From: "Peter A. Bigot" <pab@pabigot.com>
To: openembedded-core@lists.openembedded.org
Subject: [PATCH V2 0/7] prevent pseudo host passwd/group contamination
Date: Sat, 15 Nov 2014 18:05:44 -0600 [thread overview]
Message-ID: <cover.1416081855.git.pab@pabigot.com> (raw)
For background see:
http://lists.openembedded.org/pipermail/openembedded-core/2014-November/098465.html
http://lists.openembedded.org/pipermail/openembedded-core/2014-November/098467.html
Changes in V2:
* Correct faulty assumption that ${STAGING_DIR_TARGET} was ever a valid
fallback source
* Correct pseudo patch header to remove reference to faulty assumption
* Install fallback files read-only and note that in no circumstance
should they ever be modified
* Add a new patch that ensures useradd.bbclass informs pseudo of the
directory in which it expects to find the files that it wants to
modify
The following changes since commit edaeb8940813b620090a0797ad3b6a076897512d:
bitbake: cooker.py: fix loginfo op being set to an invalid value (2014-11-12 17:04:50 +0000)
are available in the git repository at:
git://git.yoctoproject.org/poky-contrib pabigot/pseudo
http://git.yoctoproject.org/cgit.cgi/poky-contrib/log/?h=pabigot/pseudo
Peter A. Bigot (7):
pseudo: support --without-passwd-fallback configuration option
pseudo: support multiple search directories in PSEUDO_PASSWD
image.bbclass: search both rootfs and native staging for passwd files
pseudo: default --without-passwd-fallback
pseudo: provide fallback passwd and group files
bitbake.conf: pseudo fall back to last-resort passwd files
useradd.bbclass: set PSEUDO_PASSWD consistent with root directory
meta/classes/image.bbclass | 4 +-
meta/classes/useradd.bbclass | 2 +
meta/conf/bitbake.conf | 2 +-
meta/recipes-devtools/pseudo/files/fallback-group | 2 +
meta/recipes-devtools/pseudo/files/fallback-passwd | 1 +
...do_client.c-protect-pwd_lck-against-magic.patch | 56 ++++++++++
..._util-modify-interface-to-pseudo_etc_file.patch | 70 +++++++++++++
...nt.c-support-multiple-directories-in-PSEU.patch | 116 +++++++++++++++++++++
meta/recipes-devtools/pseudo/pseudo_1.6.2.bb | 14 ++-
9 files changed, 264 insertions(+), 3 deletions(-)
create mode 100644 meta/recipes-devtools/pseudo/files/fallback-group
create mode 100644 meta/recipes-devtools/pseudo/files/fallback-passwd
create mode 100644 meta/recipes-devtools/pseudo/pseudo-1.6.2/0001-pseudo_client.c-protect-pwd_lck-against-magic.patch
create mode 100644 meta/recipes-devtools/pseudo/pseudo-1.6.2/0002-pseudo_util-modify-interface-to-pseudo_etc_file.patch
create mode 100644 meta/recipes-devtools/pseudo/pseudo-1.6.2/0003-pseudo_client.c-support-multiple-directories-in-PSEU.patch
--
1.8.5.5
next reply other threads:[~2014-11-16 0:06 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-11-16 0:05 Peter A. Bigot [this message]
2014-11-16 0:05 ` [PATCH V2 1/7] pseudo: support --without-passwd-fallback configuration option Peter A. Bigot
2014-11-16 0:05 ` [PATCH V2 2/7] pseudo: support multiple search directories in PSEUDO_PASSWD Peter A. Bigot
2014-11-16 0:05 ` [PATCH V2 3/7] image.bbclass: search both rootfs and native staging for passwd files Peter A. Bigot
2014-11-16 0:05 ` [PATCH V2 4/7] pseudo: default --without-passwd-fallback Peter A. Bigot
2014-11-16 0:05 ` [PATCH V2 5/7] pseudo: provide fallback passwd and group files Peter A. Bigot
2014-11-16 0:05 ` [PATCH V2 6/7] bitbake.conf: pseudo fall back to last-resort passwd files Peter A. Bigot
2014-11-16 0:05 ` [PATCH V2 7/7] useradd.bbclass: set PSEUDO_PASSWD consistent with root directory Peter A. Bigot
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1416081855.git.pab@pabigot.com \
--to=pab@pabigot.com \
--cc=openembedded-core@lists.openembedded.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox