Patchwork rpcbind: add rpc user and run rpcbind daemon with rpc user

login
register
mail settings
Submitter jackie huang
Date March 4, 2014, 10:07 a.m.
Message ID <1393927677-18898-1-git-send-email-jackie.huang@windriver.com>
Download mbox | patch
Permalink /patch/67951/
State Accepted
Commit fa7d335f2282234f10310318b01f1c4fd02af3d9
Headers show

Comments

jackie huang - March 4, 2014, 10:07 a.m.
From: Jackie Huang <jackie.huang@windriver.com>

For security policy, change to run rpcbind daemon with rpc user
just like Redhat does, so set the --with-rpcuser to rpc and add rpc user.

Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
---
 meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb |    8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

Patch

diff --git a/meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb b/meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb
index d9eb1a2..23219e0 100644
--- a/meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb
+++ b/meta/recipes-extended/rpcbind/rpcbind_0.2.1.bb
@@ -37,7 +37,13 @@  INITSCRIPT_PARAMS = "start 12 2 3 4 5 . stop 60 0 1 6 ."
 SYSTEMD_SERVICE_${PN} = "rpcbind.service"
 SYSTEMD_AUTO_ENABLE = "disable"
 
-EXTRA_OECONF += " --enable-warmstarts "
+inherit useradd
+
+USERADD_PACKAGES = "${PN}"
+USERADD_PARAM_${PN} = "--system --no-create-home \
+                       --shell /bin/false --user-group rpc"
+
+EXTRA_OECONF += " --enable-warmstarts --with-rpcuser=rpc"
 
 do_install_append () {
 	mv ${D}${bindir} ${D}${sbindir}