACKLIB_DICTPATH /usr/$(get_libdir)/cracklib_dict
+		set_login_opt LOGIN_RETRIES 3
+		set_login_opt ENCRYPT_METHOD SHA512
+	else
+		dopamd "${FILESDIR}"/pam.d-include/shadow || die
+
+		for x in chpasswd chgpasswd; do
+			newpamd "${FILESDIR}"/pam.d-include/passwd ${x} || die
+		done
+
+		for x in chage chsh chfn newusers \
+				 user{add,del,mod} group{add,del,mod} ; do
+			newpamd "${FILESDIR}"/pam.d-include/shadow ${x} || die
+		done
+
+		# comment out login.defs options that pam hates
+		local opt
+		for opt in \
+			CHFN_AUTH \
+			CRACKLIB_DICTPATH \
+			ENV_HZ \
+			ENVIRON_FILE \
+			FAILLOG_ENAB \
+			FTMP_FILE \
+			LASTLOG_ENAB \
+			MAIL_CHECK_ENAB \
+			MOTD_FILE \
+			NOLOGINS_FILE \
+			OBSCURE_CHECKS_ENAB \
+			PASS_ALWAYS_WARN \
+			PASS_CHANGE_TRIES \
+			PASS_MIN_LEN \
+			PORTTIME_CHECKS_ENAB \
+			QUOTAS_ENAB \
+			SU_WHEEL_ONLY
+		do
+			set_login_opt ${opt}
+		done
+
+		sed -i -f "${FILESDIR}"/login_defs_pam.sed \
+			"${D}"/etc/login.defs
+
+		# remove manpages that pam will install for us
+		# and/or don't apply when using pam
+		find "${D}"/usr/share/man \
+			'(' -name 'limits.5*' -o -name 'suauth.5*' ')' \
+			-exec rm {} +
+
+		# Remove pam.d files provided by pambase.
+		rm "${D}"/etc/pam.d/{login,passwd,su} || die
+	fi
+
+	# Remove manpages that are handled by other packages
+	find "${D}"/usr/share/man \
+		'(' -name id.1 -o -name passwd.5 -o -name getspnam.3 ')' \
+		-exec rm {} +
+
+	cd "${S}"
+	dodoc ChangeLog NEWS TODO
+	newdoc README README.download
+	cd doc
+	dodoc HOWTO README* WISHLIST *.txt
+}
+
+pkg_preinst() {
+	rm -f "${ROOT}"/etc/pam.d/system-auth.new \
+		"${ROOT}/etc/login.defs.new"
+
+	use pam && pam_epam_expand "${D}"/etc/pam.d/login
+}
+
+pkg_postinst() {
+	# Enable shadow groups.
+	if [ ! -f "${ROOT}"/etc/gshadow ] ; then
+		if grpck -r -R "${ROOT}" 2>/dev/null ; then
+			grpconv -R "${ROOT}"
+		else
+			ewarn "Running 'grpck' returned errors.  Please run it by hand, and then"
+			ewarn "run 'grpconv' afterwards!"
+		fi
+	fi
+
+	einfo "The 'adduser' symlink to 'useradd' has been dropped."
+}
diff --git a/sys-apps/shadow/shadow-4.1.5-r2.ebuild b/sys-apps/shadow/shadow-4.1.5-r2.ebuild
new file mode 100644
index 0000000..0542403
--- /dev/null
+++ b/sys-apps/shadow/shadow-4.1.5-r2.ebuild
@@ -0,0 +1,201 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.1.5-r2.ebuild,v 1.5 2013/03/12 14:19:37 vapier Exp $
+
+inherit eutils libtool toolchain-funcs pam multilib
+
+DESCRIPTION="Utilities to deal with user accounts"
+HOMEPAGE="http://shadow.pld.org.pl/ http://pkg-shadow.alioth.debian.org/"
+SRC_URI="http://pkg-shadow.alioth.debian.org/releases/${P}.tar.bz2"
+
+LICENSE="BSD GPL-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE="acl audit cracklib nls pam selinux skey xattr"
+
+RDEPEND="acl? ( sys-apps/acl )
+	audit? ( sys-process/audit )
+	cracklib? ( >=sys-libs/cracklib-2.7-r3 )
+	pam? ( virtual/pam )
+	skey? ( sys-auth/skey )
+	selinux? (
+		>=sys-libs/libselinux-1.28
+		sys-libs/libsemanage
+	)
+	nls? ( virtual/libintl )
+	xattr? ( sys-apps/attr )"
+DEPEND="${RDEPEND}
+	nls? ( sys-devel/gettext )"
+RDEPEND="${RDEPEND}
+	pam? ( >=sys-auth/pambase-20120417 )"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+	epatch "${FILESDIR}"/${PN}-4.1.3-dots-in-usernames.patch #22920
+	epatch "${FILESDIR}"/${PN}-4.1.5-stdarg.patch
+	epatch "${FILESDIR}"/${PN}-4.1.5-nscd-newline-msg.patch
+	epatch "${FILESDIR}"/${PN}-4.1.5-nscd-ignore-exit-1.patch
+	epatch "${FILESDIR}"/${PN}-4.1.5-grremove.patch #405409
