diff options
| author |   Akash Hadke <akash.hadke@kpit.com> | 2022-07-28 14:33:12 +0200 |
|---|---|---|
| committer |   Armin Kuster <akuster808@gmail.com> | 2022-08-07 14:48:54 -0700 |
| commit | eb9a5dcbf3b9b0bcfd2607587b5e351ab03c23b4 (patch) | |
| tree | 407b83ec7a5f776ee9eb046b118289e6dd11872e | |
| parent | 5b7f7f31ffd330a7ac7b78f436ce07587d33af1c (diff) | |
| download | meta-openembedded-contrib-eb9a5dcbf3b9b0bcfd2607587b5e351ab03c23b4.tar.gz | |
polkit: Add --shell /bin/nologin to polkitd user
polkitd user has default access to /bin/sh, add --shell /bin/nologin
to remove default access to /bin/sh and avoid login through it.
Signed-off-by: Akash Hadke <akash.hadke@kpit.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit 7ca63e5454bd7cbdb5ac58f6b5913e3387b64201)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
| -rw-r--r-- | meta-oe/recipes-extended/polkit/polkit_0.119.bb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta-oe/recipes-extended/polkit/polkit_0.119.bb b/meta-oe/recipes-extended/polkit/polkit_0.119.bb index 66bbf735f0..9444cb9f2d 100644 --- a/meta-oe/recipes-extended/polkit/polkit_0.119.bb +++ b/meta-oe/recipes-extended/polkit/polkit_0.119.bb @@ -58,7 +58,7 @@ FILES:${PN}:append = " \ FILES:${PN}-examples = "${bindir}/*example*" USERADD_PACKAGES = "${PN}" -USERADD_PARAM:${PN} = "--system --no-create-home --user-group --home-dir ${sysconfdir}/${BPN}-1 polkitd" +USERADD_PARAM:${PN} = "--system --no-create-home --user-group --home-dir ${sysconfdir}/${BPN}-1 --shell /bin/nologin polkitd" SYSTEMD_SERVICE:${PN} = "${BPN}.service" SYSTEMD_AUTO_ENABLE = "disable" |