From 58d0c0614cd40c0bcca6fad4ced68fae23dbc695 Mon Sep 17 00:00:00 2001 From: neel Date: Thu, 4 Sep 2014 01:38:31 +0000 Subject: [PATCH] MFC r270289: Change file permissions for some setuid executables so they are "o+r". The executable itself doesn't contain any privileged information. An example of where this is useful is when makefs(8) is creating an image that includes /sbin/shutdown. This can now be done without root privileges. git-svn-id: svn://svn.freebsd.org/base/stable/10@271075 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f --- sbin/mksnap_ffs/Makefile | 4 ++-- sbin/shutdown/Makefile | 2 +- usr.sbin/ppp/Makefile | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/sbin/mksnap_ffs/Makefile b/sbin/mksnap_ffs/Makefile index 9247cb278..de96fa03e 100644 --- a/sbin/mksnap_ffs/Makefile +++ b/sbin/mksnap_ffs/Makefile @@ -10,9 +10,9 @@ WARNS?= 2 CFLAGS+=-I${.CURDIR}/../mount .if defined(NOSUID) -BINMODE=550 +BINMODE=554 .else -BINMODE=4550 +BINMODE=4554 BINOWN= root .endif BINGRP= operator diff --git a/sbin/shutdown/Makefile b/sbin/shutdown/Makefile index a6ecb9351..905d1bc9a 100644 --- a/sbin/shutdown/Makefile +++ b/sbin/shutdown/Makefile @@ -8,6 +8,6 @@ MLINKS= shutdown.8 poweroff.8 BINOWN= root BINGRP= operator -BINMODE=4550 +BINMODE=4554 .include diff --git a/usr.sbin/ppp/Makefile b/usr.sbin/ppp/Makefile index 994366593..9bbcb6ce4 100644 --- a/usr.sbin/ppp/Makefile +++ b/usr.sbin/ppp/Makefile @@ -33,9 +33,9 @@ PPP_NO_PAM= .endif .if defined(PPP_NO_SUID) -BINMODE=550 +BINMODE=554 .else -BINMODE=4550 +BINMODE=4554 BINOWN= root .endif BINGRP= network -- 2.45.0