mirror of
https://git.yoctoproject.org/poky
synced 2026-05-09 05:29:32 +00:00
systemd: tighten timesyncd and journal-gateway user accounts
Make sure that systemd-timesync and systemd-journal-gateway are created without dedicated home directories, home set to / and /bin/nologin as shell. This makes us in sync with what systemd-sysusers sets when adding users during startup. (From OE-Core rev: a415253fa234212e82cf4ad230faf5f6af005403) Signed-off-by: Maciej Borzecki <maciej.borzecki@open-rnd.pl> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
6be3031dd4
commit
4d3ca42421
@@ -304,8 +304,8 @@ SYSTEMD_PACKAGES = "${PN}-binfmt"
|
||||
SYSTEMD_SERVICE_${PN}-binfmt = "systemd-binfmt.service"
|
||||
|
||||
USERADD_PACKAGES = "${PN}"
|
||||
USERADD_PARAM_${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'microhttpd', '--system systemd-journal-gateway;', '', d)}"
|
||||
USERADD_PARAM_${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'timesyncd', '--system systemd-timesync;', '', d)}"
|
||||
USERADD_PARAM_${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'microhttpd', '--system -d / -M --shell /bin/nologin systemd-journal-gateway;', '', d)}"
|
||||
USERADD_PARAM_${PN} += "${@bb.utils.contains('PACKAGECONFIG', 'timesyncd', '--system -d / -M --shell /bin/nologin systemd-timesync;', '', d)}"
|
||||
GROUPADD_PARAM_${PN} = "-r lock; -r systemd-journal"
|
||||
|
||||
FILES_${PN}-analyze = "${bindir}/systemd-analyze"
|
||||
|
||||
Reference in New Issue
Block a user