6a6ea416e1
There is security related issue with lshell, and it is not maintained now. So remove it from our system to avoid security issue. To remove lshell: 1. Package sudo-config is created for wrs.sudo configure file following the refactor process. 2. ldapusersetup in ldapscripts is modified to use bash only. lshell support is removed. ldapusersetup related patches are merged into 1 for easy maintenance. Test has been done: Build and deploy test is done, also unit tests for ldap are executed with pass, except lshell related test. Closes-Bug: 1795451 Change-Id: Ia5de1bc94d22eb6c9bea6d9a96e92564ad848b19 Signed-off-by: slin14 <shuicheng.lin@intel.com>
33 lines
795 B
RPMSpec
33 lines
795 B
RPMSpec
Summary: StarlingX Sudo Configuration File
|
|
Name: sudo-config
|
|
Version: 1.0
|
|
Release: %{tis_patch_ver}%{?_tis_dist}
|
|
License: Apache-2.0
|
|
Group: base
|
|
Packager: StarlingX
|
|
URL: unknown
|
|
|
|
Source0: wrs.sudo
|
|
Source1: LICENSE
|
|
|
|
%define WRSROOT_P cBglipPpsKwBQ
|
|
|
|
%description
|
|
StarlingX sudo configuration file
|
|
|
|
%install
|
|
install -d %{buildroot}/%{_sysconfdir}/sudoers.d
|
|
install -m 440 %{SOURCE0} %{buildroot}/%{_sysconfdir}/sudoers.d/wrs
|
|
|
|
%pre
|
|
getent group wrs >/dev/null || groupadd -r wrs
|
|
getent group wrs_protected >/dev/null || groupadd -f -g 345 wrs_protected
|
|
getent passwd wrsroot > /dev/null || \
|
|
useradd -m -g wrs -G root,wrs_protected \
|
|
-d /home/wrsroot -p %{WRSROOT_P} \
|
|
-s /bin/sh wrsroot 2> /dev/null || :
|
|
|
|
%files
|
|
%license ../SOURCES/LICENSE
|
|
%config(noreplace) %{_sysconfdir}/sudoers.d/wrs
|