diff options
| author | kris <kris@FreeBSD.org> | 2000-06-26 05:07:20 +0000 |
|---|---|---|
| committer | kris <kris@FreeBSD.org> | 2000-06-26 05:07:20 +0000 |
| commit | 266fcb7bb9266880bc40677a19a63098afe47af3 (patch) | |
| tree | 5afa36bfb9ab4ee1797f903cfa512517417a7d19 /news | |
| parent | df58dba143ad74272b6d3f8da31c459d2aeee36e (diff) | |
| download | FreeBSD-ports-266fcb7bb9266880bc40677a19a63098afe47af3.zip FreeBSD-ports-266fcb7bb9266880bc40677a19a63098afe47af3.tar.gz | |
Remove setuid news privileges on inews by recommendation of inn maintainers
Correct typo from 1.33 which made rnews setuid news, not setgid uucp which it actually
required to implement the intended change.
Submitted by: Russ Allbery <rra@STANFORD.EDU> (first change) via Bugtraq
Diffstat (limited to 'news')
| -rw-r--r-- | news/inn-stable/Makefile | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/news/inn-stable/Makefile b/news/inn-stable/Makefile index 58c8477..91746f9 100644 --- a/news/inn-stable/Makefile +++ b/news/inn-stable/Makefile @@ -121,7 +121,10 @@ post-install: ${MKDIR} -p ${NEWSLIB}/${dir} touch ${NEWSLIB}/${dir}/.keep_me .endfor + # drop privs on inews because it is insecure + ${CHMOD} 555 ${NEWSLIB}/bin/inews # make rnews work when getting news via uucp ! - ${CHMOD} 4555 ${NEWSLIB}/bin/rnews + ${CHMOD} 2555 ${NEWSLIB}/bin/rnews + .include <bsd.port.mk> |
