NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

package/openssh: Add sysusers.d snippet

Browse Source 
Whether using the new sysusers.d snippet, or adding an entry to
/etc/password, set the service's home directory to /var/empty.
See README.privsep included as part of the openssh distribution.

Signed-off-by: Chris Lesiak <chris.lesiak@licor.com>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
This commit is contained in:
Chris Lesiak 2019-02-06 16:36:39 +00:00 committed by Arnout Vandecappelle (Essensium/Mind)
parent 18fb3abad1
commit 9acbf811cd
2 changed files with 13 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
package/openssh/openssh.mk
View File

@ -19,10 +19,6 @@ OPENSSH_CONF_OPTS = \
--disable-wtmpx \ --disable-wtmpx \
--disable-strip --disable-strip
define OPENSSH_USERS
sshd -1 sshd -1 * - - - SSH drop priv user
endef
define OPENSSH_PERMISSIONS define OPENSSH_PERMISSIONS
/var/empty d 755 root root - - - - - /var/empty d 755 root root - - - - -
endef endef
@ -61,12 +57,24 @@ else
OPENSSH_CONF_OPTS += --without-selinux OPENSSH_CONF_OPTS += --without-selinux
endif endif
ifeq ($(BR2_PACKAGE_SYSTEMD_SYSUSERS),y)
define OPENSSH_INSTALL_SYSTEMD_SYSUSERS
$(INSTALL) -m 0644 -D package/openssh/sshd-sysusers.conf \
$(TARGET_DIR)/usr/lib/sysusers.d/sshd.conf
endef
else
define OPENSSH_USERS
sshd -1 sshd -1 * /var/empty - - SSH drop priv user
endef
endif
define OPENSSH_INSTALL_INIT_SYSTEMD define OPENSSH_INSTALL_INIT_SYSTEMD
$(INSTALL) -D -m 644 package/openssh/sshd.service \ $(INSTALL) -D -m 644 package/openssh/sshd.service \
$(TARGET_DIR)/usr/lib/systemd/system/sshd.service $(TARGET_DIR)/usr/lib/systemd/system/sshd.service
mkdir -p $(TARGET_DIR)/etc/systemd/system/multi-user.target.wants mkdir -p $(TARGET_DIR)/etc/systemd/system/multi-user.target.wants
ln -fs ../../../../usr/lib/systemd/system/sshd.service \ ln -fs ../../../../usr/lib/systemd/system/sshd.service \
$(TARGET_DIR)/etc/systemd/system/multi-user.target.wants/sshd.service $(TARGET_DIR)/etc/systemd/system/multi-user.target.wants/sshd.service
$(OPENSSH_INSTALL_SYSTEMD_SYSUSERS)
endef endef
define OPENSSH_INSTALL_INIT_SYSV define OPENSSH_INSTALL_INIT_SYSV

1
package/openssh/sshd-sysusers.conf Normal file
View File

@ -0,0 +1 @@
u sshd - "SSH drop priv user" /var/empty