Patchwork nfs-utils: run rpc.statd as rpcuser:rpcuser instead of rpcuser:root

login
register
mail settings
Submitter jackie huang
Date March 4, 2014, 3:39 a.m.
Message ID <1393904340-21216-1-git-send-email-jackie.huang@windriver.com>
Download mbox | patch
Permalink /patch/67943/
State Accepted
Commit c5c99de41939f201102f643f875abd16fa65fece
Headers show

Comments

jackie huang - March 4, 2014, 3:39 a.m.
From: Jackie Huang <jackie.huang@windriver.com>

For security policy, change the group of running rpc.stdtd to rpcuser,
just like Radhat does.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
---
 .../nfs-utils/nfs-utils/nfscommon                  |    4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

Patch

diff --git a/meta/recipes-connectivity/nfs-utils/nfs-utils/nfscommon b/meta/recipes-connectivity/nfs-utils/nfs-utils/nfscommon
index c949b96..65fdd1d 100644
--- a/meta/recipes-connectivity/nfs-utils/nfs-utils/nfscommon
+++ b/meta/recipes-connectivity/nfs-utils/nfs-utils/nfscommon
@@ -36,7 +36,7 @@  create_directories(){
 		umask 077
 		mkdir -p rpc_pipefs
 		mkdir -p sm sm.bak statd
-		chown rpcuser sm sm.bak statd
+		chown rpcuser:rpcuser sm sm.bak statd
 		test -w statd/state || {
 			rm -f statd/state
 			:>statd/state
@@ -50,7 +50,7 @@  create_directories(){
 			}
 		done
 	)
-	chown rpcuser "$NFS_STATEDIR"
+	chown rpcuser:rpcuser "$NFS_STATEDIR"
 	echo done
 }