package/openssh: Add sysusers.d snippet
Whether using the new sysusers.d snippet, or adding an entry to /etc/password, set the service's home directory to /var/empty. See README.privsep included as part of the openssh distribution. Signed-off-by: Chris Lesiak <chris.lesiak@licor.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
This commit is contained in:
parent
18fb3abad1
commit
9acbf811cd
|
@ -19,10 +19,6 @@ OPENSSH_CONF_OPTS = \
|
||||||
--disable-wtmpx \
|
--disable-wtmpx \
|
||||||
--disable-strip
|
--disable-strip
|
||||||
|
|
||||||
define OPENSSH_USERS
|
|
||||||
sshd -1 sshd -1 * - - - SSH drop priv user
|
|
||||||
endef
|
|
||||||
|
|
||||||
define OPENSSH_PERMISSIONS
|
define OPENSSH_PERMISSIONS
|
||||||
/var/empty d 755 root root - - - - -
|
/var/empty d 755 root root - - - - -
|
||||||
endef
|
endef
|
||||||
|
@ -61,12 +57,24 @@ else
|
||||||
OPENSSH_CONF_OPTS += --without-selinux
|
OPENSSH_CONF_OPTS += --without-selinux
|
||||||
endif
|
endif
|
||||||
|
|
||||||
|
ifeq ($(BR2_PACKAGE_SYSTEMD_SYSUSERS),y)
|
||||||
|
define OPENSSH_INSTALL_SYSTEMD_SYSUSERS
|
||||||
|
$(INSTALL) -m 0644 -D package/openssh/sshd-sysusers.conf \
|
||||||
|
$(TARGET_DIR)/usr/lib/sysusers.d/sshd.conf
|
||||||
|
endef
|
||||||
|
else
|
||||||
|
define OPENSSH_USERS
|
||||||
|
sshd -1 sshd -1 * /var/empty - - SSH drop priv user
|
||||||
|
endef
|
||||||
|
endif
|
||||||
|
|
||||||
define OPENSSH_INSTALL_INIT_SYSTEMD
|
define OPENSSH_INSTALL_INIT_SYSTEMD
|
||||||
$(INSTALL) -D -m 644 package/openssh/sshd.service \
|
$(INSTALL) -D -m 644 package/openssh/sshd.service \
|
||||||
$(TARGET_DIR)/usr/lib/systemd/system/sshd.service
|
$(TARGET_DIR)/usr/lib/systemd/system/sshd.service
|
||||||
mkdir -p $(TARGET_DIR)/etc/systemd/system/multi-user.target.wants
|
mkdir -p $(TARGET_DIR)/etc/systemd/system/multi-user.target.wants
|
||||||
ln -fs ../../../../usr/lib/systemd/system/sshd.service \
|
ln -fs ../../../../usr/lib/systemd/system/sshd.service \
|
||||||
$(TARGET_DIR)/etc/systemd/system/multi-user.target.wants/sshd.service
|
$(TARGET_DIR)/etc/systemd/system/multi-user.target.wants/sshd.service
|
||||||
|
$(OPENSSH_INSTALL_SYSTEMD_SYSUSERS)
|
||||||
endef
|
endef
|
||||||
|
|
||||||
define OPENSSH_INSTALL_INIT_SYSV
|
define OPENSSH_INSTALL_INIT_SYSV
|
||||||
|
|
1
package/openssh/sshd-sysusers.conf
Normal file
1
package/openssh/sshd-sysusers.conf
Normal file
|
@ -0,0 +1 @@
|
||||||
|
u sshd - "SSH drop priv user" /var/empty
|
Loading…
Reference in a new issue