mbox series

[v3,0/3] Disable shell for default users

Message ID 20220430024812.745583-1-jiaqing.zhao@linux.intel.com
Headers show
Series Disable shell for default users | expand

Message

Jiaqing Zhao April 30, 2022, 2:48 a.m. UTC
This patchset changes the default shell of default users other than
root and sync from /bin/sh to /sbin/nologin to fix potential security
vulnerabilities. This is backported from base-passwd 3.5.30.

Upstream issue trackers:
https://launchpad.net/bugs/216813
https://launchpad.net/bugs/248844

v3:
Fix ptest for sed and strace.
v2:
Fix indentation in bbfile.

Jiaqing Zhao (3):
  base-passwd: Disable shell for default users
  sed: Specify shell for "nobody" user in run-ptest
  strace: Don't run ptest as "nobody"

 .../base-passwd/disable-shell.patch           | 57 +++++++++++++++++++
 .../base-passwd/base-passwd_3.5.29.bb         |  1 +
 meta/recipes-devtools/strace/strace/run-ptest |  6 +-
 meta/recipes-extended/sed/sed/run-ptest       |  2 +-
 4 files changed, 60 insertions(+), 6 deletions(-)
 create mode 100644 meta/recipes-core/base-passwd/base-passwd/disable-shell.patch