Skip to content

[FEATURE REQUEST] Check which distributions that packages are built for support the shadow group #61770

@barneysowood

Description

@barneysowood

Opened as a task for the Security WG

Is your feature request related to a problem? Please describe.

As part of the work to implement SEP19 we need to be able to run the salt-master process as a non-root user. In order to allow the pam external_auth module to still function, the user that the salt-master process is running as must be able to read /etc/shadow. A number of Linux distros enable this by having a "shadow" group that has read permissions on /etc/shadow.

Describe the solution you'd like

Gather list of Linux distributions the project builds packages for and document which of those support the "shadow" group.

Additional context

SEP19

Metadata

Metadata

Assignees

Labels

Featurenew functionality including changes to functionality and code refactors, etc.securityissues and PRs for the Security Working Group

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions