Move the registry auth script

We cannot expect that the user that needs containers has root level access to the system. Therefore the executable shold be in the bindir. Eventually we want the script to be setuid but before we can do thet we need a security audit, bug has been filed.
SUSE-Enceladus · Apr 17, 2024 · e3944c2 · e3944c2
1 parent 1b973a4
commit e3944c2
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/cloud-regionsrv-client.spec b/cloud-regionsrv-client.spec
@@ -186,8 +186,10 @@ fi
 %dir %{_usr}/lib/zypp/plugins/urlresolver
 %dir /var/cache/cloudregister
 %{_mandir}/man*/*
+# Do not expect the user that needs containers to have root access
+# on the system
+%{_bindir}/cloudguestregistryauth
 %{_sbindir}/cloudguest-repo-service
-%{_sbindir}/cloudguestregistryauth
 %{_sbindir}/containerbuild-regionsrv
 %{_sbindir}/createregioninfo
 %{_sbindir}/switchcloudguestservices

diff --git a/usr/sbin/cloudguestregistryauth → usr/bin/cloudguestregistryauth b/usr/sbin/cloudguestregistryauth → usr/bin/cloudguestregistryauth