Change file permissions for some setuid executables so they are "o+r".

The executable itself doesn't contain any privileged information.

An example of where this is useful is when makefs(8) is creating an image
that includes /sbin/shutdown. This can now be done without root privileges.

Reviewed by:	delphij
Discussed with:	delphij, des
CR:		https://reviews.freebsd.org/D662
This commit is contained in:
Neel Natu 2014-08-21 19:04:15 +00:00
parent c6e1a98786
commit f518456fdb
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=270289
3 changed files with 5 additions and 5 deletions

View file

@ -10,9 +10,9 @@ WARNS?= 2
CFLAGS+=-I${.CURDIR}/../mount
.if defined(NOSUID)
BINMODE=550
BINMODE=554
.else
BINMODE=4550
BINMODE=4554
BINOWN= root
.endif
BINGRP= operator

View file

@ -8,6 +8,6 @@ MLINKS= shutdown.8 poweroff.8
BINOWN= root
BINGRP= operator
BINMODE=4550
BINMODE=4554
.include <bsd.prog.mk>

View file

@ -33,9 +33,9 @@ PPP_NO_PAM=
.endif
.if defined(PPP_NO_SUID)
BINMODE=550
BINMODE=554
.else
BINMODE=4550
BINMODE=4554
BINOWN= root
.endif
BINGRP= network