From: "Peter A. Bigot" <pab@pabigot.com>
To: openembedded-core@lists.openembedded.org
Subject: [PATCH V2 0/7] prevent pseudo host passwd/group contamination
Date: Sat, 15 Nov 2014 18:05:44 -0600 [thread overview]
Message-ID: <cover.1416081855.git.pab@pabigot.com> (raw)
For background see:
http://lists.openembedded.org/pipermail/openembedded-core/2014-November/098465.html
http://lists.openembedded.org/pipermail/openembedded-core/2014-November/098467.html
Changes in V2:
* Correct faulty assumption that ${STAGING_DIR_TARGET} was ever a valid
fallback source
* Correct pseudo patch header to remove reference to faulty assumption
* Install fallback files read-only and note that in no circumstance
should they ever be modified
* Add a new patch that ensures useradd.bbclass informs pseudo of the
directory in which it expects to find the files that it wants to
modify
The following changes since commit edaeb8940813b620090a0797ad3b6a076897512d:
bitbake: cooker.py: fix loginfo op being set to an invalid value (2014-11-12 17:04:50 +0000)
are available in the git repository at:
git://git.yoctoproject.org/poky-contrib pabigot/pseudo
http://git.yoctoproject.org/cgit.cgi/poky-contrib/log/?h=pabigot/pseudo
Peter A. Bigot (7):
pseudo: support --without-passwd-fallback configuration option
pseudo: support multiple search directories in PSEUDO_PASSWD
image.bbclass: search both rootfs and native staging for passwd files
pseudo: default --without-passwd-fallback
pseudo: provide fallback passwd and group files
bitbake.conf: pseudo fall back to last-resort passwd files
useradd.bbclass: set PSEUDO_PASSWD consistent with root directory
meta/classes/image.bbclass | 4 +-
meta/classes/useradd.bbclass | 2 +
meta/conf/bitbake.conf | 2 +-
meta/recipes-devtools/pseudo/files/fallback-group | 2 +
meta/recipes-devtools/pseudo/files/fallback-passwd | 1 +
...do_client.c-protect-pwd_lck-against-magic.patch | 56 ++++++++++
..._util-modify-interface-to-pseudo_etc_file.patch | 70 +++++++++++++
...nt.c-support-multiple-directories-in-PSEU.patch | 116 +++++++++++++++++++++
meta/recipes-devtools/pseudo/pseudo_1.6.2.bb | 14 ++-
9 files changed, 264 insertions(+), 3 deletions(-)
create mode 100644 meta/recipes-devtools/pseudo/files/fallback-group
create mode 100644 meta/recipes-devtools/pseudo/files/fallback-passwd
create mode 100644 meta/recipes-devtools/pseudo/pseudo-1.6.2/0001-pseudo_client.c-protect-pwd_lck-against-magic.patch
create mode 100644 meta/recipes-devtools/pseudo/pseudo-1.6.2/0002-pseudo_util-modify-interface-to-pseudo_etc_file.patch
create mode 100644 meta/recipes-devtools/pseudo/pseudo-1.6.2/0003-pseudo_client.c-support-multiple-directories-in-PSEU.patch
--
1.8.5.5
next reply other threads:[~2014-11-16 0:06 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-11-16 0:05 Peter A. Bigot [this message]
2014-11-16 0:05 ` [PATCH V2 1/7] pseudo: support --without-passwd-fallback configuration option Peter A. Bigot
2014-11-16 0:05 ` [PATCH V2 2/7] pseudo: support multiple search directories in PSEUDO_PASSWD Peter A. Bigot
2014-11-16 0:05 ` [PATCH V2 3/7] image.bbclass: search both rootfs and native staging for passwd files Peter A. Bigot
2014-11-16 0:05 ` [PATCH V2 4/7] pseudo: default --without-passwd-fallback Peter A. Bigot
2014-11-16 0:05 ` [PATCH V2 5/7] pseudo: provide fallback passwd and group files Peter A. Bigot
2014-11-16 0:05 ` [PATCH V2 6/7] bitbake.conf: pseudo fall back to last-resort passwd files Peter A. Bigot
2014-11-16 0:05 ` [PATCH V2 7/7] useradd.bbclass: set PSEUDO_PASSWD consistent with root directory Peter A. Bigot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1416081855.git.pab@pabigot.com \
--to=pab@pabigot.com \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.