Piecuu/pmaports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

main/postmarketos-base: drop busybox-suid

Browse source 
Busybox su and login are not aware of PAM, so on a system
with linux-pam installed, they entirely ignore any rules.
These issues can be mitigated by removing the suid binary
that the symlinks point to and require, which is installed
by busybox-suid. Because busybox-suid handles more than su
and login, this commit replaces all the tools we use that
would be called through it.

Note that this does not remove Busybox su and login, as they
are in Busybox itself. This commit instead only removes the
suid interface that they would normally be called from.

See https://gitlab.alpinelinux.org/alpine/aports/-/issues/11730
for more information.

Signed-off-by: Aster Boese <asterboese@mailbox.org>
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7724>
This commit is contained in:
Aster Boese 2026-01-11 18:32:44 -05:00 • committed by The Friendly Merge Bot
parent 410c83b578
commit bd5b620021
No known key found for this signature in database
1 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
main/postmarketos-base/APKBUILD
View file

@ -2,7 +2,7 @@
maintainer="Clayton Craft <clayton@craftyguy.net>"
pkgname=postmarketos-base
pkgver=51
pkgrel=1
pkgrel=2
pkgdesc="Meta package for minimal postmarketOS base"
url="https://postmarketos.org"
arch="noarch"
@ -14,16 +14,18 @@ makedepends="postmarketos-initramfs"
depends="
apk-tools
busybox
busybox-suid
devicepkg-utils>=0.2.0
eudev
merge-usr
mount
musl-utils
openssh-server-pam
postmarketos-keys
postmarketos-mvcfg
postmarketos-ramdisk
sudo-virt
umount
util-linux-login
zram-init
"
_pmb_recommends="