[oe] [meta-networking] [PATCH] quagga: use /bin/false as the login shell
Joe MacDonald
joe at deserted.net
Tue Nov 26 16:23:48 UTC 2013
Merged, thanks.
-J.
[[oe] [meta-networking] [PATCH] quagga: use /bin/false as the login shell] On 13.11.13 (Wed 05:24) Robert Yang wrote:
> Use /bin/false as the login shell, just like what Ubuntu does,
> otherwise there might be secure issue.
>
> Signed-off-by: Robert Yang <liezhi.yang at windriver.com>
> ---
> meta-networking/recipes-protocols/quagga/quagga.inc | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/meta-networking/recipes-protocols/quagga/quagga.inc b/meta-networking/recipes-protocols/quagga/quagga.inc
> index 2106c9b..677b1c5 100644
> --- a/meta-networking/recipes-protocols/quagga/quagga.inc
> +++ b/meta-networking/recipes-protocols/quagga/quagga.inc
> @@ -148,7 +148,7 @@ INITSCRIPT_PARAMS_${PN}-watchquagga = "defaults 90 10"
> # Add quagga's user and group
> USERADD_PACKAGES = "${PN}"
> GROUPADD_PARAM_${PN} = "--system quagga ; --system quaggavty"
> -USERADD_PARAM_${PN} = "--system --home ${localstatedir}/run/quagga/ -M -g quagga quagga"
> +USERADD_PARAM_${PN} = "--system --home ${localstatedir}/run/quagga/ -M -g quagga --shell /bin/false quagga"
>
> pkg_postinst_${PN} () {
> if [ -z "$D" ] && [ -e /etc/init.d/populate-volatile.sh ] ; then
--
-Joe MacDonald.
:wq
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.openembedded.org/pipermail/openembedded-devel/attachments/20131126/b0d0be62/attachment-0002.sig>
More information about the Openembedded-devel
mailing list