diff options
| author | Akash Hadke <akash.hadke@kpit.com> | 2022-07-28 14:33:12 +0200 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2022-08-07 14:48:54 -0700 |
| commit | eb9a5dcbf3b9b0bcfd2607587b5e351ab03c23b4 (patch) | |
| tree | 407b83ec7a5f776ee9eb046b118289e6dd11872e /meta-oe | |
| parent | 5b7f7f31ffd330a7ac7b78f436ce07587d33af1c (diff) | |
| download | meta-openembedded-eb9a5dcbf3b9b0bcfd2607587b5e351ab03c23b4.tar.gz | |
polkit: Add --shell /bin/nologin to polkitd user
polkitd user has default access to /bin/sh, add --shell /bin/nologin
to remove default access to /bin/sh and avoid login through it.
Signed-off-by: Akash Hadke <akash.hadke@kpit.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 7ca63e5454bd7cbdb5ac58f6b5913e3387b64201)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta-oe')
| -rw-r--r-- | meta-oe/recipes-extended/polkit/polkit_0.119.bb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta-oe/recipes-extended/polkit/polkit_0.119.bb b/meta-oe/recipes-extended/polkit/polkit_0.119.bb index 66bbf735f0..9444cb9f2d 100644 --- a/meta-oe/recipes-extended/polkit/polkit_0.119.bb +++ b/meta-oe/recipes-extended/polkit/polkit_0.119.bb | |||
| @@ -58,7 +58,7 @@ FILES:${PN}:append = " \ | |||
| 58 | FILES:${PN}-examples = "${bindir}/*example*" | 58 | FILES:${PN}-examples = "${bindir}/*example*" |
| 59 | 59 | ||
| 60 | USERADD_PACKAGES = "${PN}" | 60 | USERADD_PACKAGES = "${PN}" |
| 61 | USERADD_PARAM:${PN} = "--system --no-create-home --user-group --home-dir ${sysconfdir}/${BPN}-1 polkitd" | 61 | USERADD_PARAM:${PN} = "--system --no-create-home --user-group --home-dir ${sysconfdir}/${BPN}-1 --shell /bin/nologin polkitd" |
| 62 | 62 | ||
| 63 | SYSTEMD_SERVICE:${PN} = "${BPN}.service" | 63 | SYSTEMD_SERVICE:${PN} = "${BPN}.service" |
| 64 | SYSTEMD_AUTO_ENABLE = "disable" | 64 | SYSTEMD_AUTO_ENABLE = "disable" |