[tacacs] User with priv_lvl 0 should not be in docker group (#1626)

taoyl-ms · web-flow · commit 143842ee8f81 · 2018-04-20T18:30:07.000-07:00
diff --git a/src/tacacs/nss/0001-Modify-user-map-profile.patch b/src/tacacs/nss/0001-Modify-user-map-profile.patch
@@ -564,9 +564,9 @@ index 79e62b9..ecfa0b0 100644
 +    useradd_info_t *user;
 +
 +    user = &useradd_grp_list[MIN_TACACS_USER_PRIV];
-+    user->gid = 999;
++    user->gid = 100;
 +    user->info = strdup("remote_user");
-+    user->secondary_grp = strdup("docker");
++    user->secondary_grp = strdup("users");
 +    user->shell = strdup("/bin/bash");
 +
 +    user = &useradd_grp_list[MAX_TACACS_USER_PRIV];

Original file line number	Diff line number	Diff line change
`@@ -564,9 +564,9 @@ index 79e62b9..ecfa0b0 100644`
`564`	`564`	`+ useradd_info_t *user;`
`565`	`565`	`+`
`566`	`566`	`+ user = &useradd_grp_list[MIN_TACACS_USER_PRIV];`
`567`		`-+ user->gid = 999;`
	`567`	`++ user->gid = 100;`
`568`	`568`	`+ user->info = strdup("remote_user");`
`569`		`-+ user->secondary_grp = strdup("docker");`
	`569`	`++ user->secondary_grp = strdup("users");`
`570`	`570`	`+ user->shell = strdup("/bin/bash");`
`571`	`571`	`+`
`572`	`572`	`+ user = &useradd_grp_list[MAX_TACACS_USER_PRIV];`