mirror of
https://git.yoctoproject.org/poky
synced 2026-02-07 09:16:36 +01:00
459702c8cd
Builder is a common word and there are many other builder components which makes us to ignore CVEs for all of them. There is already 1 ignored and currently 3 new ones. Instead, set product to yocto to filter them. (From OE-Core rev: fd4ec5a5318b36af0a9a0a097a5b1f1de44a8edf) Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
34 lines
1.0 KiB
BlitzBasic
34 lines
1.0 KiB
BlitzBasic
SUMMARY = "New user to do specific job"
|
|
DESCRIPTION = "This recipe create a new user named ${PN}, who is used for specific jobs like building. The task can be auto started via mini X"
|
|
SECTION = "x11"
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://builder_session.sh;endline=5;md5=84796c3c41785d86100fdabcbdade00e"
|
|
|
|
SRC_URI = "file://builder_session.sh \
|
|
"
|
|
|
|
S = "${WORKDIR}/sources"
|
|
UNPACKDIR = "${S}"
|
|
|
|
RDEPENDS:${PN} = "mini-x-session"
|
|
|
|
inherit useradd
|
|
|
|
# builder user password is "builder"
|
|
BUILDER_PASSWORD ?= ".gLibiNXn0P12"
|
|
USERADD_PACKAGES = "${PN}"
|
|
USERADD_PARAM:${PN} = "--system --create-home \
|
|
--groups video,tty,audio \
|
|
--password ${BUILDER_PASSWORD} \
|
|
--user-group builder"
|
|
|
|
do_install () {
|
|
install -d -m 755 ${D}${sysconfdir}/mini_x/session.d
|
|
install -p -m 755 builder_session.sh ${D}${sysconfdir}/mini_x/session.d/
|
|
|
|
chown builder.builder ${D}${sysconfdir}/mini_x/session.d/builder_session.sh
|
|
}
|
|
|
|
# do not report CVEs for other builder apps
|
|
CVE_PRODUCT = "yoctoproject:builder"
|