* [PATCH] FHS: Drop /usr/bin/su from list of allowed SUID binaries
@ 2023-03-20 11:38 Stefan Schantl
0 siblings, 0 replies; only message in thread
From: Stefan Schantl @ 2023-03-20 11:38 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 858 bytes --]
In the Makefile (util-linx.nm) we specify some capabilities to avoid setting
the suid bit.
Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>
---
src/libpakfire/fhs.c | 1 -
1 file changed, 1 deletion(-)
diff --git a/src/libpakfire/fhs.c b/src/libpakfire/fhs.c
index f0ddc37c..8e85f29d 100644
--- a/src/libpakfire/fhs.c
+++ b/src/libpakfire/fhs.c
@@ -69,7 +69,6 @@ static const struct pakfire_fhs_check {
{ "/usr/bin/ksu", S_IFREG, S_ISUID|0755, "root", "root", 0 },
{ "/usr/bin/passwd", S_IFREG, S_ISUID|0755, "root", "root", 0 },
{ "/usr/bin/pkexec", S_IFREG, S_ISUID|0755, "root", "root", 0 },
- { "/usr/bin/su", S_IFREG, S_ISUID|0755, "root", "root", 0 },
{ "/usr/bin/sudo", S_IFREG, S_ISUID|0755, "root", "root", 0 },
// Any files in /usr/{,s}bin must be owned by root and have 0755
--
2.30.2
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2023-03-20 11:38 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-03-20 11:38 [PATCH] FHS: Drop /usr/bin/su from list of allowed SUID binaries Stefan Schantl
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox