diff options
| author | dillon <dillon@FreeBSD.org> | 2001-09-09 04:54:10 +0000 |
|---|---|---|
| committer | dillon <dillon@FreeBSD.org> | 2001-09-09 04:54:10 +0000 |
| commit | 838c380fcf37ee619a9b4f2c4a0f1b2af6c131ca (patch) | |
| tree | 9fefd5178f0b57721dce479e0224af7341784f02 | |
| parent | aed5856aa95fc7edc81d952f2c440a76b49021a6 (diff) | |
| download | FreeBSD-src-838c380fcf37ee619a9b4f2c4a0f1b2af6c131ca.zip FreeBSD-src-838c380fcf37ee619a9b4f2c4a0f1b2af6c131ca.tar.gz | |
Make sure that all non-root-owned binaries in standard system
paths are chflaged 'schg' to prevent exploit vectors when run
by cron, by a root user, or by a user other then the one owning the
binary. This applies to most of the uucp binaries, cu, tip, and
man (man was already installed properly).
MFC will occur when approved.
| -rw-r--r-- | gnu/libexec/uucp/cu/Makefile | 1 | ||||
| -rw-r--r-- | gnu/libexec/uucp/uucp/Makefile | 1 | ||||
| -rw-r--r-- | gnu/libexec/uucp/uuname/Makefile | 2 | ||||
| -rw-r--r-- | gnu/libexec/uucp/uustat/Makefile | 1 | ||||
| -rw-r--r-- | gnu/libexec/uucp/uux/Makefile | 1 | ||||
| -rw-r--r-- | usr.bin/tip/tip/Makefile | 1 |
6 files changed, 6 insertions, 1 deletions
diff --git a/gnu/libexec/uucp/cu/Makefile b/gnu/libexec/uucp/cu/Makefile index 612546d..faad03b 100644 --- a/gnu/libexec/uucp/cu/Makefile +++ b/gnu/libexec/uucp/cu/Makefile @@ -12,6 +12,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP) DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP) CFLAGS+= -I$(.CURDIR)/../common_sources\ -DVERSION=\"$(VERSION)\" +INSTALLFLAGS+= -fschg .include <bsd.prog.mk> .PATH: $(.CURDIR)/../common_sources diff --git a/gnu/libexec/uucp/uucp/Makefile b/gnu/libexec/uucp/uucp/Makefile index 0219fff..2f91d82 100644 --- a/gnu/libexec/uucp/uucp/Makefile +++ b/gnu/libexec/uucp/uucp/Makefile @@ -11,6 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP) DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP) CFLAGS+= -I$(.CURDIR)/../common_sources\ -DVERSION=\"$(VERSION)\" +INSTALLFLAGS+= -fschg .include <bsd.prog.mk> .PATH: $(.CURDIR)/../common_sources diff --git a/gnu/libexec/uucp/uuname/Makefile b/gnu/libexec/uucp/uuname/Makefile index f5e6dd9..743a3b5 100644 --- a/gnu/libexec/uucp/uuname/Makefile +++ b/gnu/libexec/uucp/uuname/Makefile @@ -11,7 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP) DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP) CFLAGS+= -I$(.CURDIR)/../common_sources\ -DVERSION=\"$(VERSION)\" - +INSTALLFLAGS+= -fschg .include <bsd.prog.mk> .PATH: $(.CURDIR)/../common_sources diff --git a/gnu/libexec/uucp/uustat/Makefile b/gnu/libexec/uucp/uustat/Makefile index be839ca..5743180 100644 --- a/gnu/libexec/uucp/uustat/Makefile +++ b/gnu/libexec/uucp/uustat/Makefile @@ -13,6 +13,7 @@ DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP) CFLAGS+= -I$(.CURDIR)/../common_sources\ -DOWNER=\"$(owner)\"\ -DVERSION=\"$(VERSION)\" +INSTALLFLAGS+= -fschg .include <bsd.prog.mk> .PATH: $(.CURDIR)/../common_sources diff --git a/gnu/libexec/uucp/uux/Makefile b/gnu/libexec/uucp/uux/Makefile index 6059352..9194c1e 100644 --- a/gnu/libexec/uucp/uux/Makefile +++ b/gnu/libexec/uucp/uux/Makefile @@ -11,6 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP) DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP) CFLAGS+= -I$(.CURDIR)/../common_sources\ -DVERSION=\"$(VERSION)\" +INSTALLFLAGS+= -fschg .include <bsd.prog.mk> .PATH: $(.CURDIR)/../common_sources diff --git a/usr.bin/tip/tip/Makefile b/usr.bin/tip/tip/Makefile index fd208d7..982f3dc 100644 --- a/usr.bin/tip/tip/Makefile +++ b/usr.bin/tip/tip/Makefile @@ -21,6 +21,7 @@ LINKS= ${BINDIR}/tip MAN= tip.1 modems.5 SRCS= acu.c acutab.c cmds.c cmdtab.c cu.c hunt.c log.c partab.c \ remote.c tip.c tipout.c value.c vars.c +INSTALLFLAGS+= -fschg BINDIR?= /usr/bin BINOWN= uucp |
