]> code.ossystems Code Review - openembedded-core.git/commit
shadow: 'useradd' copies root's extended attributes
authorJosé Bollo <jose.bollo@iot.bzh>
Mon, 13 Mar 2017 09:57:23 +0000 (10:57 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 17 Mar 2017 15:37:06 +0000 (15:37 +0000)
commiteed66e85af5ca6bbdd80cc3d5cf8453e8d8880bc
treef7df7d8e766defe7f8232e13cddf0f8b535d939a
parent5b5a506a6d81095c967304fe4ec38a4bc3dc1edd
shadow: 'useradd' copies root's extended attributes

The copy of extended attributes is interesting for
Smack systems because it allows to set the security
template of the user's home directories without
modifying the tools (useradd here). But the version
of useradd that copies the extended attributes doesn't
copy the extended attributes of the root. This can make
use of homes impossible! This patch corrects the issue
by copying the extended attributes of the root directory:
/home/user will get the extended attributes of /etc/skel.

The patch is submitted upstream (see
http://lists.alioth.debian.org/pipermail/pkg-shadow-commits/2017-March/003804.html)

The existing patch specific to open-embedded is updated:
  0001-useradd.c-create-parent-directories-when-necessary.patch

Also, attr are activated for native tools.
This is needed when users are created during image creation.

Signed-off-by: José Bollo <jose.bollo@iot.bzh>
Signed-off-by: Ross Burton <ross.burton@intel.com>
meta/recipes-extended/shadow/files/0001-useradd-copy-extended-attributes-of-home.patch [new file with mode: 0644]
meta/recipes-extended/shadow/files/0001-useradd.c-create-parent-directories-when-necessary.patch
meta/recipes-extended/shadow/files/allow-for-setting-password-in-clear-text.patch
meta/recipes-extended/shadow/shadow.inc