diff options
| author | Mykyta Dorokhin <mykyta.dorokhin@globallogic.com> | 2022-03-15 12:51:48 +0200 |
|---|---|---|
| committer | John Klug <john.klug@multitech.com> | 2022-03-15 09:12:10 -0500 |
| commit | f9706ed8c29085ca1d1e553e3b4372f245e4ba3c (patch) | |
| tree | 2f64b6c379132cef2661447589b0940f61110d36 /recipes-tpm2/tpm2-tss | |
| parent | c170ebccd8ea303d689689e654652925fcbc5323 (diff) | |
| download | meta-mlinux-f9706ed8c29085ca1d1e553e3b4372f245e4ba3c.tar.gz meta-mlinux-f9706ed8c29085ca1d1e553e3b4372f245e4ba3c.tar.bz2 meta-mlinux-f9706ed8c29085ca1d1e553e3b4372f245e4ba3c.zip | |
Fix incorrect usage of extrausers class instead of useradd class in tpm2-tss_2.3.2.bb recipe.
Wrong usage leads to the folowing:
bash# cat /etc/group | grep 1000
tss:x:1000:
admin:x:1000:
bash# cat /etc/passwd | grep 1000
tss:x:999:1000::/var/lib/tpm:/bin/false
admin:x:1000:1000:admin:/home/admin:/bin/bash
Fixed in mainline yocto (tpm2-tss_3.1.0.bb):
https://git.yoctoproject.org/meta-security/commit/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.1.0.bb?id=da23c2a094b2e1a87da2932552ec96c0f842a639
Diffstat (limited to 'recipes-tpm2/tpm2-tss')
| -rw-r--r-- | recipes-tpm2/tpm2-tss/tpm2-tss_2.3.2.bbappend | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.2.bbappend b/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.2.bbappend new file mode 100644 index 0000000..56c16c2 --- /dev/null +++ b/recipes-tpm2/tpm2-tss/tpm2-tss_2.3.2.bbappend @@ -0,0 +1,24 @@ +inherit useradd + +# +# Incorrect usage of extrausers class instead of useradd class in tpm2-tss_2.3.2.bb recipe leads to the folowing: +# +# bash# cat /etc/group | grep 1000 +# tss:x:1000: +# admin:x:1000: +# +# bash# cat /etc/passwd | grep 1000 +# tss:x:999:1000::/var/lib/tpm:/bin/false +# admin:x:1000:1000:admin:/home/admin:/bin/bash +# +# Fixed in mainline yocto: +# https://git.yoctoproject.org/meta-security/commit/meta-tpm/recipes-tpm2/tpm2-tss/tpm2-tss_3.1.0.bb?id=da23c2a094b2e1a87da2932552ec96c0f842a639 +# + +# base recipe inherits extrausers. There is nothing we can do to remove this. So use empty values. +EXTRA_USERS_PARAMS = "" + +# These are useradd bbclass values +USERADD_PACKAGES = "${PN}" +GROUPADD_PARAM_${PN} = "--system tss" +USERADD_PARAM_${PN} = "--system -M -d /var/lib/tpm -s /bin/false -g tss tss" |