diff options
author | Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com> | 2019-09-23 20:02:48 +0300 |
---|---|---|
committer | Brad Bishop <bradleyb@fuzziesquirrel.com> | 2019-09-25 03:03:04 +0300 |
commit | cbeaaf5f5f05a58db4e26dcc0f8a2aa93131a0a1 (patch) | |
tree | 03c9698b19207142e9290a8390e534d4b89483af | |
parent | 19e81d3f3b731681a57bb5ef9681d33cc291bde8 (diff) | |
download | openbmc-cbeaaf5f5f05a58db4e26dcc0f8a2aa93131a0a1.tar.xz |
Revert "obmc-console: Allow SOL over SSH only for admin"
As dropbear default value is updated to allow only
priv-admin group users in meta-phosphor, this
restriction will be applied automatically to all
services which uses DROPBEAR_EXTRA_ARGS. As obmc-console
uses dropbear with DROPBEAR_EXTRA_ARGS, the commit, which
adds -G priv-admin to the service file can be removed now
as the same is applied through DROPBEAR_EXTRA_ARGS
This reverts commit 9fe68f9906a99c38758ca9ddaa72432b17841af2.
(From meta-phosphor rev: 2ca828ac8acb8a00bc816645bddddab0d86aed37)
Change-Id: I24bb20a8baf980d6a13f797946cc1cf0c158da7a
Signed-off-by: Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
-rw-r--r-- | meta-phosphor/recipes-phosphor/console/obmc-console/obmc-console-ssh@.service | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta-phosphor/recipes-phosphor/console/obmc-console/obmc-console-ssh@.service b/meta-phosphor/recipes-phosphor/console/obmc-console/obmc-console-ssh@.service index abd863a4d..82ffe7919 100644 --- a/meta-phosphor/recipes-phosphor/console/obmc-console/obmc-console-ssh@.service +++ b/meta-phosphor/recipes-phosphor/console/obmc-console/obmc-console-ssh@.service @@ -5,7 +5,7 @@ Wants=obmc-console@{OBMC_CONSOLE_HOST_TTY}.service [Service] Environment="DROPBEAR_RSAKEY_DIR=/etc/dropbear" EnvironmentFile={envfiledir}/dropbear -ExecStart=-/usr/bin/env dropbear -i -r ${{DROPBEAR_RSAKEY_DIR}}/dropbear_rsa_host_key -c "/usr/bin/env obmc-console-client" -G priv-admin $DROPBEAR_EXTRA_ARGS +ExecStart=-/usr/bin/env dropbear -i -r ${{DROPBEAR_RSAKEY_DIR}}/dropbear_rsa_host_key -c "/usr/bin/env obmc-console-client" $DROPBEAR_EXTRA_ARGS SyslogIdentifier=dropbear ExecReload={base_bindir}/kill -HUP $MAINPID StandardInput=socket |