# fss-0002
# The following should be sticky> /bin/{su,chage,chsh,expiry,gpasswd,newgrp,passwd}
# NOTE> see if the following can be removed: /bin/login

main:
  ./configure $CONF $DOCDIR --without-libpam --without-selinux --with-group-name-max-length=256 --without-nscd
  make LDFLAGS="-lintl"
  make install
  cp -v src/sulogin /sbin/
  cp -v ${PR}{passwd,shadow} /etc/
  cp -v ${PR}login.{defs,access} /etc/
  mkdir -vp /etc/default
  cp -v ${PR}useradd /etc/default/
  sed -i -e "s|^ROOT_USER_NAME:|$root_user_name:|" /etc/shadow /etc/passwd
  sed -i -e "s|ROOT_USER_HOME_DIRECTORY|$root_user_home_dir|" /etc/passwd
  touch /etc/gshadow
  mv -v /sbin/nologin /bin/
  chgrp e_switch_user /bin/su
  chgrp e_user_admin -R /bin/chage /sbin/{pwconv,pwunconv,grpconv,grpunconv,grpck,pwck,groupmod,useradd,userdel,usermod,groupadd,groupdel,groupmod}
  chgrp e_public -R /etc/{default,group,gshadow,login.access,login.defs,passwd} /bin/{login,nologin} /sbin/sulogin
  chgrp e_user -R /bin/{passwd,chsh,gpasswd}
  chgrp 0 /sbin/user{add,del}
  chmod o-rx /bin/su
  chmod o-rx -R /bin/chage /sbin/{pwconv,pwunconv,grpconv,grpunconv,grpck,pwck,groupmod,useradd,userdel,usermod,groupadd,groupdel,groupmod}
  chmod o-rx -R /etc/{default,group,gshadow,login.access,login.defs,passwd} /bin/{login,nologin} /sbin/sulogin
  chmod o-rx -R /bin/{passwd,chsh,gpasswd}
  chgrp 0 /sbin/user{add,del}
  chmod u+rwx,go-rwx /sbin/user{add,del}
  chmod u+s,g-s /bin/{chage,chsh,gpasswd,passwd,su}
  chgrp 0 /etc/{,g}shadow
  chmod u+rwx,go-rwx /etc/{,g}shadow
  rm -Rf /share/locale /bin/{chfn,expiry,faillog,lastlog,newgrp,sg} /sbin/{chgpasswd,chpasswd,logoutd,newusers,vipw,groupmems,vigr}
