Make sure that all non-root-owned binaries in standard system

paths are chflaged 'schg' to prevent exploit vectors when run
by cron, by a root user, or by a user other then the one owning the
binary.  This applies to most of the uucp binaries, cu, tip, and
man (man was already installed properly).

MFC will occur when approved.
This commit is contained in:
Matthew Dillon 2001-09-09 04:54:10 +00:00
parent 7b832f6f75
commit ea079e4650
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=83238
6 changed files with 6 additions and 1 deletions

View File

@ -12,6 +12,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

View File

@ -11,6 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

View File

@ -11,7 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

View File

@ -13,6 +13,7 @@ DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DOWNER=\"$(owner)\"\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

View File

@ -11,6 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

View File

@ -21,6 +21,7 @@ LINKS= ${BINDIR}/tip
MAN= tip.1 modems.5
SRCS= acu.c acutab.c cmds.c cmdtab.c cu.c hunt.c log.c partab.c \
remote.c tip.c tipout.c value.c vars.c
INSTALLFLAGS+= -fschg
BINDIR?= /usr/bin
BINOWN= uucp