[oe-commits] =?UTF-8?Q?Andreas=20M=C3=BCller=20?=: shadow: set correct entries for pseudo terminals in /etc/securetty

[git at git.openembedded.org]

Module: openembedded-core.git
Branch: master
Commit: d28eba07553020bf9bfb1419663c1d18ab36ab66
URL:    http://git.openembedded.org/?p=openembedded-core.git&a=commit;h=d28eba07553020bf9bfb1419663c1d18ab36ab66

Author: Andreas Müller <schnitzeltony at googlemail.com>
Date:   Wed Jan  8 10:46:46 2014 +0100

shadow: set correct entries for pseudo terminals in /etc/securetty

In

commit 10cdd66fe800cffe3f2cbf5c95550b4f7902a311
Author: Ming Liu <ming.liu at windriver.com>
Date:   Thu Jul 18 10:04:22 2013 +0800

    libpam: add a new 'nullok_secure' option support to pam_unix

'null_ok_secure' option was fixed. Since that commit 'su' stopped working in
pseudo terminals (created in X environments) for root-accounts with empty
password.

Background: The PAM configuration for 'su' includes 'common-auth' which uses
'nullok_secure' option for pam_unix.

Signed-off-by: Andreas Müller <schnitzeltony at googlemail.com>
Signed-off-by: Saul Wold <sgw at linux.intel.com>

---

 meta/recipes-extended/shadow/files/securetty | 16 ++++------------
 1 file changed, 4 insertions(+), 12 deletions(-)

diff --git a/meta/recipes-extended/shadow/files/securetty b/meta/recipes-extended/shadow/files/securetty
index 467fc04..0b1629f 100644
--- a/meta/recipes-extended/shadow/files/securetty
+++ b/meta/recipes-extended/shadow/files/securetty
@@ -124,18 +124,10 @@ tty62
 tty63
 
 # Local X displays (allows empty passwords with pam_unix's nullok_secure)
-:0
-:0.0
-:0.1
-:1
-:1.0
-:1.1
-:2
-:2.0
-:2.1
-:3
-:3.0
-:3.1
+pts/0
+pts/1
+pts/2
+pts/3
 
 # Embedded Freescale i.MX ports
 ttymxc0