Author: neel
Date: Thu Sep  4 01:38:31 2014
New Revision: 271075
URL: http://svnweb.freebsd.org/changeset/base/271075

Log:
  MFC r270289:
  Change file permissions for some setuid executables so they are "o+r".
  The executable itself doesn't contain any privileged information.
  
  An example of where this is useful is when makefs(8) is creating an image
  that includes /sbin/shutdown. This can now be done without root privileges.

Modified:
  stable/10/sbin/mksnap_ffs/Makefile
  stable/10/sbin/shutdown/Makefile
  stable/10/usr.sbin/ppp/Makefile
Directory Properties:
  stable/10/   (props changed)

Modified: stable/10/sbin/mksnap_ffs/Makefile
==============================================================================
--- stable/10/sbin/mksnap_ffs/Makefile  Thu Sep  4 01:21:33 2014        
(r271074)
+++ stable/10/sbin/mksnap_ffs/Makefile  Thu Sep  4 01:38:31 2014        
(r271075)
@@ -10,9 +10,9 @@ WARNS?=       2
 CFLAGS+=-I${.CURDIR}/../mount
 
 .if defined(NOSUID)
-BINMODE=550
+BINMODE=554
 .else
-BINMODE=4550
+BINMODE=4554
 BINOWN=        root
 .endif
 BINGRP=        operator

Modified: stable/10/sbin/shutdown/Makefile
==============================================================================
--- stable/10/sbin/shutdown/Makefile    Thu Sep  4 01:21:33 2014        
(r271074)
+++ stable/10/sbin/shutdown/Makefile    Thu Sep  4 01:38:31 2014        
(r271075)
@@ -8,6 +8,6 @@ MLINKS= shutdown.8 poweroff.8
 
 BINOWN=        root
 BINGRP=        operator
-BINMODE=4550
+BINMODE=4554
 
 .include <bsd.prog.mk>

Modified: stable/10/usr.sbin/ppp/Makefile
==============================================================================
--- stable/10/usr.sbin/ppp/Makefile     Thu Sep  4 01:21:33 2014        
(r271074)
+++ stable/10/usr.sbin/ppp/Makefile     Thu Sep  4 01:38:31 2014        
(r271075)
@@ -33,9 +33,9 @@ PPP_NO_PAM=
 .endif
 
 .if defined(PPP_NO_SUID)
-BINMODE=550
+BINMODE=554
 .else
-BINMODE=4550
+BINMODE=4554
 BINOWN=        root
 .endif
 BINGRP=        network
_______________________________________________
svn-src-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"

Reply via email to