f172118ca4
* gnu/packages/patches/linux-pam-unix_chkpwd.patch: New file. * gnu/local.mk (dist_patch_DATA): Add it. * gnu/packages/linux.scm (linux-pam): Use it. * gnu/system/pam.scm (pam-root-service-type): Add unix_chkpwd to setuid. Co-authored-by: Ludovic Courtès <ludo@gnu.org>
9 lines
393 B
Diff
9 lines
393 B
Diff
unix_chkpwd is designed to have a suid bit, but it's not possible to set it
|
|
for files in the store. This patch tells unix_pam.so to look for
|
|
unix_chkpwd in setuid program directory on Guix System.
|
|
|
|
--- a/modules/pam_unix/Makefile.in
|
|
+++ b/modules/pam_unix/Makefile.in
|
|
@@ -651,1 +651,1 @@
|
|
- -DCHKPWD_HELPER=\"$(sbindir)/unix_chkpwd\" \
|
|
+ -DCHKPWD_HELPER=\"/run/setuid-programs/unix_chkpwd\" \
|