pkgsrc-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[pkgsrc/trunk]: pkgsrc/mk/pkginstall On second thought, maybe the rest of the...
details: https://anonhg.NetBSD.org/pkgsrc/rev/443e563d1eb5
branches: trunk
changeset: 530096:443e563d1eb5
user: jlam <jlam%pkgsrc.org@localhost>
date: Fri Jun 15 22:04:33 2007 +0000
description:
On second thought, maybe the rest of the world's software isn't as
well-audited as NetBSD's /usr/bin/su. Change the default
SETUID_ROOT_PERMS to 4511 to raise the bar slightly on finding
vulnerabilities in setuid-root binaries.
diffstat:
mk/pkginstall/bsd.pkginstall.mk | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diffs (18 lines):
diff -r aff376a4ad42 -r 443e563d1eb5 mk/pkginstall/bsd.pkginstall.mk
--- a/mk/pkginstall/bsd.pkginstall.mk Fri Jun 15 21:59:23 2007 +0000
+++ b/mk/pkginstall/bsd.pkginstall.mk Fri Jun 15 22:04:33 2007 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: bsd.pkginstall.mk,v 1.24 2007/06/15 14:46:02 jlam Exp $
+# $NetBSD: bsd.pkginstall.mk,v 1.25 2007/06/15 22:04:33 jlam Exp $
#
# This Makefile fragment is included by bsd.pkg.mk and implements the
# common INSTALL/DEINSTALL scripts framework. To use the pkginstall
@@ -315,7 +315,7 @@
# Keywords: setuid setgid st_mode perms
#
SPECIAL_PERMS?= # empty
-SETUID_ROOT_PERMS?= ${REAL_ROOT_USER} ${REAL_ROOT_GROUP} 4555
+SETUID_ROOT_PERMS?= ${REAL_ROOT_USER} ${REAL_ROOT_GROUP} 4511
_INSTALL_PERMS_FILE= ${_PKGINSTALL_DIR}/perms
_INSTALL_PERMS_DATAFILE= ${_PKGINSTALL_DIR}/perms-data
Home |
Main Index |
Thread Index |
Old Index