Busybox su and login are not aware of PAM, so on a system
with linux-pam installed, they entirely ignore any rules.
These issues can be mitigated by removing the suid binary
that the symlinks point to and require, which is installed
by busybox-suid. Because busybox-suid handles more than su
and login, this commit replaces all the tools we use that
would be called through it.
Note that this does not remove Busybox su and login, as they
are in Busybox itself. This commit instead only removes the
suid interface that they would normally be called from.
See https://gitlab.alpinelinux.org/alpine/aports/-/issues/11730
for more information.
Signed-off-by: Aster Boese <asterboese@mailbox.org>
Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/7724>
Aster Boese
bd5b620021