oy
indeed, bring it postinst into the game is actually what I was trying to
avoid altogether.... ok -- in such cases it is best to consult ...
another package ;) I see that I have /usr/bin/slock installed with suid
so getting sources
$> dpkg -S /usr/bin/slock
suckless-tools: /usr/bin/slock
$> apt-get source suckless-tools
...
and looking into debian/rules I found:
override_dh_fixperms:
dh_fixperms -Xusr/bin/slock
ouch... let's RTFM:
dh_fixperms makes all files in usr/share/doc in the package build
directory (excluding files in the examples/ directory) be mode 644. It also
changes the permissions of all man pages to mode 644. It makes all files be
owned by root, and it removes group and other write permission from
all files. It removes execute permissions from any libraries, headers,
Perl modules, or desktop files that have it set. It makes all files in the
standard bin and sbin directories, usr/games/ and etc/init.d executable (since
v4). Finally, it removes the setuid and setgid bits from all
files in the package.
it makes some sense now ;) so we know how to avoid suid being reset! ;-)
anyone up for a commit?
On Sun, 01 Jul 2012, Luis Ibanez wrote:
> On Sun, Jul 1, 2012 at 3:48 PM, Thorsten Alteholz
> <[1][email protected]> wrote:
> On Sun, 1 Jul 2012, Luis Ibanez wrote:
> It turned out to be easier to remove the COPYING file
> as a final step in the installation:
> override_dh_auto_install:
> @echo "I: Fixing up permissions for setuid rights -- we aren't done
> yet!"
> chmod u+s
> $(CURDIR)/debian/$(BINPKG)/usr/$(GTM_INSTALL_DIR)/gtmsecshr
> seems to be wrong. You can a least set the bit for the buildd user,
> which makes no sense.
> I think this should be done in postinst.
> Thorsten,
> Yeap, the chmod u+s is not helping here.
> Quick question:
> What section in the rules files corresponds to "postinst" ?
> Should I put this in a "override_dh_installdeb" section ?
> Thanks
> Luis
> References
> Visible links
> 1. mailto:[email protected]
--
Yaroslav O. Halchenko
Postdoctoral Fellow, Department of Psychological and Brain Sciences
Dartmouth College, 419 Moore Hall, Hinman Box 6207, Hanover, NH 03755
Phone: +1 (603) 646-9834 Fax: +1 (603) 646-1419
WWW: http://www.linkedin.com/in/yarik
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: http://lists.debian.org/[email protected]
