From patchwork Mon Jan 29 06:23:28 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Li Wang X-Patchwork-Id: 38435 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A4E62C47422 for ; Mon, 29 Jan 2024 06:26:44 +0000 (UTC) Received: from mx0b-0064b401.pphosted.com (mx0b-0064b401.pphosted.com [205.220.178.238]) by mx.groups.io with SMTP id smtpd.web11.8551.1706509597955765424 for ; Sun, 28 Jan 2024 22:26:38 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@windriver.com header.s=PPS06212021 header.b=dJXSPtRx; spf=permerror, err=parse error for token &{10 18 %{ir}.%{v}.%{d}.spf.has.pphosted.com}: invalid domain name (domain: windriver.com, ip: 205.220.178.238, mailfrom: prvs=27589f0060=li.wang@windriver.com) Received: from pps.filterd (m0250811.ppops.net [127.0.0.1]) by mx0a-0064b401.pphosted.com (8.17.1.24/8.17.1.24) with ESMTP id 40T5IXZg013773 for ; Mon, 29 Jan 2024 06:26:37 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=windriver.com; h=from:to:subject:date:message-id:mime-version :content-transfer-encoding:content-type; s=PPS06212021; bh=IlRw9 g19LG+2eh8YVfQQUL+Ml80qmE51dpRdTb5jlpc=; b=dJXSPtRx+pUPNYPFVLQkU N3rH/f4gyera0s1GlaTsJSjvEO0knc/6BLbKiYzS1NlqkZQgsogq6N5OUdKlmF5R XVgPrOr21FdDetdf1CkgFsl+TWKtHT+v23PwrViRNP44ko0Ljhncof8ZRdBy3WEa xy8XHSK2+OAu4e8D0+7P3eOGW3VXJCFUAa1zStA9dppDV8hVs3HBqgg6nfqT/HAT 5fSB1nxLaHkFsBL4wu/rBBDZlhB/a4xGWxsSFmGDVHaqpI97ouus2Kq4/Z3jhYFu sWofJdWZcQPyVfAwZy88M0cNed1dX+xq2gBjAvr1+HjqSk9ooEKR29YTIKXQV431 g== Received: from ala-exchng01.corp.ad.wrs.com (ala-exchng01.wrs.com [147.11.82.252]) by mx0a-0064b401.pphosted.com (PPS) with ESMTPS id 3vvq1y9kv2-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NOT) for ; Mon, 29 Jan 2024 06:26:37 +0000 (GMT) Received: from ala-exchng01.corp.ad.wrs.com (147.11.82.252) by ala-exchng01.corp.ad.wrs.com (147.11.82.252) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.35; Sun, 28 Jan 2024 22:27:11 -0800 Received: from pek-lwang1-d1.wrs.com (147.11.136.210) by ala-exchng01.corp.ad.wrs.com (147.11.82.252) with Microsoft SMTP Server id 15.1.2507.35 via Frontend Transport; Sun, 28 Jan 2024 22:27:11 -0800 From: Li Wang To: Subject: [meta-networking][kirkstone][PATCH] radvd: add '--shell /sbin/nologin' to /etc/passwd Date: Mon, 29 Jan 2024 14:23:28 +0800 Message-ID: <20240129062328.1689458-1-li.wang@windriver.com> X-Mailer: git-send-email 2.25.1 MIME-Version: 1.0 X-Proofpoint-GUID: Lk2MN5Sgv4awkbe30-_CkfNgEFM8qPsT X-Proofpoint-ORIG-GUID: Lk2MN5Sgv4awkbe30-_CkfNgEFM8qPsT X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.272,Aquarius:18.0.1011,Hydra:6.0.619,FMLib:17.11.176.26 definitions=2024-01-29_02,2024-01-25_01,2023-05-22_02 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 bulkscore=0 impostorscore=0 priorityscore=1501 mlxscore=0 lowpriorityscore=0 clxscore=1015 phishscore=0 malwarescore=0 mlxlogscore=911 suspectscore=0 spamscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2401190000 definitions=main-2401290044 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Mon, 29 Jan 2024 06:26:44 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/108480 the default setting USERADD_PARAM of yocto: -s /bin/sh follow redhat policy: radvd/redhat/systemd/radvd.spec useradd ... -s /sbin/nologin ... Signed-off-by: Li Wang Signed-off-by: Khem Raj --- meta-networking/recipes-daemons/radvd/radvd.inc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta-networking/recipes-daemons/radvd/radvd.inc b/meta-networking/recipes-daemons/radvd/radvd.inc index 219d88f49..5da31b3f0 100644 --- a/meta-networking/recipes-daemons/radvd/radvd.inc +++ b/meta-networking/recipes-daemons/radvd/radvd.inc @@ -59,7 +59,7 @@ do_install:append () { USERADD_PACKAGES = "${PN}" GROUPADD_PARAM:${PN} = "--system nogroup" -USERADD_PARAM:${PN} = "--system --home ${localstatedir}/run/radvd/ -M -g nogroup radvd" +USERADD_PARAM:${PN} = "--system --home ${localstatedir}/run/radvd/ -M -g nogroup --shell /sbin/nologin radvd" pkg_postinst:${PN} () { if [ -z "$D" -a -x /etc/init.d/populate-volatile.sh ]; then