[Reproducible-commits] [misc] 03/03: Add newly created user to grsec-tpe group if enabled

[Reiner Herrmann]

This is an automated email from the git hooks/post-receive script.

deki-guest pushed a commit to branch master
in repository misc.

commit 8628ad4767edc2690811f162006286bc487ef1a2
Author: Reiner Herrmann <reiner at reiner-h.de>
Date:   Fri Feb 19 21:58:15 2016 +0100

    Add newly created user to grsec-tpe group if enabled
---
 prebuilder/pbuilderhooks/A02_user | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/prebuilder/pbuilderhooks/A02_user b/prebuilder/pbuilderhooks/A02_user
index a3c8ceb..7281623 100755
--- a/prebuilder/pbuilderhooks/A02_user
+++ b/prebuilder/pbuilderhooks/A02_user
@@ -11,6 +11,9 @@ BUILDDIR=${BUILDDIR:-/tmp/buildd} # stay compatible with pbuilder << 0.217
 
 groupadd -g "$NEWGID" -o another-group
 useradd -g another-group -u "$NEWUID" -d "$BUILDDIR" -o another-user
+if [ "$(sysctl -ne kernel.grsecurity.tpe)" = "1" -a "$(sysctl -ne kernel.grsecurity.tpe_invert)" = "1" ]; then
+    usermod -G grsec-tpe another-user
+fi
 chown -R "$NEWUID:$NEWGID" "$BUILDDIR"
 
 apt-get install sudo

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/misc.git