+	epatch "${FILESDIR}"/${PN}-4.1.5-selinux-groupadd.patch #406819
+	elibtoolize
+}
+
+src_compile() {
+	tc-is-cross-compiler && export ac_cv_func_setpgrp_void=yes
+	econf \
+		--without-group-name-max-length \
+		--without-tcb \
+		--enable-shared=no \
+		--enable-static=yes \
+		$(use_with acl) \
+		$(use_with audit) \
+		$(use_with cracklib libcrack) \
+		$(use_with pam libpam) \
+		$(use_with skey) \
+		$(use_with selinux) \
+		$(use_enable nls) \
+		$(use_with elibc_glibc nscd) \
+		$(use_with xattr attr)
+	emake || die
+}
+
+set_login_opt() {
+	local comment="" opt=$1 val=$2
+	[[ -z ${val} ]] && comment="#"
+	sed -i -r \
+		-e "/^#?${opt}/s:.*:${comment}${opt} ${val}:" \
+		"${D}"/etc/login.defs
+	local res=$(grep "^${comment}${opt}" "${D}"/etc/login.defs)
+	einfo ${res:-Unable to find ${opt} in /etc/login.defs}
+}
+
+src_install() {
+	emake DESTDIR="${D}" suidperms=4711 install || die
+
+	# Remove libshadow and libmisc; see bug 37725 and the following
+	# comment from shadow's README.linux:
+	#   Currently, libshadow.a is for internal use only, so if you see
+	#   -lshadow in a Makefile of some other package, it is safe to
+	#   remove it.
+	rm -f "${D}"/{,usr/}$(get_libdir)/lib{misc,shadow}.{a,la}
+
+	insinto /etc
+	# Using a securetty with devfs device names added
+	# (compat names kept for non-devfs compatibility)
+	insopts -m0600 ; doins "${FILESDIR}"/securetty
+	if ! use pam ; then
+		insopts -m0600
+		doins etc/login.access etc/limits
+	fi
+	# Output arch-specific cruft
+	local devs
+	case $(tc-arch) in
+		ppc*)  devs="hvc0 hvsi0 ttyPSC0";;
+		hppa)  devs="ttyB0";;
+		arm)   devs="ttyFB0 ttySAC0 ttySAC1 ttySAC2 ttySAC3 ttymxc0 ttymxc1 ttyO0 ttyO1 ttyO2";;
+		sh)    devs="ttySC0 ttySC1";;
+	esac
+	[[ -n ${devs} ]] && printf '%s\n' ${devs} >> "${D}"/etc/securetty
+
+	# needed for 'useradd -D'
+	insinto /etc/default
+	insopts -m0600
+	doins "${FILESDIR}"/default/useradd
+
+	# move passwd to / to help recover broke systems #64441
+	mv "${D}"/usr/bin/passwd "${D}"/bin/
+	dosym /bin/passwd /usr/bin/passwd
+
+	cd "${S}"
+	insinto /etc
+	insopts -m0644
+	newins etc/login.defs login.defs
+
+	if ! use pam ; then
+		set_login_opt MAIL_CHECK_ENAB no
+		set_login_opt SU_WHEEL_ONLY yes
+		set_login_opt CRACKLIB_DICTPATH /usr/$(get_libdir)/cracklib_dict
+		set_login_opt LOGIN_RETRIES 3
+		set_login_opt ENCRYPT_METHOD SHA512
+	else
+		dopamd "${FILESDIR}"/pam.d-include/shadow || die
+
+		for x in chpasswd chgpasswd; do
+			newpamd "${FILESDIR}"/pam.d-include/passwd ${x} || die
+		done
+
+		for x in chage chsh chfn newusers \
+				 user{add,del,mod} group{add,del,mod} ; do
+			newpamd "${FILESDIR}"/pam.d-include/shadow ${x} || die
+		done
+
+		# comment out login.defs options that pam hates
+		local opt
+		for opt in \
+			CHFN_AUTH \
+			CRACKLIB_DICTPATH \
+			ENV_HZ \
+			ENVIRON_FILE \
+			FAILLOG_ENAB \
+			FTMP_FILE \
+			LASTLOG_ENAB \
+			MAIL_CHECK_ENAB \
+			MOTD_FILE \
+			NOLOGINS_FILE \
+			OBSCURE_CHECKS_ENAB \
+			PASS_ALWAYS_WARN \
+			PASS_CHANGE_TRIES \
+			PASS_MIN_LEN \
+			PORTTIME_CHECKS_ENAB \
+			QUOTAS_ENAB \
+			SU_WHEEL_ONLY
+		do
+			set_login_opt ${opt}
+		done
+
+		sed -i -f "${FILESDIR}"/login_defs_pam.sed \
+			"${D}"/etc/login.defs
+
+		# remove manpages that pam will install for us
+		# and/or don't apply when using pam
+		find "${D}"/usr/share/man \
+			'(' -name 'limits.5*' -o -name 'suauth.5*' ')' \
+			-exec rm {} +
+
+		# Remove pam.d files provided by pambase.
+		rm "${D}"/etc/pam.d/{login,passwd,su} || die
+	fi
+
+	# Remove manpages that are handled by other packages
+	find "${D}"/usr/share/man \
+		'(' -name id.1 -o -name passwd.5 -o -name getspnam.3 ')' \
+		-exec rm {} +
+
+	cd "${S}"
+	dodoc ChangeLog NEWS TODO
+	newdoc README README.download
+	cd doc
+	dodoc HOWTO README* WISHLIST *.txt
+}
+
+pkg_preinst() {
+	rm -f "${ROOT}"/etc/pam.d/system-auth.new \
+		"${ROOT}/etc/login.defs.new"
+
+	use pam && pam_epam_expand "${D}"/etc/pam.d/login
+}
+
+pkg_postinst() {
+	# Enable shadow groups.
+	if [ ! -f "${ROOT}"/etc/gshadow ] ; then
+		if grpck -r -R "${ROOT}" 2>/dev/null ; then
+			grpconv -R "${ROOT}"
+		else
+			ewarn "Running 'grpck' returned errors.  Please run it by hand, and then"
+			ewarn "run 'grpconv' afterwards!"
+		fi
+	fi
+
+	einfo "The 'adduser' symlink to 'useradd' has been dropped."
+}
diff --git a/sys-apps/shadow/shadow-4.1.5.1-r1.ebuild b/sys-apps/shadow/shadow-4.1.5.1-r1.ebuild
new file mode 100644
index 0000000..965ea9d
--- /dev/null
+++ b/sys-apps/shadow/shadow-4.1.5.1-r1.ebuild
@@ -0,0 +1,196 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.1.5.1-r1.ebuild,v 1.14 2013/09/15 19:11:22 vapier Exp $
+
+EAPI="5"
+
+inherit eutils libtool toolchain-funcs pam multilib
+
+DESCRIPTION="Utilities to deal with user accounts"
+HOMEPAGE="http://shadow.pld.org.pl/ http://pkg-shadow.alioth.debian.org/"
+SRC_URI="http://pkg-shadow.alioth.debian.org/releases/${P}.tar.bz2"
+
+LICENSE="BSD GPL-2"
+SLOT="0"
+KEYWORDS="alpha amd64 arm hppa ia64 m68k ~mips ppc ppc64 s390 sh sparc x86"
+IUSE="acl audit cracklib nls pam selinux skey xattr"
+
+RDEPEND="acl? ( sys-apps/acl )
+	audit? ( sys-process/audit )
+	cracklib? ( >=sys-libs/cracklib-2.7-r3 )
+	pam? ( virtual/pam )
+	skey? ( sys-auth/skey )
+	selinux? (
+		>=sys-libs/libselinux-1.28
+		sys-libs/libsemanage
+	)
+	nls? ( virtual/libintl )
+	xattr? ( sys-apps/attr )"
+DEPEND="${RDEPEND}
+	nls? ( sys-devel/gettext )"
+RDEPEND="${RDEPEND}
+	pam? ( >=sys-auth/pambase-20120417 )"
+
+src_prepare() {
+	epatch "${FILESDIR}"/${PN}-4.1.3-dots-in-usernames.patch #22920
+	epatch_user
+	elibtoolize
+}
+
+src_configure() {
+	tc-is-cross-compiler && export ac_cv_func_setpgrp_void=yes
+	econf \
+		--exec-prefix="${EPREFIX}"
+		--without-group-name-max-length \
+		--without-tcb \
+		--enable-shared=no \
+		--enable-static=yes \
+		$(use_with acl) \
+		$(use_with audit) \
+		$(use_with cracklib libcrack) \
+		$(use_with pam libpam) \
+		$(use_with skey) \
+		$(use_with selinux) \
+		$(use_enable nls) \
+		$(use_with elibc_glibc nscd) \
+		$(use_with xattr attr)
+	has_version 'sys-libs/uclibc[-rpc]' && sed -i '/RLOGIN/d' config.h #425052
+}
+
+set_login_opt() {
+	local comment="" opt=$1 val=$2
+	[[ -z ${val} ]] && comment="#"
+	sed -i -r \
+		-e "/^#?${opt}/s:.*:${comment}${opt} ${val}:" \
+		"${ED}"/etc/login.defs
+	local res=$(grep "^${comment}${opt}" "${ED}"/etc/login.defs)
+	einfo ${res:-Unable to find ${opt} in /etc/login.defs}
+}
+
+src_install() {
+	emake DESTDIR="${D}" suidperms=4711 install
+
+	# Remove libshadow and libmisc; see bug 37725 and the following
+	# comment from shadow's README.linux:
+	#   Currently, libshadow.a is for internal use only, so if you see
+	#   -lshadow in a Makefile of some other package, it is safe to
+	#   remove it.
+	rm -f "${ED}"/{,usr/}$(get_libdir)/lib{misc,shadow}.{a,la}
+
+	insinto /etc
+	# Using a securetty with devfs device names added
+	# (compat names kept for non-devfs compatibility)
+	insopts -m0600 ; doins "${FILESDIR}"/securetty
+	if ! use pam ; then
+		insopts -m0600
+		doins etc/login.access etc/limits
+	fi
+	# Output arch-specific cruft
+	local devs
+	case $(tc-arch) in
+		ppc*)  devs="hvc0 hvsi0 ttyPSC0";;
+		hppa)  devs="ttyB0";;
+		arm)   devs="ttyFB0 ttySAC0 ttySAC1 ttySAC2 ttySAC3 ttymxc0 ttymxc1 ttymxc2 ttymxc3 ttyO0 ttyO1 ttyO2";;
+		sh)    devs="ttySC0 ttySC1";;
+	esac
+	[[ -n ${devs} ]] && printf '%s\n' ${devs} >> "${D}"/etc/securetty
+
+	# needed for 'useradd -D'
+	insinto /etc/default
+	insopts -m0600
+	doins "${FILESDIR}"/default/useradd
+
+	# move passwd to / to help recover broke systems #64441
+	mv "${ED}"/usr/bin/passwd "${ED}"/bin/
+	dosym /bin/passwd /usr/bin/passwd
+
+	cd "${S}"
+	insinto /etc
+	insopts -m0644
+	newins etc/login.defs login.defs
+
+	if ! use pam ; then
+		set_login_opt MAIL_CHECK_ENAB no
+		set_login_opt SU_WHEEL_ONLY yes
+		set_login_opt CRACKLIB_DICTPATH /usr/$(get_libdir)/cracklib_dict
+		set_login_opt LOGIN_RETRIES 3
+		set_login_opt ENCRYPT_METHOD SHA512
+	else
+		dopamd "${FILESDIR}"/pam.d-include/shadow
+
+		for x in chpasswd chgpasswd newusers; do
+			newpamd "${FILESDIR}"/pam.d-include/passwd ${x}
+		done
+
+		for x in chage chsh chfn \
+				 user{add,del,mod} group{add,del,mod} ; do
+			newpamd "${FILESDIR}"/pam.d-include/shadow ${x}
+		done
+
+		# comment out login.defs options that pam hates
+		local opt
+		for opt in \
+			CHFN_AUTH \
+			CRACKLIB_DICTPATH \
+			ENV_HZ \
+			ENVIRON_FILE \
+			FAILLOG_ENAB \
+			FTMP_FILE \
+			LASTLOG_ENAB \
+			MAIL_CHECK_ENAB \
+			MOTD_FILE \
+			NOLOGINS_FILE \
+			OBSCURE_CHECKS_ENAB \
+			PASS_ALWAYS_WARN \
+			PASS_CHANGE_TRIES \
+			PASS_MIN_LEN \
+			PORTTIME_CHECKS_ENAB \
+			QUOTAS_ENAB \
+			SU_WHEEL_ONLY
+		do
+			set_login_opt ${opt}
+		done
+
+		sed -i -f "${FILESDIR}"/login_defs_pam.sed \
+			"${ED}"/etc/login.defs
+
+		# remove manpages that pam will install for us
+		# and/or don't apply when using pam
+		find "${ED}"/usr/share/man \
+			'(' -name 'limits.5*' -o -name 'suauth.5*' ')' \
+			-exec rm {} +
+
+		# Remove pam.d files provided by pambase.
+		rm "${ED}"/etc/pam.d/{login,passwd,su} || die
+	fi
+
+	# Remove manpages that are handled by other packages
+	find "${ED}"/usr/share/man \
+		'(' -name id.1 -o -name passwd.5 -o -name getspnam.3 ')' \
+		-exec rm {} +
+
+	cd "${S}"
+	dodoc ChangeLog NEWS TODO
+	newdoc README README.download
+	cd doc
+	dodoc HOWTO README* WISHLIST *.txt
+}
+
+pkg_preinst() {
+	rm -f "${EROOT}"/etc/pam.d/system-auth.new \
+		"${EROOT}/etc/login.defs.new"
+}
+
+pkg_postinst() {
+	# Enable shadow groups.
+	if [ ! -f "${EROOT}"/etc/gshadow ] ; then
+		if grpck -r -R "${EROOT}" 2>/dev/null ; then
+			grpconv -R "${EROOT}"
+		else
+			ewarn "Running 'grpck' returned errors.  Please run it by hand, and then"
+			ewarn "run 'grpconv' afterwards!"
+		fi
+	fi
+
+	einfo "The 'adduser' symlink to 'useradd' has been dropped."
+}
diff --git a/sys-apps/shadow/shadow-4.1.5.1.ebuild b/sys-apps/shadow/shadow-4.1.5.1.ebuild
new file mode 100644
index 0000000..110218e
--- /dev/null
+++ b/sys-apps/shadow/shadow-4.1.5.1.ebuild
@@ -0,0 +1,197 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.1.5.1.ebuild,v 1.4 2013/03/12 14:19:37 vapier Exp $
+
+EAPI="2"
+
+inherit eutils libtool toolchain-funcs pam multilib
+
+DESCRIPTION="Utilities to deal with user accounts"
+HOMEPAGE="http://shadow.pld.org.pl/ http://pkg-shadow.alioth.debian.org/"
+SRC_URI="http://pkg-shadow.alioth.debian.org/releases/${P}.tar.bz2"
+
+LICENSE="BSD GPL-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE="acl audit cracklib nls pam selinux skey xattr"
+
+RDEPEND="acl? ( sys-apps/acl )
+	audit? ( sys-process/audit )
+	cracklib? ( >=sys-libs/cracklib-2.7-r3 )
+	pam? ( virtual/pam )
+	skey? ( sys-auth/skey )
+	selinux? (
+		>=sys-libs/libselinux-1.28
+		sys-libs/libsemanage
+	)
+	nls? ( virtual/libintl )
+	xattr? ( sys-apps/attr )"
+DEPEND="${RDEPEND}
+	nls? ( sys-devel/gettext )"
+RDEPEND="${RDEPEND}
+	pam? ( >=sys-auth/pambase-20120417 )"
+
+src_prepare() {
+	epatch "${FILESDIR}"/${PN}-4.1.3-dots-in-usernames.patch #22920
+	epatch_user
+	elibtoolize
+}
+
+src_configure() {
+	tc-is-cross-compiler && export ac_cv_func_setpgrp_void=yes
+	econf \
+		--without-group-name-max-length \
+		--without-tcb \
+		--enable-shared=no \
+		--enable-static=yes \
+		$(use_with acl) \
+		$(use_with audit) \
+		$(use_with cracklib libcrack) \
+		$(use_with pam libpam) \
+		$(use_with skey) \
+		$(use_with selinux) \
+		$(use_enable nls) \
+		$(use_with elibc_glibc nscd) \
+		$(use_with xattr attr)
+	has_version 'sys-libs/uclibc[-rpc]' && sed -i '/RLOGIN/d' config.h #425052
+}
+
+set_login_opt() {
+	local comment="" opt=$1 val=$2
+	[[ -z ${val} ]] && comment="#"
+	sed -i -r \
+		-e "/^#?${opt}/s:.*:${comment}${opt} ${val}:" \
+		"${D}"/etc/login.defs
+	local res=$(grep "^${comment}${opt}" "${D}"/etc/login.defs)
+	einfo ${res:-Unable to find ${opt} in /etc/login.defs}
+}
+
+src_install() {
+	emake DESTDIR="${D}" suidperms=4711 install || die
+
+	# Remove libshadow and libmisc; see bug 37725 and the following
+	# comment from shadow's README.linux:
+	#   Currently, libshadow.a is for internal use only, so if you see
+	#   -lshadow in a Makefile of some other package, it is safe to
+	#   remove it.
+	rm -f "${D}"/{,usr/}$(get_libdir)/lib{misc,shadow}.{a,la}
+
+	insinto /etc
+	# Using a securetty with devfs device names added
+	# (compat names kept for non-devfs compatibility)
+	insopts -m0600 ; doins "${FILESDIR}"/securetty
+	if ! use pam ; then
+		insopts -m0600
+		doins etc/login.access etc/limits
+	fi
+	# Output arch-specific cruft
+	local devs
+	case $(tc-arch) in
+		ppc*)  devs="hvc0 hvsi0 ttyPSC0";;
+		hppa)  devs="ttyB0";;
+		arm)   devs="ttyFB0 ttySAC0 ttySAC1 ttySAC2 ttySAC3 ttymxc0 ttymxc1 ttyO0 ttyO1 ttyO2";;
+		sh)    devs="ttySC0 ttySC1";;
+	esac
+	[[ -n ${devs} ]] && printf '%s\n' ${devs} >> "${D}"/etc/securetty
+
+	# needed for 'useradd -D'
+	insinto /etc/default
+	insopts -m0600
+	doins "${FILESDIR}"/default/useradd
+
+	# move passwd to / to help recover broke systems #64441
+	mv "${D}"/usr/bin/passwd "${D}"/bin/
+	dosym /bin/passwd /usr/bin/passwd
+
+	cd "${S}"
+	insinto /etc
+	insopts -m0644
+	newins etc/login.defs login.defs
+
+	if ! use pam ; then
+		set_login_opt MAIL_CHECK_ENAB no
+		set_login_opt SU_WHEEL_ONLY yes
+		set_login_opt CRACKLIB_DICTPATH /usr/$(get_libdir)/cracklib_dict
+		set_login_opt LOGIN_RETRIES 3
+		set_login_opt ENCRYPT_METHOD SHA512
+	else
+		dopamd "${FILESDIR}"/pam.d-include/shadow || die
+
+		for x in chpasswd chgpasswd; do
+			newpamd "${FILESDIR}"/pam.d-include/passwd ${x} || die
+		done
+
+		for x in chage chsh chfn newusers \
+				 user{add,del,mod} group{add,del,mod} ; do
+			newpamd "${FILESDIR}"/pam.d-include/shadow ${x} || die
+		done
+
+		# comment out login.defs options that pam hates
+		local opt
+		for opt in \
+			CHFN_AUTH \
+			CRACKLIB_DICTPATH \
+			ENV_HZ \
+			ENVIRON_FILE \
+			FAILLOG_ENAB \
+			FTMP_FILE \
+			LASTLOG_ENAB \
+			MAIL_CHECK_ENAB \
+			MOTD_FILE \
+			NOLOGINS_FILE \
+			OBSCURE_CHECKS_ENAB \
+			PASS_ALWAYS_WARN \
+			PASS_CHANGE_TRIES \
+			PASS_MIN_LEN \
+			PORTTIME_CHECKS_ENAB \
+			QUOTAS_ENAB \
+			SU_WHEEL_ONLY
+		do
+			set_login_opt ${opt}
+		done
+
+		sed -i -f "${FILESDIR}"/login_defs_pam.sed \
+			"${D}"/etc/login.defs
+
+		# remove manpages that pam will install for us
+		# and/or don't apply when using pam
+		find "${D}"/usr/share/man \
+			'(' -name 'limits.5*' -o -name 'suauth.5*' ')' \
+			-exec rm {} +
+
+		# Remove pam.d files provided by pambase.
+		rm "${D}"/etc/pam.d/{login,passwd,su} || die
+	fi
+
+	# Remove manpages that are handled by other packages
+	find "${D}"/usr/share/man \
+		'(' -name id.1 -o -name passwd.5 -o -name getspnam.3 ')' \
+		-exec rm {} +
+
+	cd "${S}"
+	dodoc ChangeLog NEWS TODO
+	newdoc README README.download
+	cd doc
+	dodoc HOWTO README* WISHLIST *.txt
+}
+
+pkg_preinst() {
+	rm -f "${ROOT}"/etc/pam.d/system-auth.new \
+		"${ROOT}/etc/login.defs.new"
+
+	use pam && pam_epam_expand "${D}"/etc/pam.d/login
+}
+
+pkg_postinst() {
+	# Enable shadow groups.
