vasilito
bb3ae6e63f
- login.rs: drop privileges via setresugid after authentication - login.rs: add namespace isolation to password auth path (was missing) - login.rs: add drm, input schemes to DEFAULT_SCHEMES - sudo service: rename 00_sudo -> 12_sudo, type daemon (no boot block) - Branded login screen with figlet RedBear OS v0.2.2 'Liliya' - Root user kept but not advertised on login screen - P6-login-privilege-drop.patch generated and wired Implements Phase 1 of Plan 9 namespace privilege model: login creates restricted namespace (mkns/setns) then drops uid/gid to authenticated user before spawning shell.
14 lines
350 B
TOML
14 lines
350 B
TOML
[source]
|
|
git = "https://gitlab.redox-os.org/redox-os/userutils.git"
|
|
patches = ["P5-redbear-branding.patch", "P6-login-privilege-drop.patch"]
|
|
|
|
[build]
|
|
template = "custom"
|
|
script = """
|
|
DYNAMIC_INIT
|
|
cookbook_cargo
|
|
cp -rv "${COOKBOOK_SOURCE}/res" "${COOKBOOK_STAGE}/etc"
|
|
rm -f "${COOKBOOK_STAGE}/etc/motd"
|
|
ln -s id "${COOKBOOK_STAGE}/usr/bin/whoami"
|
|
"""
|