diff options
author | skv <skv@FreeBSD.org> | 2006-11-21 00:51:15 +0800 |
---|---|---|
committer | skv <skv@FreeBSD.org> | 2006-11-21 00:51:15 +0800 |
commit | 1584bd9546da174fad2ecfd72e791efa7a24d02a (patch) | |
tree | c9d9fb8d70a10f8970b763a455bf4fda6c99ed26 /databases/firebird20-server | |
parent | 91dd8b5861fb7155888e8ea57bb61beb1a6ddb53 (diff) | |
download | freebsd-ports-gnome-1584bd9546da174fad2ecfd72e791efa7a24d02a.tar.gz freebsd-ports-gnome-1584bd9546da174fad2ecfd72e791efa7a24d02a.tar.zst freebsd-ports-gnome-1584bd9546da174fad2ecfd72e791efa7a24d02a.zip |
Change permissions for formerly suid-ed binaries:
-r-xr-xr-x root wheel fb_inet_server
-r-sr-x--- root firebird fb_lock_mgr
-r-x------ root wheel gds_drop
1. fb_inet_server is installed as normal binary but still must be started
under "firebird" user (it must be specified in x?inetd.conf)
2. fb_lock_mgr is still suid-ed binary but can be started only by users
in "firebird" group - it affects usage of "gsec" and similar utilities
while using "embedded" (direct) database access mode.
3. gds_drop is installed as normal binary but can be started by "root" only
to prevent any improper/malicious usage.
Diffstat (limited to 'databases/firebird20-server')
-rw-r--r-- | databases/firebird20-server/Makefile | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/databases/firebird20-server/Makefile b/databases/firebird20-server/Makefile index 509df22b931f..c6a7e42cd796 100644 --- a/databases/firebird20-server/Makefile +++ b/databases/firebird20-server/Makefile @@ -7,7 +7,7 @@ PORTNAME?= firebird PORTVERSION= 2.0.0 -PORTREVISION?= 3 +PORTREVISION?= 4 CATEGORIES?= databases MASTER_SITES= ${MASTER_SITE_SOURCEFORGE} MASTER_SITE_SUBDIR=firebird @@ -59,8 +59,7 @@ ALL_TARGET= firebird_boot ref_databases msgs libfbembed intl otherfiles \ SUB_FILES= pkg-install pkg-message aliases.conf -SUID_BIN= fb_inet_server fb_lock_mgr gds_drop -UTIL_BIN= fb_lock_print gbak gdef gfix gsec gstat nbackup +UTIL_BIN= fb_inet_server fb_lock_print gbak gdef gfix gsec gstat nbackup UDF_SO= ib_udf.so fbudf.so UDF_SQL= src/extlib/ib_udf2.sql src/extlib/fbudf/fbudf.sql .else @@ -156,9 +155,10 @@ do-install: .if !defined(CLIENT_ONLY) ${INSTALL_PROGRAM} ${UTIL_BIN:S!^!${WRKSRC}/gen/firebird/bin/!} ${PREFIX}/bin - - ${INSTALL_PROGRAM} -o firebird -g firebird -m 6550 \ - ${SUID_BIN:S!^!${WRKSRC}/gen/firebird/bin/!} ${PREFIX}/bin + ${INSTALL_PROGRAM} -o root -g firebird -m 4550 \ + ${WRKSRC}/gen/firebird/bin/fb_lock_mgr ${PREFIX}/bin + ${INSTALL_PROGRAM} -m 500 \ + ${WRKSRC}/gen/firebird/bin/gds_drop ${PREFIX}/bin @${MKDIR} ${CONFDIR} ${INSTALL_DATA} ${WRKDIR}/aliases.conf ${CONFDIR}/aliases.conf.sample |