- specify homedir (/var/lib/radiusd) for radiusd user in useradd,

do not permit useradd to default the homedir.
This commit is contained in:
John Dennis 2012-12-13 12:11:47 -05:00
parent 9758ebeea8
commit 4f7fa609b4

View File

@ -1,7 +1,7 @@
Summary: High-performance and highly configurable free RADIUS server Summary: High-performance and highly configurable free RADIUS server
Name: freeradius Name: freeradius
Version: 2.2.0 Version: 2.2.0
Release: 2%{?dist} Release: 3%{?dist}
License: GPLv2+ and LGPLv2+ License: GPLv2+ and LGPLv2+
Group: System Environment/Daemons Group: System Environment/Daemons
URL: http://www.freeradius.org/ URL: http://www.freeradius.org/
@ -263,7 +263,7 @@ EOF
# Make sure our user/group is present prior to any package or subpackage installation # Make sure our user/group is present prior to any package or subpackage installation
%pre %pre
getent group radiusd >/dev/null || /usr/sbin/groupadd -r -g 95 radiusd > /dev/null 2>&1 getent group radiusd >/dev/null || /usr/sbin/groupadd -r -g 95 radiusd > /dev/null 2>&1
getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd -u 95 -c "radiusd user" -s /sbin/nologin radiusd > /dev/null 2>&1 getent passwd radiusd >/dev/null || /usr/sbin/useradd -r -g radiusd -u 95 -c "radiusd user" -d %{_localstatedir}/lib/radiusd -s /sbin/nologin radiusd > /dev/null 2>&1
exit 0 exit 0
%post %post
@ -608,6 +608,10 @@ exit 0
%{_libdir}/freeradius/rlm_sql_unixodbc-%{version}.so %{_libdir}/freeradius/rlm_sql_unixodbc-%{version}.so
%changelog %changelog
* Thu Dec 13 2012 John Dennis <jdennis@redhat.com> - 2.2.0-3
- specify homedir (/var/lib/radiusd) for radiusd user in useradd,
do not permit useradd to default the homedir.
* Wed Dec 12 2012 John Dennis <jdennis@redhat.com> - 2.2.0-2 * Wed Dec 12 2012 John Dennis <jdennis@redhat.com> - 2.2.0-2
- add security options to compiler/linker - add security options to compiler/linker