Attachment 155753 Details for Bug 237727 – remove shell from pkiuser account

[patch] remove shell from pkiuser account

selinux.nologin.diff (text/plain), 4.08 KB, created by Kevin J. McCarthy on 2007-05-30 22:35:14 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Kevin J. McCarthy

Created: 2007-05-30 22:35:14 UTC

Size: 4.08 KB

patch

obsolete

>Index: branding/pki/ca/rhpki-ca.el5.spec
>===================================================================
>--- branding/pki/ca/rhpki-ca.el5.spec	(revision 14823)
>+++ branding/pki/ca/rhpki-ca.el5.spec	(working copy)
>@@ -114,11 +114,11 @@
> %pre
> if [ `grep -c pkiuser /etc/group` -eq 0 ] ; then
> 	groupadd pkiuser
> fi
> if [ `grep -c pkiuser /etc/passwd` -eq 0 ] ; then
>-	useradd -g pkiuser -d %{_datadir}/rhpki -s /bin/bash -c "Red Hat Certificate System" -m pkiuser
>+	useradd -g pkiuser -d %{_datadir}/rhpki -s /sbin/nologin -c "Red Hat Certificate System" -m pkiuser
> fi
> 
> %post
> chmod 00755 %{_datadir}/rhpki/ca/setup/postinstall
> %{_datadir}/rhpki/ca/setup/postinstall rhpki ca 7.3.0 1
>Index: branding/pki/tks/rhpki-tks.el5.spec
>===================================================================
>--- branding/pki/tks/rhpki-tks.el5.spec	(revision 14823)
>+++ branding/pki/tks/rhpki-tks.el5.spec	(working copy)
>@@ -125,11 +125,11 @@
> %pre
> if [ `grep -c pkiuser /etc/group` -eq 0 ] ; then
> 	groupadd pkiuser
> fi
> if [ `grep -c pkiuser /etc/passwd` -eq 0 ] ; then
>-	useradd -g pkiuser -d %{_datadir}/rhpki -s /bin/bash -c "Red Hat Certificate System" -m pkiuser
>+	useradd -g pkiuser -d %{_datadir}/rhpki -s /sbin/nologin -c "Red Hat Certificate System" -m pkiuser
> fi
> 
> %post
> chmod 00755 %{_datadir}/rhpki/tks/setup/postinstall
> %{_datadir}/rhpki/tks/setup/postinstall rhpki tks 7.3.0 1
>Index: branding/pki/ra/rhpki-ra.el5.spec
>===================================================================
>--- branding/pki/ra/rhpki-ra.el5.spec	(revision 14823)
>+++ branding/pki/ra/rhpki-ra.el5.spec	(working copy)
>@@ -107,11 +107,11 @@
> %pre
> if [ `grep -c pkiuser /etc/group` -eq 0 ] ; then
> 	groupadd pkiuser
> fi
> if [ `grep -c pkiuser /etc/passwd` -eq 0 ] ; then
>-	useradd -g pkiuser -d %{_datadir}/rhpki -s /bin/bash -c "Red Hat Certificate System" -m pkiuser
>+	useradd -g pkiuser -d %{_datadir}/rhpki -s /sbin/nologin -c "Red Hat Certificate System" -m pkiuser
> fi
> 
> %post
> chmod 00755 %{_datadir}/rhpki/ra/setup/postinstall
> %{_datadir}/rhpki/ra/setup/postinstall rhpki ra 7.3.0 1
>Index: branding/pki/ocsp/rhpki-ocsp.el5.spec
>===================================================================
>--- branding/pki/ocsp/rhpki-ocsp.el5.spec	(revision 14823)
>+++ branding/pki/ocsp/rhpki-ocsp.el5.spec	(working copy)
>@@ -132,11 +132,11 @@
> %pre
> if [ `grep -c pkiuser /etc/group` -eq 0 ] ; then
> 	groupadd pkiuser
> fi
> if [ `grep -c pkiuser /etc/passwd` -eq 0 ] ; then
>-	useradd -g pkiuser -d %{_datadir}/rhpki -s /bin/bash -c "Red Hat Certificate System" -m pkiuser
>+	useradd -g pkiuser -d %{_datadir}/rhpki -s /sbin/nologin -c "Red Hat Certificate System" -m pkiuser
> fi
> 
> %post
> chmod 00755 %{_datadir}/rhpki/ocsp/setup/postinstall
> %{_datadir}/rhpki/ocsp/setup/postinstall rhpki ocsp 7.3.0 1
>Index: branding/pki/tps/rhpki-tps.el5.spec
>===================================================================
>--- branding/pki/tps/rhpki-tps.el5.spec	(revision 14823)
>+++ branding/pki/tps/rhpki-tps.el5.spec	(working copy)
>@@ -361,11 +361,11 @@
> %pre
> if [ `grep -c %{base_user} /etc/group` -eq 0 ] ; then
> 	groupadd %{base_user}
> fi
> if [ `grep -c %{base_user} /etc/passwd` -eq 0 ] ; then
>-	useradd -g %{base_user} -d %{_datadir}/%{base_pki_dir} -s /bin/bash -c "%{base_pki}" -m %{base_user}
>+	useradd -g %{base_user} -d %{_datadir}/%{base_pki_dir} -s /sbin/nologin -c "%{base_pki}" -m %{base_user}
> fi
> 
> 
> %post
> chmod 00755 %{_datadir}/%{base_pki_dir}/%{base_component}/setup/postinstall
>Index: branding/pki/kra/rhpki-kra.el5.spec
>===================================================================
>--- branding/pki/kra/rhpki-kra.el5.spec	(revision 14823)
>+++ branding/pki/kra/rhpki-kra.el5.spec	(working copy)
>@@ -123,11 +123,11 @@
> %pre
> if [ `grep -c pkiuser /etc/group` -eq 0 ] ; then
> 	groupadd pkiuser
> fi
> if [ `grep -c pkiuser /etc/passwd` -eq 0 ] ; then
>-	useradd -g pkiuser -d %{_datadir}/rhpki -s /bin/bash -c "Red Hat Certificate System" -m pkiuser
>+	useradd -g pkiuser -d %{_datadir}/rhpki -s /sbin/nologin -c "Red Hat Certificate System" -m pkiuser
> fi
> 
> %post
> chmod 00755 %{_datadir}/rhpki/kra/setup/postinstall
> %{_datadir}/rhpki/kra/setup/postinstall rhpki kra 7.3.0 1

Actions: View | Diff

Attachments on bug 237727: 155753 | 155754 | 323844 | 323850 | 323959 | 324086 | 324542 | 324544