15067 2023-03-14 09:39:18 +0000 System groups like sgx, wheel, renderer etc. which are not in any recipe are not being set by useradd-staticids bbclass 2023-07-27 07:15:27 +0000 1 1 7 Build System, Metadata & Runtime OE-Core oe-core other 4.0.8 x86 Multiple RESOLVED FIXED Medium+ major 4.3 M3 1 p.lobacz unassigned louis.rannou randy.macleod richard.purdie --- --- Don't know oldest_to_newest 95127 0 p.lobacz 2023-03-14 09:39:18 +0000 Like in subject the system groups which are not set in any recipe with GROUPADD_PARAM but are being added by the system, are not being set to the ids given in files/group. A quick workaround is setting these groups with own recipe in GROUPADD_PARAM variable e.g. GROUPADD_PARAM:${PN} = "--system sgx; --system render; --system wheel" 95130 1 p.lobacz 2023-03-14 11:29:23 +0000 Additionally I have found this patch https://lists.openembedded.org/g/openembedded-core/message/178290?p=%2C%2C%2C20%2C0%2C0%2C0%3A%3Acreated%2C0%2Csystemd%2C20%2C2%2C0%2C97508370 so sgx is being added by udev... I need to find where is wheel as well. 95162 2 p.lobacz 2023-03-17 08:56:36 +0000 OK according to mine investigation it is libpam responsible for adding wheel group to /etc/group so i would say that we should also add inside this recipe a GROUPADD_PARAM for the wheel group inside this recipe what do you think? 95468 3 richard.purdie 2023-04-27 14:50:16 +0000 sgx was addressed with https://git.yoctoproject.org/poky/commit/?id=72201b63f63e06005038550bc957aef98756c998 were there any others that need fixing? wheel is added from base-passwd? 95473 4 p.lobacz 2023-04-28 07:42:35 +0000 Yeah, I have found that sgx is present with that fix. Richard From what I have seen only the wheel was missing for me... 95499 5 randy.macleod 2023-05-04 14:49:31 +0000 Piotr, we don't have anyone to work on this at the moment. - YP Triage. 95782 6 louis.rannou 2023-06-22 07:20:21 +0000 Hello ! In a recent patch (that requires a v2), I have suggested to add the wheel group in the base-passwd https://lore.kernel.org/all/20230618093724c7508d8b@mail.local/ The wheel group can be used by pam, systemd and curl. I don't think it should be in libpam as it's only required when you use the pam_wheel module. 96086 7 randy.macleod 2023-07-26 21:22:03 +0000 Bulk move of 64 bugs to 4.3 M3 after a quick review. If a bug is actually fixed, please add a commit link and resolve it. -- Randy for YP bug team. 96114 8 louis.rannou 2023-07-27 07:15:27 +0000 commit 5eb501113730ec1040a548a31855acf568bea702 Author: Louis Rannou <lrannou@baylibre.com> Date: Thu Jun 15 13:43:55 2023 +0200 base-passwd: add the wheel group The wheel group is not declared while it can be used to access the systemd journal and to configure printers in CUPS. It can also be used for su and sudo permissions. So far it was created later in the rootfs postcommand systemd_create_users. (From OE-Core rev: bebe52ae9576393ebb9d7405fc77fba21e84ba5b) Signed-off-by: Louis Rannou <lrannou@baylibre.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>