mirror of
https://git.yoctoproject.org/poky
synced 2026-09-12 06:49:32 +02:00
sudo: add PACKAGECONFIG for pam-wheel
The pam_wheel PAM module is used to enforce the so-called wheel group. By default it permits root access to the system if the applicant user is a member of the wheel group. Add PACKAGECONFIG to enable pam_wheel module for sudo. (From OE-Core rev: 7a46ca79b18527a56de470fcaaf95c870c097cf6) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
@@ -19,6 +19,7 @@ inherit autotools
|
|||||||
|
|
||||||
PACKAGECONFIG ??= ""
|
PACKAGECONFIG ??= ""
|
||||||
PACKAGECONFIG[zlib] = "--enable-zlib,--disable-zlib,zlib"
|
PACKAGECONFIG[zlib] = "--enable-zlib,--disable-zlib,zlib"
|
||||||
|
PACKAGECONFIG[pam-wheel] = ",,,pam-plugin-wheel"
|
||||||
|
|
||||||
CONFFILES_${PN} = "${sysconfdir}/sudoers"
|
CONFFILES_${PN} = "${sysconfdir}/sudoers"
|
||||||
|
|
||||||
|
|||||||
@@ -22,6 +22,10 @@ EXTRA_OECONF += " \
|
|||||||
do_install_append () {
|
do_install_append () {
|
||||||
if [ "${@bb.utils.filter('DISTRO_FEATURES', 'pam', d)}" ]; then
|
if [ "${@bb.utils.filter('DISTRO_FEATURES', 'pam', d)}" ]; then
|
||||||
install -D -m 644 ${WORKDIR}/sudo.pam ${D}/${sysconfdir}/pam.d/sudo
|
install -D -m 644 ${WORKDIR}/sudo.pam ${D}/${sysconfdir}/pam.d/sudo
|
||||||
|
if ${@bb.utils.contains('PACKAGECONFIG', 'pam-wheel', 'true', 'false', d)} ; then
|
||||||
|
echo 'auth required pam_wheel.so use_uid' >>${D}${sysconfdir}/pam.d/sudo
|
||||||
|
sed -i 's/# \(%wheel ALL=(ALL) ALL\)/\1/' ${D}${sysconfdir}/sudoers
|
||||||
|
fi
|
||||||
fi
|
fi
|
||||||
|
|
||||||
chmod 4111 ${D}${bindir}/sudo
|
chmod 4111 ${D}${bindir}/sudo
|
||||||
|
|||||||
Reference in New Issue
Block a user