In the Makefile (util-linx.nm) we specify some capabilities to avoid setting the suid bit.

Signed-off-by: Stefan Schantl stefan.schantl@ipfire.org --- src/libpakfire/fhs.c | 1 - 1 file changed, 1 deletion(-)

diff --git a/src/libpakfire/fhs.c b/src/libpakfire/fhs.c index f0ddc37c..8e85f29d 100644 --- a/src/libpakfire/fhs.c +++ b/src/libpakfire/fhs.c @@ -69,7 +69,6 @@ static const struct pakfire_fhs_check { { "/usr/bin/ksu", S_IFREG, S_ISUID|0755, "root", "root", 0 }, { "/usr/bin/passwd", S_IFREG, S_ISUID|0755, "root", "root", 0 }, { "/usr/bin/pkexec", S_IFREG, S_ISUID|0755, "root", "root", 0 }, - { "/usr/bin/su", S_IFREG, S_ISUID|0755, "root", "root", 0 }, { "/usr/bin/sudo", S_IFREG, S_ISUID|0755, "root", "root", 0 },

// Any files in /usr/{,s}bin must be owned by root and have 0755