{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "shadow-2.4.14.3-8.oe2403sp1.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-07-18T18:33:26.758977035Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/shadow-2.4.14.3-8.oe2403sp1.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-shadow-4.14.3",
      "name": "shadow",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "18a66f149bd8b375108f44157d469d23cb10f6841fb6b3da8ba88f967aaa271d"
        }
      ],
      "description": "This package includes the necessary programs for converting plain\npassword files to the shadow password format and to manage user and\ngroup accounts.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/shadow@4.14.3-8.oe2403sp1?arch=x86_64&epoch=2&upstream=shadow-4.14.3-8.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://pkg-shadow.alioth.debian.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "Tools for managing accounts and shadow password files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:4.14.3-8.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-attr-2.5.1",
      "name": "attr",
      "licenseConcluded": "GPLv2+ AND LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "c2cd35ded13be9e21079b79f5877c8d093e8afa5ca50699c06244d54a45867d0"
        }
      ],
      "description": "A set of tools for manipulating extended attributes on filesystem\nobjects, in particular getfattr(1) and setfattr(1).\nAn attr(1) command is also provided which is largely compatible\nwith the SGI IRIX tool of the same name.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/attr@2.5.1-7.oe2403sp1?arch=x86_64&epoch=0&upstream=attr-2.5.1-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://savannah.nongnu.org/projects/attr",
      "licenseDeclared": "GPLv2+ AND LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "Commands for Manipulating Filesystem Extended Attributes",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.5.1-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-audit-libs-3.1.2",
      "name": "audit-libs",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "8c2899bd706d57854b7f0496ba7fbeb4ca57456b837cd53cf2df3b24c8322f6f"
        }
      ],
      "description": "The audit-libs package contains the dynamic libraries needed for\napplications to use the audit framework.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/audit-libs@3.1.2-9.oe2403sp1?arch=x86_64&epoch=1&upstream=audit-3.1.2-9.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://people.redhat.com/sgrubb/audit/",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "Dynamic library for libaudit",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "1:3.1.2-9.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-coreutils-9.4",
      "name": "coreutils",
      "licenseConcluded": "GPLv3+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "60ec93c05e9eb1555cb60c985c5c99fd5ec8964d64a66cdd6922d565c9304f61"
        }
      ],
      "description": "These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/coreutils@9.4-17.oe2403sp1?arch=x86_64&epoch=0&upstream=coreutils-9.4-17.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://www.gnu.org/software/coreutils/",
      "licenseDeclared": "GPLv3+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "A set of basic GNU tools commonly used in shell scripts",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:9.4-17.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "406bf61a0c7f32534eb60e39c41da5c2c08e48c2e013fe970240acf8e8a07cf4"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp1?arch=x86_64&epoch=0&upstream=glibc-2.38-101.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-libacl-2.3.1",
      "name": "libacl",
      "licenseConcluded": "LGPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cf2184270c7060d0e5d5c4f98c57d06fd474cb5d796aa8c0bb403cd6dc4800b2"
        }
      ],
      "description": "This package contains the library for manipulating access control list.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/libacl@2.3.1-7.oe2403sp1?arch=x86_64&epoch=0&upstream=acl-2.3.1-7.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://savannah.nongnu.org/projects/acl",
      "licenseDeclared": "LGPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "Library for supporting access control list",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.3.1-7.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-pam-1.5.3",
      "name": "pam",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "b23887753941efd620f5b86ec2b1b3e0e223d8f07f2b0149b0e55fb1760c5cd5"
        }
      ],
      "description": "PAM (Pluggable Authentication Modules) is a system of libraries that\nhandle the authentication tasks of applications (services) on the system.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/pam@1.5.3-12.oe2403sp1?arch=x86_64&epoch=0&upstream=pam-1.5.3-12.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.linux-pam.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "Pluggable Authentication Modules for Linux",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:1.5.3-12.oe2403sp1"
    },
    {
      "SPDXID": "SPDXRef-rpm-shadow-subid-devel-4.14.3",
      "name": "shadow-subid-devel",
      "licenseConcluded": "BSD and GPLv2+",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "cd1c0b0adfa23953bcd7e111ced92fa3d1fd61c0379038bb4f0c2f1f31d6e081"
        }
      ],
      "description": "Development files for shadow-utils-subid.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/shadow-subid-devel@4.14.3-8.oe2403sp1?arch=x86_64&epoch=2&upstream=shadow-4.14.3-8.oe2403sp1.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://pkg-shadow.alioth.debian.org/",
      "licenseDeclared": "BSD and GPLv2+",
      "sourceInfo": "acquired package info from repodata DB: repodata/3ca3f05b705ac87dba48cdb0fbc8de8608778488df6909ce1c87b6d6b650a769-primary.sqlite.bz2",
      "summary": "Development package for shadow-utils-subid",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "2:4.14.3-8.oe2403sp1"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-shadow-4.14.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-attr-2.5.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shadow-4.14.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-audit-libs-3.1.2"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shadow-4.14.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-coreutils-9.4"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shadow-4.14.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shadow-4.14.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-libacl-2.3.1"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shadow-4.14.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-pam-1.5.3"
    },
    {
      "spdxElementId": "SPDXRef-rpm-shadow-4.14.3",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-shadow-subid-devel-4.14.3"
    }
  ]
}