Author: neel Date: Thu Aug 21 19:04:15 2014 New Revision: 270289 URL: http://svnweb.freebsd.org/changeset/base/270289
Log: Change file permissions for some setuid executables so they are "o+r". The executable itself doesn't contain any privileged information. An example of where this is useful is when makefs(8) is creating an image that includes /sbin/shutdown. This can now be done without root privileges. Reviewed by: delphij Discussed with: delphij, des CR: https://reviews.freebsd.org/D662 Modified: head/sbin/mksnap_ffs/Makefile head/sbin/shutdown/Makefile head/usr.sbin/ppp/Makefile Modified: head/sbin/mksnap_ffs/Makefile ============================================================================== --- head/sbin/mksnap_ffs/Makefile Thu Aug 21 18:26:32 2014 (r270288) +++ head/sbin/mksnap_ffs/Makefile Thu Aug 21 19:04:15 2014 (r270289) @@ -10,9 +10,9 @@ WARNS?= 2 CFLAGS+=-I${.CURDIR}/../mount .if defined(NOSUID) -BINMODE=550 +BINMODE=554 .else -BINMODE=4550 +BINMODE=4554 BINOWN= root .endif BINGRP= operator Modified: head/sbin/shutdown/Makefile ============================================================================== --- head/sbin/shutdown/Makefile Thu Aug 21 18:26:32 2014 (r270288) +++ head/sbin/shutdown/Makefile Thu Aug 21 19:04:15 2014 (r270289) @@ -8,6 +8,6 @@ MLINKS= shutdown.8 poweroff.8 BINOWN= root BINGRP= operator -BINMODE=4550 +BINMODE=4554 .include <bsd.prog.mk> Modified: head/usr.sbin/ppp/Makefile ============================================================================== --- head/usr.sbin/ppp/Makefile Thu Aug 21 18:26:32 2014 (r270288) +++ head/usr.sbin/ppp/Makefile Thu Aug 21 19:04:15 2014 (r270289) @@ -33,9 +33,9 @@ PPP_NO_PAM= .endif .if defined(PPP_NO_SUID) -BINMODE=550 +BINMODE=554 .else -BINMODE=4550 +BINMODE=4554 BINOWN= root .endif BINGRP= network _______________________________________________ svn-src-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/svn-src-all To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
