This works around two issues: - First, rpm switched to reading users/groups directly for its implementation of systemd-sysusers, which meant it no longer reads via nss, which breaks nss-altfiles. xref: https://github.com/rpm-software-management/rpm/pull/2503#issuecomment-1536435351 and below. - Second, even if that was fixed, `keylime` wants to add its user to the group, which can't be done when it's a system uid. Since nothing in the OS content is owned by this group, we can move underneath `/etc` by default. Signed-off-by: Colin Walters <walters@verbum.org>
6 lines
136 B
Bash
Executable file
6 lines
136 B
Bash
Executable file
#!/bin/bash
|
|
set -xeuo pipefail
|
|
# Verify group members
|
|
getent group tss >/dev/null
|
|
# This one needs to be in /etc
|
|
grep -q tss /etc/group
|