diff options
author | Jackie Huang <jackie.huang@windriver.com> | 2014-03-04 11:39:00 +0800 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-03-07 14:55:27 +0000 |
commit | 7f922a7b65690fcc110413b83953d466d46e977b (patch) | |
tree | 3afa1ce45ca9541d5505f54d24e7c123a36bb7cd | |
parent | 52f7a1b403eabc52ca104f752484ec1572f2d9dd (diff) | |
download | openembedded-core-7f922a7b65690fcc110413b83953d466d46e977b.tar.gz openembedded-core-7f922a7b65690fcc110413b83953d466d46e977b.tar.bz2 openembedded-core-7f922a7b65690fcc110413b83953d466d46e977b.zip |
nfs-utils: run rpc.statd as rpcuser:rpcuser instead of rpcuser:root
For security policy, change the group of running rpc.stdtd to rpcuser,
just like Radhat does.
Signed-off-by: Jackie Huang <jackie.huang@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
-rw-r--r-- | meta/recipes-connectivity/nfs-utils/nfs-utils/nfscommon | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/meta/recipes-connectivity/nfs-utils/nfs-utils/nfscommon b/meta/recipes-connectivity/nfs-utils/nfs-utils/nfscommon index c949b96d1e..65fdd1dd4f 100644 --- a/meta/recipes-connectivity/nfs-utils/nfs-utils/nfscommon +++ b/meta/recipes-connectivity/nfs-utils/nfs-utils/nfscommon @@ -36,7 +36,7 @@ create_directories(){ umask 077 mkdir -p rpc_pipefs mkdir -p sm sm.bak statd - chown rpcuser sm sm.bak statd + chown rpcuser:rpcuser sm sm.bak statd test -w statd/state || { rm -f statd/state :>statd/state @@ -50,7 +50,7 @@ create_directories(){ } done ) - chown rpcuser "$NFS_STATEDIR" + chown rpcuser:rpcuser "$NFS_STATEDIR" echo done } |