pool/systemd
SHA256
2
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Accepting request 605360 from Base:System

Browse Source 
OBS-URL: https://build.opensuse.org/request/show/605360
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=278
This commit is contained in:
Dominique Leuenberger 2018-05-11 09:28:32 +00:00 committed by Git OBS Bridge
commit ad1a036cf3
4 changed files with 18 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
systemd-mini.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Tue May 8 10:33:10 UTC 2018 - Thomas.Blume@suse.com
- align permissions of /etc/machine-id to upstream code (bsc#1092269)
world writeable machine-id is a security issue
-------------------------------------------------------------------
Mon Apr 23 07:45:32 UTC 2018 - fbui@suse.com

4
systemd-mini.spec
View File

@ -687,9 +687,11 @@ fi
# machine ID in all images.
if [ $1 -eq 1 ]; then
touch %{_sysconfdir}/machine-id
chmod 666 %{_sysconfdir}/machine-id
fi
# check if /etc/machine-id is writeable and change it to readonly
[ ! -w %{_sysconfdir}/machine-id ] || chmod 444 %{_sysconfdir}/machine-id
%if ! 0%{?bootstrap}
pam-config --add --systemd || :
%endif

6
systemd.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Tue May 8 10:33:10 UTC 2018 - Thomas.Blume@suse.com
- align permissions of /etc/machine-id to upstream code (bsc#1092269)
world writeable machine-id is a security issue
-------------------------------------------------------------------
Mon Apr 23 07:45:32 UTC 2018 - fbui@suse.com

4
systemd.spec
View File

@ -685,9 +685,11 @@ fi
# machine ID in all images.
if [ $1 -eq 1 ]; then
touch %{_sysconfdir}/machine-id
chmod 666 %{_sysconfdir}/machine-id
fi
# check if /etc/machine-id is writeable and change it to readonly
[ ! -w %{_sysconfdir}/machine-id ] || chmod 444 %{_sysconfdir}/machine-id
%if ! 0%{?bootstrap}
pam-config --add --systemd || :
%endif