mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-10-15 06:17:16 +00:00
polkit: fix /etc/polkit-1/rules.d permissions
The recipe installs /etc/polkit-1/rules.d as polkitd:root 0700, but
polkit's own tmpfiles.d entry declares it as root:polkitd 0750:
d /etc/polkit-1/rules.d 0750 root polkitd - -
As a result, systemd-tmpfiles changes the ownership and mode of the
directory at every boot, and on a read-only root filesystem it fails
with:
systemd-tmpfiles[241]: fchownat() of /etc/polkit-1/rules.d failed: Read-only file system
The polkitd:root 0700 ownership was added to avoid rpm conflicts with the
polkit-group-rule-* packages, which no longer install into /etc since
commit d5e90541f8.
Match upstream instead. This is also the stricter setting, as polkitd
can read the rules but cannot modify them.
Signed-off-by: Sergio Prado <sergio.prado@e-labworks.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
1 parent
d6dc6766eb
commit
3db1e5866f
1 file changed
+3
-3
@@ -61,10 +61,10 @@ FILES:${PN}-dbus += "\
|
||||
"
|
||||
|
||||
do_install:append() {
|
||||
#Fix up permissions on polkit rules.d to work with rpm4 constraints
|
||||
# Match the ownership and mode set by polkit's own tmpfiles.d entry
|
||||
if ${@bb.utils.contains('PACKAGECONFIG', 'libs-only', 'false', 'true', d)}; then
|
||||
chmod 700 ${D}/${sysconfdir}/polkit-1/rules.d
|
||||
chown polkitd:root ${D}/${sysconfdir}/polkit-1/rules.d
|
||||
chmod 750 ${D}/${sysconfdir}/polkit-1/rules.d
|
||||
chown root:polkitd ${D}/${sysconfdir}/polkit-1/rules.d
|
||||
fi
|
||||
|
||||
# Polkit unconditionally installs a systemd service, remove it on SysVinit
|
||||
|
||||
Reference in new issue
Block a user