[oe-commits] Chong.Lu at windriver.com : mariadb: use /bin/false as the login shell

[git at git.openembedded.org]

Module: meta-openembedded.git
Branch: master-next
Commit: f594ad2857ee0e72da5967e4d8cba482ed52dc49
URL:    http://git.openembedded.org/?p=meta-openembedded.git&a=commit;h=f594ad2857ee0e72da5967e4d8cba482ed52dc49

Author: Chong.Lu at windriver.com <Chong.Lu at windriver.com>
Date:   Mon Apr 14 15:16:38 2014 +0800

mariadb: use /bin/false as the login shell

Use /bin/false as the login shell, just like what Ubuntu does,
otherwise there might be secure issue.

Signed-off-by: Robert Yang <liezhi.yang at windriver.com>
Signed-off-by: Chong Lu <Chong.Lu at windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa at gmail.com>

---

 meta-oe/recipes-support/mysql/mariadb_5.1.67.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta-oe/recipes-support/mysql/mariadb_5.1.67.inc b/meta-oe/recipes-support/mysql/mariadb_5.1.67.inc
index 100b3a7..37a0f0c 100644
--- a/meta-oe/recipes-support/mysql/mariadb_5.1.67.inc
+++ b/meta-oe/recipes-support/mysql/mariadb_5.1.67.inc
@@ -35,7 +35,7 @@ INITSCRIPT_NAME = "mysqld"
 INITSCRIPT_PARAMS = "start 45 5 . stop 45 0 6 1 ."
 
 USERADD_PACKAGES = "${PN}-server"
-USERADD_PARAM_${PN}-server = "--system --home-dir /var/mysql -g nogroup mysql"
+USERADD_PARAM_${PN}-server = "--system --home-dir /var/mysql -g nogroup --shell /bin/false mysql"
 
 
 export ac_cv_path_PS="/bin/ps"