From: Martin Jansa <martin.jansa@gmail.com>
To: openembedded-devel@lists.openembedded.org
Subject: Re: [PATCH 1/2] mariadb: use /bin/false as the login shell
Date: Sun, 20 Apr 2014 11:28:29 +0200 [thread overview]
Message-ID: <20140420092829.GF2486@jama> (raw)
In-Reply-To: <bbac515278f9507ebb997506af418a1b8fe02753.1397459226.git.Chong.Lu@windriver.com>
[-- Attachment #1: Type: text/plain, Size: 1423 bytes --]
On Mon, Apr 14, 2014 at 03:16:38PM +0800, Chong Lu wrote:
> Use /bin/false as the login shell, just like what Ubuntu does,
> otherwise there might be secure issue.
1/2 Merged, thanks
2/2 has question from koen, which needs to be resolved first
>
> Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
> Signed-off-by: Chong Lu <Chong.Lu@windriver.com>
> ---
> meta-oe/recipes-support/mysql/mariadb_5.1.67.inc | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/meta-oe/recipes-support/mysql/mariadb_5.1.67.inc b/meta-oe/recipes-support/mysql/mariadb_5.1.67.inc
> index 100b3a7..37a0f0c 100644
> --- a/meta-oe/recipes-support/mysql/mariadb_5.1.67.inc
> +++ b/meta-oe/recipes-support/mysql/mariadb_5.1.67.inc
> @@ -35,7 +35,7 @@ INITSCRIPT_NAME = "mysqld"
> INITSCRIPT_PARAMS = "start 45 5 . stop 45 0 6 1 ."
>
> USERADD_PACKAGES = "${PN}-server"
> -USERADD_PARAM_${PN}-server = "--system --home-dir /var/mysql -g nogroup mysql"
> +USERADD_PARAM_${PN}-server = "--system --home-dir /var/mysql -g nogroup --shell /bin/false mysql"
>
>
> export ac_cv_path_PS="/bin/ps"
> --
> 1.8.1.2
>
> --
> _______________________________________________
> Openembedded-devel mailing list
> Openembedded-devel@lists.openembedded.org
> http://lists.openembedded.org/mailman/listinfo/openembedded-devel
--
Martin 'JaMa' Jansa jabber: Martin.Jansa@gmail.com
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 205 bytes --]
next prev parent reply other threads:[~2014-04-20 9:28 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-04-14 7:16 [PATCH 0/2] mariadb: use /bin/false as the login shell and add perl to RDEPENDS Chong Lu
2014-04-14 7:16 ` [PATCH 1/2] mariadb: use /bin/false as the login shell Chong Lu
2014-04-20 9:28 ` Martin Jansa [this message]
2014-04-14 7:16 ` [PATCH 2/2] mariadb: add perl to RDEPENDS Chong Lu
2014-04-14 7:43 ` Koen Kooi
2014-04-14 8:06 ` Chong Lu
2014-04-14 8:35 ` Koen Kooi
2014-04-14 8:56 ` Chong Lu
2014-04-14 9:06 ` Koen Kooi
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20140420092829.GF2486@jama \
--to=martin.jansa@gmail.com \
--cc=openembedded-devel@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.