=== contents of file_permissions.bbclass, which is inherited by machine-image recipe ===

ROOTFS_POSTPROCESS_COMMAND += 'set_rootfs_file_permissions; '


set_rootfs_file_permissions() {
	chmod 600 ${IMAGE_ROOTFS}/etc/shadow
	chmod 644 ${IMAGE_ROOTFS}/etc/passwd
	chmod 644 ${IMAGE_ROOTFS}/etc/group

	# Setting suid bit for su and login, to allow regular users to use them.
	chmod +s ${IMAGE_ROOTFS_RW}${base_bindir}/su.shadow ${IMAGE_ROOTFS_RW}${base_bindir}/login.shadow
}