From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mga14.intel.com ([143.182.124.37]) by linuxtogo.org with esmtp (Exim 4.72) (envelope-from ) id 1QwFna-0008Kv-RC for openembedded-core@lists.openembedded.org; Wed, 24 Aug 2011 17:55:27 +0200 Received: from azsmga001.ch.intel.com ([10.2.17.19]) by azsmga102.ch.intel.com with ESMTP; 24 Aug 2011 08:50:35 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="4.68,275,1312182000"; d="scan'208";a="41953304" Received: from unknown (HELO swold-MOBL.bigsur.com) ([10.255.14.203]) by azsmga001.ch.intel.com with ESMTP; 24 Aug 2011 08:50:34 -0700 From: Saul Wold To: openembedded-core@lists.openembedded.org Date: Wed, 24 Aug 2011 08:50:30 -0700 Message-Id: X-Mailer: git-send-email 1.7.6 In-Reply-To: References: In-Reply-To: References: Subject: [CONSOLIDATED PULL 5/6] libpam: Setting suid bit for unix_chkpwd X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.11 Precedence: list Reply-To: Patches and discussions about the oe-core layer List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Aug 2011 15:55:27 -0000 From: Wenzong Fan [YOCTO #1252] While pam_unix.so required by an application on lsb image, it will need to call the unix_chkpwd to get userinfo from shadow file. This fix get a normal user could read shadow file via unix_chkpwd. Signed-off-by: Wenzong Fan --- meta/recipes-extended/pam/libpam_1.1.4.bb | 8 +++++++- 1 files changed, 7 insertions(+), 1 deletions(-) diff --git a/meta/recipes-extended/pam/libpam_1.1.4.bb b/meta/recipes-extended/pam/libpam_1.1.4.bb index ae20a97..d6f95b1 100644 --- a/meta/recipes-extended/pam/libpam_1.1.4.bb +++ b/meta/recipes-extended/pam/libpam_1.1.4.bb @@ -9,7 +9,7 @@ SECTION = "base" LICENSE = "GPLv2+ | BSD" LIC_FILES_CHKSUM = "file://COPYING;md5=ca0395de9a86191a078b8b79302e3083" -PR = "r1" +PR = "r2" DEPENDS = "bison flex cracklib" RDEPENDS_${PN}-runtime = "libpam pam-plugin-deny pam-plugin-permit pam-plugin-warn pam-plugin-unix" @@ -85,3 +85,9 @@ do_install() { install -d ${D}${sysconfdir}/pam.d/ install -m 0644 ${WORKDIR}/pam.d/* ${D}${sysconfdir}/pam.d/ } + +pkg_postinst_pam-plugin-unix () { + # below is necessary to allow unix_chkpwd get user info from shadow file + # on lsb images + chmod 4755 ${sbindir}/unix_chkpwd +} -- 1.7.6