saltstack / saltstack/salt

[FEATURE REQUEST] Check which distributions that packages are built for support the shadow group

Open
#61,770 0 comments 0 reactions 1 assignee View on GitHub

@barneysowood is already working on this.

Since Nov 15, 2022.

Feature security
Dominant language
Python
Stars
15.7k
Forks
5.6k
Avg merge
2d 44m
Merged PRs (30d)
80

Description

Opened as a task for the Security WG

Is your feature request related to a problem? Please describe.

As part of the work to implement SEP19 we need to be able to run the salt-master process as a non-root user. In order to allow the pam external_auth module to still function, the user that the salt-master process is running as must be able to read /etc/shadow. A number of Linux distros enable this by having a "shadow" group that has read permissions on /etc/shadow.

Describe the solution you'd like

Gather list of Linux distributions the project builds packages for and document which of those support the "shadow" group.

Additional context

SEP19

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.