diff options
| author |   Ross Burton <ross.burton@intel.com> | 2017-08-04 17:27:00 +0100 |
|---|---|---|
| committer |   Richard Purdie <richard.purdie@linuxfoundation.org> | 2017-08-29 15:11:40 +0100 |
| commit | e56cb926c170f493ee2a9c4c63d0ecbf883d4685 (patch) | |
| tree | ae7e3a98b9212a7dbfddf826138034bd52e95cdb /meta/recipes-core/systemd/systemd_230.bb | |
| parent | b9e5a58f64e45be37b9532b20bf22d91257abbd6 (diff) | |
| download | openembedded-core-e56cb926c170f493ee2a9c4c63d0ecbf883d4685.tar.gz | |
systemd: refuse to load units with errors (CVE-2017-1000082)
If a unit has a statement such as User=0day where the username exists but is
strictly speaking invalid, the unit will be started as the root user instead.
Backport a patch from upstream to mitigate this by refusing to start units such
as this.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Diffstat (limited to 'meta/recipes-core/systemd/systemd_230.bb')
| -rw-r--r-- | meta/recipes-core/systemd/systemd_230.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-core/systemd/systemd_230.bb b/meta/recipes-core/systemd/systemd_230.bb index 702e377264..40f1428340 100644 --- a/meta/recipes-core/systemd/systemd_230.bb +++ b/meta/recipes-core/systemd/systemd_230.bb @@ -36,6 +36,7 @@ SRC_URI += " \ file://0022-socket-util-don-t-fail-if-libc-doesn-t-support-IDN.patch \ file://udev-re-enable-mount-propagation-for-udevd.patch \ file://CVE-2016-7795.patch \ + file://validate-user.patch \ " SRC_URI_append_libc-uclibc = "\ file://0002-units-Prefer-getty-to-agetty-in-console-setup-system.patch \ |