diff options
author | Akash Hadke <akash.hadke@kpit.com> | 2022-07-28 14:33:12 +0200 |
---|---|---|
committer | Khem Raj <raj.khem@gmail.com> | 2022-07-28 08:34:19 -0700 |
commit | 7ca63e5454bd7cbdb5ac58f6b5913e3387b64201 (patch) | |
tree | 377d13e369f9f99261611647a9bf34d337956bbe /meta-oe | |
parent | 2eb39477a784673baefa59640909b827ebb689b2 (diff) | |
download | meta-openembedded-7ca63e5454bd7cbdb5ac58f6b5913e3387b64201.tar.gz |
polkit: Add --shell /bin/nologin to polkitd user
polkitd user has default access to /bin/sh, add --shell /bin/nologin
to remove default access to /bin/sh and avoid login through it.
Signed-off-by: Akash Hadke <akash.hadke@kpit.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-oe')
-rw-r--r-- | meta-oe/recipes-extended/polkit/polkit_0.119.bb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta-oe/recipes-extended/polkit/polkit_0.119.bb b/meta-oe/recipes-extended/polkit/polkit_0.119.bb index bf160053d..4ce5f0e04 100644 --- a/meta-oe/recipes-extended/polkit/polkit_0.119.bb +++ b/meta-oe/recipes-extended/polkit/polkit_0.119.bb | |||
@@ -71,7 +71,7 @@ FILES:${PN}:append = " \ | |||
71 | FILES:${PN}-examples = "${bindir}/*example*" | 71 | FILES:${PN}-examples = "${bindir}/*example*" |
72 | 72 | ||
73 | USERADD_PACKAGES = "${PN}" | 73 | USERADD_PACKAGES = "${PN}" |
74 | USERADD_PARAM:${PN} = "--system --no-create-home --user-group --home-dir ${sysconfdir}/${BPN}-1 polkitd" | 74 | USERADD_PARAM:${PN} = "--system --no-create-home --user-group --home-dir ${sysconfdir}/${BPN}-1 --shell /bin/nologin polkitd" |
75 | 75 | ||
76 | SYSTEMD_SERVICE:${PN} = "${BPN}.service" | 76 | SYSTEMD_SERVICE:${PN} = "${BPN}.service" |
77 | SYSTEMD_AUTO_ENABLE = "disable" | 77 | SYSTEMD_AUTO_ENABLE = "disable" |