diff options
| author | Maciej Borzecki <maciej.borzecki@open-rnd.pl> | 2016-02-10 13:32:55 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2016-02-11 12:27:45 +0000 |
| commit | 4d3ca424214d7646329f022f3579f02cca17c70b (patch) | |
| tree | 4ba1320c3b7c2228d5031bea6d0e8b0d6b247a3b | |
| parent | 6be3031dd4c90c476f25e593a8f203c6258b17e9 (diff) | |
| download | poky-4d3ca424214d7646329f022f3579f02cca17c70b.tar.gz | |
systemd: tighten timesyncd and journal-gateway user accounts
Make sure that systemd-timesync and systemd-journal-gateway are created
without dedicated home directories, home set to / and /bin/nologin as
shell. This makes us in sync with what systemd-sysusers sets when
adding users during startup.
(From OE-Core rev: a415253fa234212e82cf4ad230faf5f6af005403)
Signed-off-by: Maciej Borzecki <maciej.borzecki@open-rnd.pl>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
| -rw-r--r-- | meta/recipes-core/systemd/systemd_228.bb | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/meta/recipes-core/systemd/systemd_228.bb b/meta/recipes-core/systemd/systemd_228.bb index ab88c554db..fe2cfb529f 100644 --- a/meta/recipes-core/systemd/systemd_228.bb +++ b/meta/recipes-core/systemd/systemd_228.bb | |||
| @@ -304,8 +304,8 @@ SYSTEMD_PACKAGES = "${PN}-binfmt" | |||
| 304 | SYSTEMD_SERVICE_${PN}-binfmt = "systemd-binfmt.service" | 304 | SYSTEMD_SERVICE_${PN}-binfmt = "systemd-binfmt.service" |
| 305 | 305 | ||
| 306 | USERADD_PACKAGES = "${PN}" | 306 | USERADD_PACKAGES = "${PN}" |
| 307 | USERADD_PARAM_${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'microhttpd', '--system systemd-journal-gateway;', '', d)}" | 307 | USERADD_PARAM_${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'microhttpd', '--system -d / -M --shell /bin/nologin systemd-journal-gateway;', '', d)}" |
| 308 | USERADD_PARAM_${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'timesyncd', '--system systemd-timesync;', '', d)}" | 308 | USERADD_PARAM_${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'timesyncd', '--system -d / -M --shell /bin/nologin systemd-timesync;', '', d)}" |
| 309 | GROUPADD_PARAM_${PN} = "-r lock; -r systemd-journal" | 309 | GROUPADD_PARAM_${PN} = "-r lock; -r systemd-journal" |
| 310 | 310 | ||
| 311 | FILES_${PN}-analyze = "${bindir}/systemd-analyze" | 311 | FILES_${PN}-analyze = "${bindir}/systemd-analyze" |