diff options
| author | Yi Zhao <yi.zhao@windriver.com> | 2018-08-01 14:46:38 +0800 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2018-08-02 09:30:06 +0100 |
| commit | 7a46ca79b18527a56de470fcaaf95c870c097cf6 (patch) | |
| tree | 73beb078ff1c3b152fc2b279373bb0e267c20653 | |
| parent | 848031cf0b89b752c6fedcb63fc6938642a87fd8 (diff) | |
| download | openembedded-core-7a46ca79b18527a56de470fcaaf95c870c097cf6.tar.gz openembedded-core-7a46ca79b18527a56de470fcaaf95c870c097cf6.tar.bz2 openembedded-core-7a46ca79b18527a56de470fcaaf95c870c097cf6.zip | |
sudo: add PACKAGECONFIG for pam-wheel
The pam_wheel PAM module is used to enforce the so-called wheel group.
By default it permits root access to the system if the applicant user is
a member of the wheel group.
Add PACKAGECONFIG to enable pam_wheel module for sudo.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
| -rw-r--r-- | meta/recipes-extended/sudo/sudo.inc | 1 | ||||
| -rw-r--r-- | meta/recipes-extended/sudo/sudo_1.8.23.bb | 4 |
2 files changed, 5 insertions, 0 deletions
diff --git a/meta/recipes-extended/sudo/sudo.inc b/meta/recipes-extended/sudo/sudo.inc index 6e57669a01..69dccde592 100644 --- a/meta/recipes-extended/sudo/sudo.inc +++ b/meta/recipes-extended/sudo/sudo.inc @@ -19,6 +19,7 @@ inherit autotools PACKAGECONFIG ??= "" PACKAGECONFIG[zlib] = "--enable-zlib,--disable-zlib,zlib" +PACKAGECONFIG[pam-wheel] = ",,,pam-plugin-wheel" CONFFILES_${PN} = "${sysconfdir}/sudoers" diff --git a/meta/recipes-extended/sudo/sudo_1.8.23.bb b/meta/recipes-extended/sudo/sudo_1.8.23.bb index 9756fe26d7..ab9c8cbea2 100644 --- a/meta/recipes-extended/sudo/sudo_1.8.23.bb +++ b/meta/recipes-extended/sudo/sudo_1.8.23.bb @@ -22,6 +22,10 @@ EXTRA_OECONF += " \ do_install_append () { if [ "${@bb.utils.filter('DISTRO_FEATURES', 'pam', d)}" ]; then install -D -m 644 ${WORKDIR}/sudo.pam ${D}/${sysconfdir}/pam.d/sudo + if ${@bb.utils.contains('PACKAGECONFIG', 'pam-wheel', 'true', 'false', d)} ; then + echo 'auth required pam_wheel.so use_uid' >>${D}${sysconfdir}/pam.d/sudo + sed -i 's/# \(%wheel ALL=(ALL) ALL\)/\1/' ${D}${sysconfdir}/sudoers + fi fi chmod 4111 ${D}${bindir}/sudo |