From 91ee2f30326ae626b40f6a80dc47eac1085051b9 Mon Sep 17 00:00:00 2001 From: José Bollo Date: Tue, 7 Mar 2017 17:30:18 +0100 Subject: shadow: 'useradd' copies root's extended attributes MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The copy of extended attributes is interesting for Smack systems because it allows to set the security template of the user's home directories without modifying the tools (useradd here). But the version of useradd that copies the extended attributes doesn't copy the extended attributes of the root. This can make use of homes impossible! This patch corrects the issue by copying the extended attributes of the root. This includes 2 patches to implement the behaviour: one for the target and one for the native. The patch for the target was submitted upstream (see below) The patch for the native couldn't be submitted upstream because it applies on a patch specific to open-embedded (that was refused upstream). Upstream-Status: Submitted (http://lists.alioth.debian.org/pipermail/pkg-shadow-commits/2017-March/003804.html) Change-Id: I7ced318a02206fd3f15a6995f59bb82b6c6453d5 Signed-off-by: José Bollo Signed-off-by: Stephane Desneux --- meta-app-framework/recipes-extended/shadow/shadow_%.bbappend | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 meta-app-framework/recipes-extended/shadow/shadow_%.bbappend (limited to 'meta-app-framework/recipes-extended/shadow/shadow_%.bbappend') diff --git a/meta-app-framework/recipes-extended/shadow/shadow_%.bbappend b/meta-app-framework/recipes-extended/shadow/shadow_%.bbappend new file mode 100644 index 000000000..f08435502 --- /dev/null +++ b/meta-app-framework/recipes-extended/shadow/shadow_%.bbappend @@ -0,0 +1,4 @@ +FILESEXTRAPATHS_prepend := "${THISDIR}/files:" + +SRC_URI_append_class-target = " file://0001-useradd-copy-extended-attributes-of-home.patch " +SRC_URI_append_class-native = " file://0001-useradd-copy-extended-attributes-of-home-native.patch " -- cgit 1.2.3-korg