From 0d568644e01c88d69071953970f3bed7b95da14f Mon Sep 17 00:00:00 2001
From: Bob Mottram <bob@robotics.uk.to>
Date: Tue, 29 Nov 2016 14:31:54 +0000
Subject: [PATCH] Set shadow permissions

---
 src/freedombone-utils-setup | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/freedombone-utils-setup b/src/freedombone-utils-setup
index b1842f8b..746b02a5 100755
--- a/src/freedombone-utils-setup
+++ b/src/freedombone-utils-setup
@@ -370,6 +370,13 @@ function disable_deferred_execution {
     systemctl disable atd
 }
 
+function set_shadow_permissions {
+    chown root:root /etc/shadow
+    chmod 0000 /etc/shadow
+    chown root:root /etc/gshadow
+    chmod 0000 /etc/gshadow
+}
+
 function setup_firewall {
     function_check create_completion_file
     create_completion_file
@@ -394,6 +401,9 @@ function setup_utils {
     read_config_param "PROJECT_REPO"
     write_config_param "PROJECT_REPO" "$PROJECT_REPO"
 
+    function_check set_shadow_permissions
+    set_shadow_permissions
+
     function_check remove_bluetooth
     remove_bluetooth