mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
eee0a2f226
Though the petitboot UI is a user application, it is currently being run by root only because we use getty to display it on the console. Create an unprivileged user to run the UI instead. The unix socket the pb-discover daemon sets up is accessible to "petitgroup", so that should be the gid, with arbitrary uid "petituser" to match. This is currently the chain of processes leading to the UI: 1. /etc/init.d/pb-console start console 2. /usr/libexec/petitboot/pb-console --getty --detach -- -n -i 0 console linux 3. /sbin/getty -l/usr/libexec/petitboot/pb-console -n -i 0 console linux 4. /usr/libexec/petitboot/pb-console 5. /usr/sbin/petitboot-nc Instead of (3) running the pb-console helper directly with "getty -l", we can use "agetty -a" to autologin petituser, and run pb-console via petituser's login shell: 1. /etc/init.d/pb-console start console 2. /usr/libexec/petitboot/pb-console --getty=/sbin/agetty --detach -- -a petituser -n -i console linux 3. /sbin/agetty -a petituser -n -i console linux 4. /home/petituser/.profile 5. /usr/libexec/petitboot/pb-console 6. /usr/sbin/petiboot-nc Here, everything from (4) down is running as petituser. In (4), use $PPID to determine if we're logging in via getty, so that logging in by other means will give a normal shell. Otherwise we would recurse when trying to get a shell from the menu. Signed-off-by: Reza Arbab <arbab@linux.ibm.com> [Arnout: explicitly select util-linux, even though it comes indirectly through other dependencies] Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
39 lines
840 B
Bash
39 lines
840 B
Bash
#!/bin/sh
|
|
|
|
DAEMON="pb-console"
|
|
|
|
PB_CONSOLE_PORT=${2:-"console"}
|
|
PB_CONSOLE_ARGS="--getty=/sbin/agetty --detach -- -a petituser -n -i $PB_CONSOLE_PORT linux"
|
|
|
|
# shellcheck source=/dev/null
|
|
[ -r "/etc/default/petitboot" ] && . "/etc/default/petitboot"
|
|
|
|
start() {
|
|
printf 'Starting %s on %s: ' "$DAEMON" "$PB_CONSOLE_PORT"
|
|
# shellcheck disable=SC2174 # only apply -m to deepest dir
|
|
mkdir -p -m 0775 /var/log/petitboot
|
|
chown petituser:petitgroup /var/log/petitboot
|
|
|
|
# shellcheck disable=SC2086 # we need the word splitting
|
|
start-stop-daemon -S -q -x "/usr/libexec/petitboot/$DAEMON" \
|
|
-- $PB_CONSOLE_ARGS
|
|
status=$?
|
|
if [ "$status" -eq 0 ]; then
|
|
echo "OK"
|
|
else
|
|
echo "FAIL"
|
|
fi
|
|
return "$status"
|
|
}
|
|
|
|
case "$1" in
|
|
start)
|
|
"$1";;
|
|
stop|restart|reload)
|
|
;;
|
|
*)
|
|
echo "Usage: $0 {start|stop|restart|reload} [port]"
|
|
exit 1
|
|
;;
|
|
esac
|