Make sure that all non-root-owned binaries in standard system
paths are chflaged 'schg' to prevent exploit vectors when run by cron, by a root user, or by a user other then the one owning the binary. This applies to most of the uucp binaries, cu, tip, and man (man was already installed properly). MFC will occur when approved.
This commit is contained in:
parent
aed5856aa9
commit
838c380fcf
@ -12,6 +12,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
|
||||
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
|
||||
CFLAGS+= -I$(.CURDIR)/../common_sources\
|
||||
-DVERSION=\"$(VERSION)\"
|
||||
INSTALLFLAGS+= -fschg
|
||||
|
||||
.include <bsd.prog.mk>
|
||||
.PATH: $(.CURDIR)/../common_sources
|
||||
|
@ -11,6 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
|
||||
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
|
||||
CFLAGS+= -I$(.CURDIR)/../common_sources\
|
||||
-DVERSION=\"$(VERSION)\"
|
||||
INSTALLFLAGS+= -fschg
|
||||
|
||||
.include <bsd.prog.mk>
|
||||
.PATH: $(.CURDIR)/../common_sources
|
||||
|
@ -11,7 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
|
||||
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
|
||||
CFLAGS+= -I$(.CURDIR)/../common_sources\
|
||||
-DVERSION=\"$(VERSION)\"
|
||||
|
||||
INSTALLFLAGS+= -fschg
|
||||
|
||||
.include <bsd.prog.mk>
|
||||
.PATH: $(.CURDIR)/../common_sources
|
||||
|
@ -13,6 +13,7 @@ DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
|
||||
CFLAGS+= -I$(.CURDIR)/../common_sources\
|
||||
-DOWNER=\"$(owner)\"\
|
||||
-DVERSION=\"$(VERSION)\"
|
||||
INSTALLFLAGS+= -fschg
|
||||
|
||||
.include <bsd.prog.mk>
|
||||
.PATH: $(.CURDIR)/../common_sources
|
||||
|
@ -11,6 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
|
||||
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
|
||||
CFLAGS+= -I$(.CURDIR)/../common_sources\
|
||||
-DVERSION=\"$(VERSION)\"
|
||||
INSTALLFLAGS+= -fschg
|
||||
|
||||
.include <bsd.prog.mk>
|
||||
.PATH: $(.CURDIR)/../common_sources
|
||||
|
@ -21,6 +21,7 @@ LINKS= ${BINDIR}/tip
|
||||
MAN= tip.1 modems.5
|
||||
SRCS= acu.c acutab.c cmds.c cmdtab.c cu.c hunt.c log.c partab.c \
|
||||
remote.c tip.c tipout.c value.c vars.c
|
||||
INSTALLFLAGS+= -fschg
|
||||
|
||||
BINDIR?= /usr/bin
|
||||
BINOWN= uucp
|
||||
|
Loading…
x
Reference in New Issue
Block a user