pam, shadow: disable pam_namespace for /tmp and /var/tmp.
There are some problems with it that aren't easy to fix, so give up. --HG-- extra : convert_revision : 16763d6ef027eab3f9ffed1edcbc0f8fdbe16862
This commit is contained in:
@@ -1,16 +0,0 @@
|
||||
# This script creates the pam_namespace(8) instance directories
|
||||
# for /tmp and /var/tmpfs, they are created from /tmp/.tmp_inst
|
||||
# and /var/tmp/.tmp_inst respectively.
|
||||
#
|
||||
case "${ACTION}" in
|
||||
post)
|
||||
if [ ! -d tmp/.tmp_inst ]; then
|
||||
mkdir -m 0000 tmp/.tmp_inst || exit $?
|
||||
echo "Created pam_namespace(8) /tmp instance dir."
|
||||
fi
|
||||
if [ ! -d var/tmp/.tmp_inst ]; then
|
||||
mkdir -m 0000 var/tmp/.tmp_inst || exit $?
|
||||
echo "Created pam_namespace(8) /var/tmp instance dir."
|
||||
fi
|
||||
;;
|
||||
esac
|
||||
@@ -1,7 +1,7 @@
|
||||
# Template file for 'pam'
|
||||
pkgname=pam
|
||||
version=1.1.1
|
||||
revision=3
|
||||
revision=4
|
||||
wrksrc="Linux-PAM-$version"
|
||||
distfiles="${KERNEL_SITE}/libs/pam/library/Linux-PAM-$version.tar.bz2"
|
||||
build_style=gnu_configure
|
||||
@@ -38,23 +38,6 @@ post_install()
|
||||
# Fix unix_chkpwd perms.
|
||||
chmod 4755 ${DESTDIR}/sbin/unix_chkpwd
|
||||
|
||||
#
|
||||
# Enable by default pam_namespace(8) to mount /tmp and
|
||||
# /var/tmp as tmpfs for all users except root.
|
||||
#
|
||||
cat >> ${DESTDIR}/etc/security/namespace.conf << _EOF
|
||||
#
|
||||
# ------ END OF DEFAULT FILE ---------
|
||||
#
|
||||
# XBPS: by default create /tmp and /var/tmp tmpfs instances to
|
||||
# all users except root.
|
||||
#
|
||||
/tmp /tmp/.tmp_inst/ tmpfs root
|
||||
/var/tmp /var/tmp/.tmp_inst/ tmpfs root
|
||||
#
|
||||
_EOF
|
||||
chmod 644 ${DESTDIR}/etc/security/namespace.conf || return 1
|
||||
|
||||
#
|
||||
# Fix a syntax error in namespace.init, -p flag is unknown
|
||||
# at least to dash and bash.
|
||||
|
||||
Reference in New Issue
Block a user