mirror of
https://github.com/rsmarples/dhcpcd.git
synced 2024-11-23 10:06:42 +08:00
privsep: Detect a suitable user for dhcpcd, otherwise use dhcpcd
System users generally have _ preceeding their username. Only use this user if it exists and their home dir is not /var/empty. Otherwise default to using dhcpcd.
This commit is contained in:
parent
0227431cc8
commit
fa54fc1687
22
configure
vendored
22
configure
vendored
@ -556,16 +556,26 @@ fi
|
||||
if [ "$PRIVSEP" = yes ]; then
|
||||
echo "Enabling Privilege Separation"
|
||||
|
||||
# Try and work out a user
|
||||
# Try and work out system user
|
||||
if [ -z "$PRIVSEP_USER" ]; then
|
||||
for x in _dhcpcd _dhcp; do
|
||||
if id "$x" 2>/dev/null >&2; then
|
||||
printf "Detecting a suitable user for dhcpcd ... "
|
||||
for x in _dhcpcd _dhcp dhcpcd; do
|
||||
home=$(getent passwd $x 2>/dev/null | cut -d: -f6)
|
||||
case "$home" in
|
||||
/var/empty|"") ;;
|
||||
*)
|
||||
PRIVSEP_USER="$x"
|
||||
break
|
||||
fi
|
||||
break;;
|
||||
esac
|
||||
done
|
||||
fi
|
||||
: ${PRIVSEP_USER:=_dhcpcd}
|
||||
if [ -n "$PRIVSEP_USER" ]; then
|
||||
echo "$PRIVSEP_USER"
|
||||
else
|
||||
PRIVSEP_USER=dhcpcd
|
||||
echo
|
||||
echo "No suitable user found for Priviledge Separation!"
|
||||
fi
|
||||
|
||||
echo "CPPFLAGS+= -DPRIVSEP" >>$CONFIG_MK
|
||||
echo "#ifndef PRIVSEP_USER" >>$CONFIG_H
|
||||
|
Loading…
Reference in New Issue
Block a user