[oe-commits] Robert Yang : quagga: use /bin/false as the login shell

git at git.openembedded.org git at git.openembedded.org
Tue Nov 26 16:20:26 UTC 2013


Module: meta-openembedded.git
Branch: master
Commit: b613318e14a0038b4fc6d5a7378b1affb64fd471
URL:    http://git.openembedded.org/?p=meta-openembedded.git&a=commit;h=b613318e14a0038b4fc6d5a7378b1affb64fd471

Author: Robert Yang <liezhi.yang at windriver.com>
Date:   Wed Nov 13 05:24:24 2013 +0800

quagga: use /bin/false as the login shell

Use /bin/false as the login shell, just like what Ubuntu does,
otherwise there might be secure issue.

Signed-off-by: Robert Yang <liezhi.yang at windriver.com>
Signed-off-by: Joe MacDonald <joe at deserted.net>

---

 meta-networking/recipes-protocols/quagga/quagga.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta-networking/recipes-protocols/quagga/quagga.inc b/meta-networking/recipes-protocols/quagga/quagga.inc
index 2106c9b..677b1c5 100644
--- a/meta-networking/recipes-protocols/quagga/quagga.inc
+++ b/meta-networking/recipes-protocols/quagga/quagga.inc
@@ -148,7 +148,7 @@ INITSCRIPT_PARAMS_${PN}-watchquagga     = "defaults 90 10"
 # Add quagga's user and group
 USERADD_PACKAGES = "${PN}"
 GROUPADD_PARAM_${PN} = "--system quagga ; --system quaggavty"
-USERADD_PARAM_${PN} = "--system --home ${localstatedir}/run/quagga/ -M -g quagga quagga"
+USERADD_PARAM_${PN} = "--system --home ${localstatedir}/run/quagga/ -M -g quagga --shell /bin/false quagga"
 
 pkg_postinst_${PN} () {
     if [ -z "$D" ] && [ -e /etc/init.d/populate-volatile.sh ] ; then



More information about the Openembedded-commits mailing list