summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMaciej Borzecki <maciej.borzecki@open-rnd.pl>2016-02-10 13:32:55 +0100
committerRichard Purdie <richard.purdie@linuxfoundation.org>2016-02-11 12:27:45 +0000
commit4d3ca424214d7646329f022f3579f02cca17c70b (patch)
tree4ba1320c3b7c2228d5031bea6d0e8b0d6b247a3b
parent6be3031dd4c90c476f25e593a8f203c6258b17e9 (diff)
downloadpoky-4d3ca424214d7646329f022f3579f02cca17c70b.tar.gz
systemd: tighten timesyncd and journal-gateway user accounts
Make sure that systemd-timesync and systemd-journal-gateway are created without dedicated home directories, home set to / and /bin/nologin as shell. This makes us in sync with what systemd-sysusers sets when adding users during startup. (From OE-Core rev: a415253fa234212e82cf4ad230faf5f6af005403) Signed-off-by: Maciej Borzecki <maciej.borzecki@open-rnd.pl> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
-rw-r--r--meta/recipes-core/systemd/systemd_228.bb4
1 files changed, 2 insertions, 2 deletions
diff --git a/meta/recipes-core/systemd/systemd_228.bb b/meta/recipes-core/systemd/systemd_228.bb
index ab88c554db..fe2cfb529f 100644
--- a/meta/recipes-core/systemd/systemd_228.bb
+++ b/meta/recipes-core/systemd/systemd_228.bb
@@ -304,8 +304,8 @@ SYSTEMD_PACKAGES = "${PN}-binfmt"
304SYSTEMD_SERVICE_${PN}-binfmt = "systemd-binfmt.service" 304SYSTEMD_SERVICE_${PN}-binfmt = "systemd-binfmt.service"
305 305
306USERADD_PACKAGES = "${PN}" 306USERADD_PACKAGES = "${PN}"
307USERADD_PARAM_${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'microhttpd', '--system systemd-journal-gateway;', '', d)}" 307USERADD_PARAM_${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'microhttpd', '--system -d / -M --shell /bin/nologin systemd-journal-gateway;', '', d)}"
308USERADD_PARAM_${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'timesyncd', '--system systemd-timesync;', '', d)}" 308USERADD_PARAM_${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'timesyncd', '--system -d / -M --shell /bin/nologin systemd-timesync;', '', d)}"
309GROUPADD_PARAM_${PN} = "-r lock; -r systemd-journal" 309GROUPADD_PARAM_${PN} = "-r lock; -r systemd-journal"
310 310
311FILES_${PN}-analyze = "${bindir}/systemd-analyze" 311FILES_${PN}-analyze = "${bindir}/systemd-analyze"