Make sure that all non-root-owned binaries in standard system

paths are chflaged 'schg' to prevent exploit vectors when run
by cron, by a root user, or by a user other then the one owning the
binary.  This applies to most of the uucp binaries, cu, tip, and
man (man was already installed properly).

MFC will occur when approved.
This commit is contained in:
dillon 2001-09-09 04:54:10 +00:00
parent aed5856aa9
commit 838c380fcf
6 changed files with 6 additions and 1 deletions

View File

@ -12,6 +12,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

View File

@ -11,6 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

View File

@ -11,7 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

View File

@ -13,6 +13,7 @@ DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DOWNER=\"$(owner)\"\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

View File

@ -11,6 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

View File

@ -21,6 +21,7 @@ LINKS= ${BINDIR}/tip
MAN= tip.1 modems.5
SRCS= acu.c acutab.c cmds.c cmdtab.c cu.c hunt.c log.c partab.c \
remote.c tip.c tipout.c value.c vars.c
INSTALLFLAGS+= -fschg
BINDIR?= /usr/bin
BINOWN= uucp