From 87b693b40ba52373d8027f233a248fa9577c97e8bfa0b089fb97bbb640afac47 Mon Sep 17 00:00:00 2001 From: Thorsten Kukuk Date: Wed, 29 Nov 2017 10:25:58 +0000 Subject: [PATCH] - Change home directory of user man to /var/lib/empty. Home directories below /var/cache are by definition insecure and a bad idea. OBS-URL: https://build.opensuse.org/package/show/Base:System/system-users?expand=0&rev=31 --- system-user-man.conf | 2 +- system-users.changes | 7 +++++++ system-users.spec | 2 -- 3 files changed, 8 insertions(+), 3 deletions(-) diff --git a/system-user-man.conf b/system-user-man.conf index abac1a9..c8e1514 100644 --- a/system-user-man.conf +++ b/system-user-man.conf @@ -1,3 +1,3 @@ # Type Name ID GECOS [HOME] g man 62 -u man 13 "Manual pages viewer" /var/cache/man +u man 13 "Manual pages viewer" /var/lib/empty diff --git a/system-users.changes b/system-users.changes index d2dd91e..027a8d5 100644 --- a/system-users.changes +++ b/system-users.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Wed Nov 29 10:31:32 CET 2017 - kukuk@suse.de + +- Change home directory of user man to /var/lib/empty. Home + directories below /var/cache are by definition insecure and a + bad idea. + ------------------------------------------------------------------- Thu Sep 14 14:40:04 CEST 2017 - kukuk@suse.de diff --git a/system-users.spec b/system-users.spec index 3ac8ac4..5c3ec7b 100644 --- a/system-users.spec +++ b/system-users.spec @@ -214,7 +214,6 @@ mkdir -p %{buildroot}%{_sysusersdir} mkdir -p %{buildroot}%{_sysconfdir}/uucp mkdir -p %{buildroot}%{_sysconfdir}/news mkdir -p %{buildroot}%{_localstatedir}/games -mkdir -p %{buildroot}%{_localstatedir}/cache/man mkdir -p %{buildroot}%{_localstatedir}/lib/wwwrun mkdir -p %{buildroot}%{_localstatedir}/spool/clientmqueue mkdir -p %{buildroot}%{_localstatedir}/spool/lpd @@ -278,7 +277,6 @@ install -m 644 %{SOURCE17} %{buildroot}%{_sysusersdir}/system-user-uuidd.conf %files -n system-user-man %defattr(-,root,root) -%dir %attr(0755,man,root) %{_localstatedir}/cache/man %{_sysusersdir}/system-user-man.conf %files -n system-user-news