Openembedded Core Discussions
 help / color / mirror / Atom feed
* [PATCH 0/1] lsof: clear setuid
@ 2017-05-27  7:45 kai.kang
  2017-05-27  7:45 ` [PATCH 1/1] " kai.kang
  0 siblings, 1 reply; 2+ messages in thread
From: kai.kang @ 2017-05-27  7:45 UTC (permalink / raw)
  To: openembedded-core

From: Kai Kang <kai.kang@windriver.com>

The following changes since commit 5eed6c644f715783edb0d05926373e719442dd6a:

  libpcap: add native package (2017-05-25 23:59:32 +0100)

are available in the git repository at:

  git://git.pokylinux.org/poky-contrib kangkai/lsof
  http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=kangkai/lsof

Kai Kang (1):
  lsof: clear setuid

 meta/recipes-extended/lsof/lsof_4.89.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

-- 
2.10.1



^ permalink raw reply	[flat|nested] 2+ messages in thread

* [PATCH 1/1] lsof: clear setuid
  2017-05-27  7:45 [PATCH 0/1] lsof: clear setuid kai.kang
@ 2017-05-27  7:45 ` kai.kang
  0 siblings, 0 replies; 2+ messages in thread
From: kai.kang @ 2017-05-27  7:45 UTC (permalink / raw)
  To: openembedded-core

From: Kai Kang <kai.kang@windriver.com>

Having 'lsof' as a +s (setuid) binary could lead to security issues if
a compromise in the binary is found.  It is better that it be -s by
default as a precaution.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
---
 meta/recipes-extended/lsof/lsof_4.89.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta/recipes-extended/lsof/lsof_4.89.bb b/meta/recipes-extended/lsof/lsof_4.89.bb
index b732cf0..650b34c 100644
--- a/meta/recipes-extended/lsof/lsof_4.89.bb
+++ b/meta/recipes-extended/lsof/lsof_4.89.bb
@@ -53,6 +53,6 @@ do_compile () {
 
 do_install () {
 	install -d ${D}${sbindir} ${D}${mandir}/man8
-	install -m 4755 lsof ${D}${sbindir}/lsof
+	install -m 0755 lsof ${D}${sbindir}/lsof
 	install -m 0644 lsof.8 ${D}${mandir}/man8/lsof.8
 }
-- 
2.10.1



^ permalink raw reply related	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2017-05-27  7:49 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2017-05-27  7:45 [PATCH 0/1] lsof: clear setuid kai.kang
2017-05-27  7:45 ` [PATCH 1/1] " kai.kang

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox