mirror of
https://git.yoctoproject.org/meta-security
synced 2026-05-07 04:58:47 +00:00
trousers: tcsd.conf must be owned tss:tss
The upstream dist/Makefile.am ensures that /etc/tcsd.conf is owned by tss:tss, and that must not be changed because otherwise tcsd refuses to start. In addition, tss group and user should be added as special system group resp. user, because they are not normal users. This also avoids the host-user-contaminated QA warning because the "tss" user will typically not get assigned a UID from the same range as the host user that is used for building. Signed-off-by: Patrick Ohly <patrick.ohly@intel.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
committed by
Armin Kuster
parent
4a60f0f9ea
commit
f3ce860a35
@@ -39,7 +39,6 @@ do_install_append() {
|
||||
install -m 0644 ${WORKDIR}/tcsd.service ${D}${systemd_unitdir}/system/
|
||||
sed -i -e 's#@SBINDIR@#${sbindir}#g' ${D}${systemd_unitdir}/system/tcsd.service
|
||||
fi
|
||||
chown -R root:root ${D}${sysconfdir}/tcsd.conf
|
||||
}
|
||||
|
||||
CONFFILES_${PN} += "${sysconfig}/tcsd.conf"
|
||||
@@ -107,8 +106,8 @@ INITSCRIPT_NAME = "trousers"
|
||||
INITSCRIPT_PARAMS = "start 99 2 3 4 5 . stop 19 0 1 6 ."
|
||||
|
||||
USERADD_PACKAGES = "${PN}"
|
||||
GROUPADD_PARAM_${PN} = "tss"
|
||||
USERADD_PARAM_${PN} = "-M -d /var/lib/tpm -s /bin/false -g tss tss"
|
||||
GROUPADD_PARAM_${PN} = "--system tss"
|
||||
USERADD_PARAM_${PN} = "--system -M -d /var/lib/tpm -s /bin/false -g tss tss"
|
||||
|
||||
SYSTEMD_PACKAGES = "${PN}"
|
||||
SYSTEMD_SERVICE_${PN} = "tcsd.service"
|
||||
|
||||
Reference in New Issue
Block a user