dirkmueller/systemd
SHA256
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

align permissions of /etc/machine-id to upstream code (bsc#1092269)

Browse Source 
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1028
This commit is contained in:
Thomas Blume 2018-05-08 11:42:09 +00:00 committed by Git OBS Bridge
parent 91770612d3
commit fdbc71d92c
4 changed files with 18 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
systemd-mini.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Tue May 8 10:33:10 UTC 2018 - Thomas.Blume@suse.com
- align permissions of /etc/machine-id to upstream code (bsc#1092269)
world writeable machine-id is a security issue
-------------------------------------------------------------------
Mon Apr 23 07:45:32 UTC 2018 - fbui@suse.com

4
systemd-mini.spec
View File

@ -687,9 +687,11 @@ fi
# machine ID in all images.
if [ $1 -eq 1 ]; then
touch %{_sysconfdir}/machine-id
chmod 666 %{_sysconfdir}/machine-id
fi
# check if /etc/machine-id is writeable and change it to readonly
[[ -w %{_sysconfdir}/machine-id ]] && chmod 444 %{_sysconfdir}/machine-id
%if ! 0%{?bootstrap}
pam-config --add --systemd || :
%endif

6
systemd.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Tue May 8 10:33:10 UTC 2018 - Thomas.Blume@suse.com
- align permissions of /etc/machine-id to upstream code (bsc#1092269)
world writeable machine-id is a security issue
-------------------------------------------------------------------
Mon Apr 23 07:45:32 UTC 2018 - fbui@suse.com

4
systemd.spec
View File

@ -685,9 +685,11 @@ fi
# machine ID in all images.
if [ $1 -eq 1 ]; then
touch %{_sysconfdir}/machine-id
chmod 666 %{_sysconfdir}/machine-id
fi
# check if /etc/machine-id is writeable and change it to readonly
[[ -w %{_sysconfdir}/machine-id ]] && chmod 444 %{_sysconfdir}/machine-id
%if ! 0%{?bootstrap}
pam-config --add --systemd || :
%endif