+	if [ ! -f "${ROOT}"/etc/gshadow ] ; then
+		if grpck -r -R "${ROOT}" 2>/dev/null ; then
+			grpconv -R "${ROOT}"
+		else
+			ewarn "Running 'grpck' returned errors.  Please run it by hand, and then"
+			ewarn "run 'grpconv' afterwards!"
+		fi
+	fi
+
+	einfo "The 'adduser' symlink to 'useradd' has been dropped."
+}
diff --git a/sys-apps/shadow/shadow-4.1.5.ebuild b/sys-apps/shadow/shadow-4.1.5.ebuild
new file mode 100644
index 0000000..81ab54f
--- /dev/null
+++ b/sys-apps/shadow/shadow-4.1.5.ebuild
@@ -0,0 +1,195 @@
+# Copyright 1999-2013 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/sys-apps/shadow/shadow-4.1.5.ebuild,v 1.7 2013/03/12 14:19:37 vapier Exp $
+
+inherit eutils libtool toolchain-funcs pam multilib
+
+DESCRIPTION="Utilities to deal with user accounts"
+HOMEPAGE="http://shadow.pld.org.pl/ http://pkg-shadow.alioth.debian.org/"
+SRC_URI="http://pkg-shadow.alioth.debian.org/releases/${P}.tar.bz2"
+
+LICENSE="BSD GPL-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE="acl audit cracklib nls pam selinux skey xattr"
+
+RDEPEND="acl? ( sys-apps/acl )
+	audit? ( sys-process/audit )
+	cracklib? ( >=sys-libs/cracklib-2.7-r3 )
+	pam? ( virtual/pam )
+	skey? ( sys-auth/skey )
+	selinux? ( >=sys-libs/libselinux-1.28 )
+	nls? ( virtual/libintl )
+	xattr? ( sys-apps/attr )"
+DEPEND="${RDEPEND}
+	nls? ( sys-devel/gettext )"
+RDEPEND="${RDEPEND}
+	pam? ( >=sys-auth/pambase-20080219.1 )"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+	epatch "${FILESDIR}"/${PN}-4.1.3-dots-in-usernames.patch #22920
+	epatch "${FILESDIR}"/${PN}-4.1.5-stdarg.patch
+	epatch "${FILESDIR}"/${PN}-4.1.5-nscd-newline-msg.patch
+	epatch "${FILESDIR}"/${PN}-4.1.5-nscd-ignore-exit-1.patch
+	elibtoolize
+}
+
+src_compile() {
+	tc-is-cross-compiler && export ac_cv_func_setpgrp_void=yes
+	econf \
+		--without-group-name-max-length \
+		--without-tcb \
+		--enable-shared=no \
+		--enable-static=yes \
+		$(use_with acl) \
+		$(use_with audit) \
+		$(use_with cracklib libcrack) \
+		$(use_with pam libpam) \
+		$(use_with skey) \
+		$(use_with selinux) \
+		$(use_enable nls) \
+		$(use_with elibc_glibc nscd) \
+		$(use_with xattr attr)
+	emake || die
+}
+
+set_login_opt() {
+	local comment="" opt=$1 val=$2
+	[[ -z ${val} ]] && comment="#"
+	sed -i -r \
+		-e "/^#?${opt}/s:.*:${comment}${opt} ${val}:" \
+		"${D}"/etc/login.defs
+	local res=$(grep "^${comment}${opt}" "${D}"/etc/login.defs)
+	einfo ${res:-Unable to find ${opt} in /etc/login.defs}
+}
+
+src_install() {
+	emake DESTDIR="${D}" suidperms=4711 install || die
+
+	# Remove libshadow and libmisc; see bug 37725 and the following
+	# comment from shadow's README.linux:
+	#   Currently, libshadow.a is for internal use only, so if you see
+	#   -lshadow in a Makefile of some other package, it is safe to
+	#   remove it.
