From 901ef17c0e6ab2e39bd02f51e0c105218042bc25 Mon Sep 17 00:00:00 2001 From: Alejandro Mery Date: Thu, 22 Aug 2013 11:34:26 +0200 Subject: [PATCH] pam: don't mkdir /etc/security/namespace.d outside the sandbox --- base/pam/namespace.d_outside_sandibox.patch | 38 +++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 base/pam/namespace.d_outside_sandibox.patch diff --git a/base/pam/namespace.d_outside_sandibox.patch b/base/pam/namespace.d_outside_sandibox.patch new file mode 100644 index 000000000..a73b290f9 --- /dev/null +++ b/base/pam/namespace.d_outside_sandibox.patch @@ -0,0 +1,38 @@ +# --- SDE-COPYRIGHT-NOTE-BEGIN --- +# This copyright note is auto-generated by ./scripts/Create-CopyPatch. +# +# Filename: package/.../pam/namespace.d_outside_sandibox.patch +# Copyright (C) 2013 The OpenSDE Project +# +# More information can be found in the files COPYING and README. +# +# This patch file is dual-licensed. It is available under the license the +# patched project is licensed under, as long as it is an OpenSource license +# as defined at http://www.opensource.org/ (e.g. BSD, X11) or under the terms +# of the GNU General Public License as published by the Free Software +# Foundation; either version 2 of the License, or (at your option) any later +# version. +# --- SDE-COPYRIGHT-NOTE-END --- + +--- ./modules/pam_namespace/Makefile.am.orig 2013-08-22 11:30:59.729193658 +0200 ++++ ./modules/pam_namespace/Makefile.am 2013-08-22 11:32:06.941196275 +0200 +@@ -40,7 +40,7 @@ + secureconf_SCRIPTS = namespace.init + + install-data-local: +- mkdir -p $(namespaceddir) ++ mkdir -p $(DESTDIR)$(namespaceddir) + endif + + +--- ./modules/pam_namespace/Makefile.in.orig 2013-08-22 11:31:02.833193778 +0200 ++++ ./modules/pam_namespace/Makefile.in 2013-08-22 11:32:29.397197149 +0200 +@@ -871,7 +871,7 @@ + + + @HAVE_UNSHARE_TRUE@install-data-local: +-@HAVE_UNSHARE_TRUE@ mkdir -p $(namespaceddir) ++@HAVE_UNSHARE_TRUE@ mkdir -p $(DESTDIR)$(namespaceddir) + @ENABLE_REGENERATE_MAN_TRUE@README: pam_namespace.8.xml namespace.conf.5.xml + @ENABLE_REGENERATE_MAN_TRUE@-include $(top_srcdir)/Make.xml.rules +