X-Git-Url: http://gitweb.hugovil.com/?a=blobdiff_plain;f=stage3%2Fpkg%2Fshadow;h=67459314c7dfb30fc965c5609ac236055c3013b6;hb=1b6490195147ee6d1098cf255240d60f60c40108;hp=63850f0d57121026848944f368c2ce0fc61f7b11;hpb=e941771d74ef457edb2c321a76e88a7c9a79c7f8;p=hvlinux.git diff --git a/stage3/pkg/shadow b/stage3/pkg/shadow index 63850f0..6745931 100644 --- a/stage3/pkg/shadow +++ b/stage3/pkg/shadow @@ -2,21 +2,21 @@ hvconfig_pre() { - CONFIGURE_OPTS="\ - ${CONFIGURE_OPTS} \ + CONFIGURE_OPTS+=" \ --without-selinux" - cd ${LFS_TMP}/${PACKAGE} + cd ${SRC_DIR} # Disable the installation of the groups program and its man page, as # Coreutils provides a better version. sed -i 's/groups$(EXEEXT) //' src/Makefile.in find man -name Makefile.in -exec sed -i 's/groups\.1 / /' {} \; - # Instead of using the default crypt method, use the more secure SHA-512 method - # of password encryption, which also allows passwords longer than 8 characters. - # It is also necessary to change the obsolete /var/spool/mail location for user - # mailboxes that Shadow uses by default to the /var/mail location used currently: + # Instead of using the default crypt method, use the more secure SHA-512 + # method of password encryption, which also allows passwords longer than 8 + # characters. It is also necessary to change the obsolete /var/spool/mail + # location for user mailboxes that Shadow uses by default to the /var/mail + # location used currently: sed -i -e 's@#ENCRYPT_METHOD DES@ENCRYPT_METHOD SHA512@' \ -e 's@/var/spool/mail@/var/mail@' /etc/login.defs } @@ -75,4 +75,13 @@ hvbuild_post() # resources, Linux-PAM uses the pam_limits.so module along with the # /etc/security/limits.conf file. Rename the /etc/limits file: [ -f /etc/limits ] && mv -v /etc/limits{,.NOUSE} + + # Set system group ID range from 1 to 90: + # 0 is reserved for group 'root' + # 99 is reserved for group 'nogroup' + sed -e "s/\(SYS_UID_MIN\s\+\)[0-9]\+/\1 1/" \ + -e "s/\(SYS_UID_MAX\s\+\)[0-9]\+/\1 90/" \ + -e "s/\(SYS_GID_MIN\s\+\)[0-9]\+/\1 1/" \ + -e "s/\(SYS_GID_MAX\s\+\)[0-9]\+/\1 90/" \ + -i /etc/login.defs }