guix.git/gnu/build/activation.scm, branch master

activation: Lock /etc/.pwd.lock before accessing databases.

2019-06-05T21:10:36Z

Suggested by Florian Pelz in . * gnu/build/accounts.scm (%password-lock-file): New variable. * gnu/build/activation.scm (activate-users+groups): Wrap calls to 'user+group-databases', 'write-group', etc. into 'with-file-lock'.

activation: Shared system home directories are now 555 and root-owned.

2019-03-08T22:21:59Z

Fixes . Reported by Jack Hill . Regression introduced by the combination of 8bb76f3d44c1f5ffec8011819494db306a51d801 and 0ae735bcc8ff7fdc89d67b492bdee9091ee19e86: /var/empty would be 700 and owned by one of the system accounts (thus inaccessible to others), and /var/run/dbus would be 700 as well, thereby preventing D-Bus clients from connecting to the daemon. * gnu/build/activation.scm (duplicates): New procedure. (activate-users+groups)[system-accounts]: New variable. Use it. Make shared system account home directories #o555 and root-owned. * gnu/services/dbus.scm (dbus-activation): Make /var/run/dbus #o755. * gnu/tests/base.scm (run-basic-test): Test the ownership and permissions of /var/empty.

activation: Build account databases with (gnu build accounts).

2019-03-07T19:05:09Z

* gnu/build/activation.scm (enumerate, current-users, current-groups) (add-group, add-user, modify-user, ensure-user): Remove. (activate-users+groups)[touch, activate-user]: Remove. [make-home-directory]: New procedure. Rewrite in terms of 'user+group-databases', 'write-group', etc. * gnu/build/install.scm (directives): Remove "/root". * gnu/system/shadow.scm (account-activation): Remove (setenv "PATH" ...) expression, which is now unneeded.

activation: Operate on and records.

2019-03-07T19:05:09Z

* gnu/system/accounts.scm (sexp->user-group, sexp->user-account): New procedures. * gnu/system/shadow.scm (account-activation): Call them in the arguments to 'activate-users+groups'. (account-shepherd-service): Likewise. * gnu/build/activation.scm (activate-users+groups): Expect a list of and a list of . Replace uses of 'match' on tuples with calls to record accessors. (activate-user-home): Likewise.

activation: Make home directories #o700 by default.

2019-03-04T14:22:58Z

Until now they'd be #o755, except for /root, which is treated specially in (gnu build install). * gnu/build/activation.scm (activate-user-home): Chmod HOME to #o700. Remove redundant 'unless system?'.

activation: Aways pass '-d HOME' to 'useradd'.

2018-11-18T22:37:25Z

Fixes . Reported by fps. * gnu/build/activation.scm (add-user): Always pass "-d HOME" when HOME is true. Pass "--create-home" only when HOME, CREATE-HOME?, and SYSTEM? are true. (activate-users+groups): Pass #:create-home? create-home? to 'ensure-user'. * gnu/tests/base.scm (run-basic-test)["accounts"]: Test 'passwd:dir' as well.

activation: Pass '-d HOME' to 'usermod'.

2018-03-27T12:51:44Z

Fixes a bug whereby changes to user home directories in the OS config would never be effective. Reported by Pierre Neidhardt . * gnu/build/activation.scm (modify-user): Pass '-d HOME'.

activation: Do not create setuid binaries in the store [security fix].

2017-10-08T19:27:48Z

Fixes . * gnu/build/activation.scm (activate-setuid-programs)[link-or-copy]: Remove. Use 'copy-file' instead.

activation: Make sure /etc exists.

2017-08-02T22:35:59Z

Fixes . Reported by ng0 . * gnu/build/activation.scm (activate-etc): Add call to 'mkdir-p'.

activation: Change permissions on /root to #o700.

2017-05-30T16:08:37Z

Reported by Alex Griffin . Fixes . * gnu/build/activation.scm (add-user): When UID is zero, add 'chmod' call. * gnu/tests/base.scm (run-basic-test)["permissions on /root"]: New test.