From 951f1aabea4c8683cda113e743b68ad2dfd57fa8 Mon Sep 17 00:00:00 2001 From: kasunath Date: Wed, 10 Aug 2022 11:08:14 -0700 Subject: meta-google: Remove cracklib from image and libpam dependency The package "cracklib" is not needed. Ideally in the future we will start using Google GLOME. The "libpam" library depends on cracklib, so override the libpam recipe also, so that it no longer depends on cracklib. Tested: This has been tested locally on our local product, which uses OpenBMC, and it appeared to work just fine for us. Signed-off-by: Kasun Athukorala Change-Id: I0d7714766a2e14151f00f6582abee78dee43614d Signed-off-by: Josh Lehan --- meta-google/recipes-extended/pam/libpam_%.bbappend | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 meta-google/recipes-extended/pam/libpam_%.bbappend (limited to 'meta-google/recipes-extended') diff --git a/meta-google/recipes-extended/pam/libpam_%.bbappend b/meta-google/recipes-extended/pam/libpam_%.bbappend new file mode 100644 index 0000000000..287dab7b14 --- /dev/null +++ b/meta-google/recipes-extended/pam/libpam_%.bbappend @@ -0,0 +1,15 @@ +# Remove cracklib from PAM, to avoid breaking PAM and further dependencies +# This allows cracklib to be neatly severed from the system. + +EXTRA_OECONF:append:gbmc = " --disable-cracklib" + +DEPENDS:remove:gbmc = "cracklib" + +RDEPENDS:${PN}-runtime:remove:gbmc = "pam-plugin-cracklib-suffix" + +RDEPENDS:${PN}-xtests:remove:gbmc = "${MLPREFIX}pam-plugin-cracklib-${libpam_suffix}" + +do_install:append:gbmc() { + # Remove reference to cracklib library from PAM config file + sed -i '/pam_cracklib.so/d' ${D}${sysconfdir}/pam.d/common-password +} -- cgit v1.2.3