From 52f7a1b403eabc52ca104f752484ec1572f2d9dd Mon Sep 17 00:00:00 2001 From: Jackie Huang Date: Tue, 4 Mar 2014 18:07:57 +0800 Subject: rpcbind: add rpc user and run rpcbind daemon with rpc user For security policy, change to run rpcbind daemon with rpc user just like Redhat does, so set the --with-rpcuser to rpc and add rpc user. Signed-off-by: Jackie Huang Signed-off-by: Saul Wold --- meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'meta') diff --git a/meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb b/meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb index d9eb1a2527f..23219e01bd9 100644 --- a/meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb +++ b/meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb @@ -37,7 +37,13 @@ INITSCRIPT_PARAMS = "start 12 2 3 4 5 . stop 60 0 1 6 ." SYSTEMD_SERVICE_${PN} = "rpcbind.service" SYSTEMD_AUTO_ENABLE = "disable" -EXTRA_OECONF += " --enable-warmstarts " +inherit useradd + +USERADD_PACKAGES = "${PN}" +USERADD_PARAM_${PN} = "--system --no-create-home \ + --shell /bin/false --user-group rpc" + +EXTRA_OECONF += " --enable-warmstarts --with-rpcuser=rpc" do_install_append () { mv ${D}${bindir} ${D}${sbindir} -- cgit 1.2.3-korg