aboutsummaryrefslogtreecommitdiffstats
path: root/news
diff options
context:
space:
mode:
authorkris <kris@FreeBSD.org>2000-06-26 13:07:20 +0800
committerkris <kris@FreeBSD.org>2000-06-26 13:07:20 +0800
commit266fcb7bb9266880bc40677a19a63098afe47af3 (patch)
tree5afa36bfb9ab4ee1797f903cfa512517417a7d19 /news
parentdf58dba143ad74272b6d3f8da31c459d2aeee36e (diff)
downloadfreebsd-ports-gnome-266fcb7bb9266880bc40677a19a63098afe47af3.tar.gz
freebsd-ports-gnome-266fcb7bb9266880bc40677a19a63098afe47af3.tar.zst
freebsd-ports-gnome-266fcb7bb9266880bc40677a19a63098afe47af3.zip
Remove setuid news privileges on inews by recommendation of inn maintainers
Correct typo from 1.33 which made rnews setuid news, not setgid uucp which it actually required to implement the intended change. Submitted by: Russ Allbery <rra@STANFORD.EDU> (first change) via Bugtraq
Diffstat (limited to 'news')
-rw-r--r--news/inn-stable/Makefile5
1 files changed, 4 insertions, 1 deletions
diff --git a/news/inn-stable/Makefile b/news/inn-stable/Makefile
index 58c84772cdc6..91746f9ede25 100644
--- a/news/inn-stable/Makefile
+++ b/news/inn-stable/Makefile
@@ -121,7 +121,10 @@ post-install:
${MKDIR} -p ${NEWSLIB}/${dir}
touch ${NEWSLIB}/${dir}/.keep_me
.endfor
+ # drop privs on inews because it is insecure
+ ${CHMOD} 555 ${NEWSLIB}/bin/inews
# make rnews work when getting news via uucp !
- ${CHMOD} 4555 ${NEWSLIB}/bin/rnews
+ ${CHMOD} 2555 ${NEWSLIB}/bin/rnews
+
.include <bsd.port.mk>