+	rm -f "${D}"/{,usr/}$(get_libdir)/lib{misc,shadow}.{a,la}
+
+	insinto /etc
+	# Using a securetty with devfs device names added
+	# (compat names kept for non-devfs compatibility)
+	insopts -m0600 ; doins "${FILESDIR}"/securetty
+	if ! use pam ; then
+		insopts -m0600
+		doins etc/login.access etc/limits
+	fi
+	# Output arch-specific cruft
+	local devs
+	case $(tc-arch) in
+		ppc*)  devs="hvc0 hvsi0 ttyPSC0";;
+		hppa)  devs="ttyB0";;
+		arm)   devs="ttyFB0 ttySAC0 ttySAC1 ttySAC2 ttySAC3 ttymxc0 ttymxc1 ttyO0 ttyO1 ttyO2";;
+		sh)    devs="ttySC0 ttySC1";;
+	esac
+	[[ -n ${devs} ]] && printf '%s\n' ${devs} >> "${D}"/etc/securetty
+
+	# needed for 'useradd -D'
+	insinto /etc/default
+	insopts -m0600
+	doins "${FILESDIR}"/default/useradd
+
+	# move passwd to / to help recover broke systems #64441
+	mv "${D}"/usr/bin/passwd "${D}"/bin/
+	dosym /bin/passwd /usr/bin/passwd
+
+	cd "${S}"
+	insinto /etc
+	insopts -m0644
+	newins etc/login.defs login.defs
+
+	if ! use pam ; then
+		set_login_opt MAIL_CHECK_ENAB no
+		set_login_opt SU_WHEEL_ONLY yes
+		set_login_opt CRACKLIB_DICTPATH /usr/$(get_libdir)/cracklib_dict
+		set_login_opt LOGIN_RETRIES 3
+		set_login_opt ENCRYPT_METHOD SHA512
+	else
+		dopamd "${FILESDIR}/pam.d-include/"{su,shadow}
+
+		newpamd "${FILESDIR}/login.pamd.3" login
+
+		for x in passwd chpasswd chgpasswd; do
+			newpamd "${FILESDIR}"/pam.d-include/passwd ${x} || die
+		done
+
+		for x in chage chsh chfn newusers \
+				 user{add,del,mod} group{add,del,mod} ; do
+			newpamd "${FILESDIR}"/pam.d-include/shadow ${x} || die
+		done
+
+		# comment out login.defs options that pam hates
+		local opt
+		for opt in \
+			CHFN_AUTH \
+			CRACKLIB_DICTPATH \
+			ENV_HZ \
+			ENVIRON_FILE \
+			FAILLOG_ENAB \
+			FTMP_FILE \
+			LASTLOG_ENAB \
+			MAIL_CHECK_ENAB \
+			MOTD_FILE \
+			NOLOGINS_FILE \
+			OBSCURE_CHECKS_ENAB \
+			PASS_ALWAYS_WARN \
+			PASS_CHANGE_TRIES \
+			PASS_MIN_LEN \
+			PORTTIME_CHECKS_ENAB \
+			QUOTAS_ENAB \
+			SU_WHEEL_ONLY
+		do
+			set_login_opt ${opt}
+		done
+
+		sed -i -f "${FILESDIR}"/login_defs_pam.sed \
+			"${D}"/etc/login.defs
+
+		# remove manpages that pam will install for us
+		# and/or don't apply when using pam
+		find "${D}"/usr/share/man \
+			'(' -name 'limits.5*' -o -name 'suauth.5*' ')' \
+			-exec rm {} +
+	fi
+
+	# Remove manpages that are handled by other packages
+	find "${D}"/usr/share/man \
+		'(' -name id.1 -o -name passwd.5 -o -name getspnam.3 ')' \
+		-exec rm {} +
+
+	cd "${S}"
+	dodoc ChangeLog NEWS TODO
+	newdoc README README.download
+	cd doc
+	dodoc HOWTO README* WISHLIST *.txt
+}
+
+pkg_preinst() {
+	rm -f "${ROOT}"/etc/pam.d/system-auth.new \
+		"${ROOT}/etc/login.defs.new"
+
+	use pam && pam_epam_expand "${D}"/etc/pam.d/login
+}
+
+pkg_postinst() {
+	# Enable shadow groups.
+	if [ ! -f "${ROOT}"/etc/gshadow ] ; then
+		if grpck -r -R "${ROOT}" 2>/dev/null ; then
+			grpconv -R "${ROOT}"
+		else
+			ewarn "Running 'grpck' returned errors.  Please run it by hand, and then"
+			ewarn "run 'grpconv' afterwards!"
+		fi
+	fi
+
+	einfo "The 'adduser' symlink to 'useradd' has been dropped."
+}