From 80ec9b746124ca540faeac332131a7833a08b14c Mon Sep 17 00:00:00 2001 From: UnicronNL Date: Thu, 17 May 2018 22:52:01 +0200 Subject: Do not include config file Use vbash instead of bash Only change shell for priv user --- debian/radius-shell.postinst | 4 ++-- src/radius_shell.c | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/debian/radius-shell.postinst b/debian/radius-shell.postinst index 55ebd22..6d7e941 100644 --- a/debian/radius-shell.postinst +++ b/debian/radius-shell.postinst @@ -9,12 +9,12 @@ case "$1" in configure) radshell=/sbin/radius_shell chmod 750 $radshell - chgrp radius_users $radshell + chgrp users $radshell setcap cap_setuid+ep $radshell # The users will have been created by the libnss-mapuser package # and possibly by an older version, so change the shells here. # This also prevents a loop in package install ordering dependencies - for usr in radius_user radius_priv_user; do + for usr in radius_priv_user; do uent="$(getent -s compat passwd $usr 2>/dev/null)" || true [ -z "$uent" ] && continue case "$uent" in diff --git a/src/radius_shell.c b/src/radius_shell.c index 5da76dc..e7cffad 100644 --- a/src/radius_shell.c +++ b/src/radius_shell.c @@ -92,7 +92,7 @@ execit: /* * Eventually handle this program being linked or symlinked * and that the shell is one of the shells in /etc/shells - * Expect it to be installed as /sbin/radius/bash, etc. + * Expect it to be installed as /sbin/radius/vbash, etc. */ shell = strrchr(args[0], '/'); if (!shell) @@ -110,11 +110,11 @@ execit: /* should really check this against /etc/shell */ snprintf(execshell, sizeof execshell, "/bin/%s", check); #else - check = "bash"; + check = "vbash"; if (*args[0] == '-') - shell = "-bash"; + shell = "-vbash"; else - shell = "bash"; + shell = "vbash"; snprintf(execshell, sizeof execshell, "/bin/%s", check); #endif -- cgit v1.2.3