[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openembedded-core
Subject:    [OE-core] [PATCH v3 0/3] Disable shell for default users
From:       "Jiaqing Zhao" <jiaqing.zhao () linux ! intel ! com>
Date:       2022-04-30 2:48:09
Message-ID: 20220430024812.745583-1-jiaqing.zhao () linux ! intel ! com
[Download RAW message or body]

Content-Transfer-Encoding: 8bit

This patchset changes the default shell of default users other than
root and sync from /bin/sh to /sbin/nologin to fix potential security
vulnerabilities. This is backported from base-passwd 3.5.30.

Upstream issue trackers:
https://launchpad.net/bugs/216813
https://launchpad.net/bugs/248844

v3:
Fix ptest for sed and strace.
v2:
Fix indentation in bbfile.

Jiaqing Zhao (3):
  base-passwd: Disable shell for default users
  sed: Specify shell for "nobody" user in run-ptest
  strace: Don't run ptest as "nobody"

 .../base-passwd/disable-shell.patch           | 57 +++++++++++++++++++
 .../base-passwd/base-passwd_3.5.29.bb         |  1 +
 meta/recipes-devtools/strace/strace/run-ptest |  6 +-
 meta/recipes-extended/sed/sed/run-ptest       |  2 +-
 4 files changed, 60 insertions(+), 6 deletions(-)
 create mode 100644 meta/recipes-core/base-passwd/base-passwd/disable-shell.patch

-- 
2.34.1



-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#165062): https://lists.openembedded.org/g/openembedded-core/message/165062
Mute This Topic: https://lists.openembedded.org/mt/90790102/4454766
Group Owner: openembedded-core+owner@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [openembedded-core@marc.info]
-=-=-=-=-=-=-=-=-=-=-=-



[prev in list] [next in list] [prev in thread] [next in thread]