hardenedbsd/HardenedBSD
1
0
Fork 0
mirror of https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git synced 2025-01-23 17:31:43 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Make sure that all non-root-owned binaries in standard system

Browse Source 
paths are chflaged 'schg' to prevent exploit vectors when run
by cron, by a root user, or by a user other then the one owning the
binary.  This applies to most of the uucp binaries, cu, tip, and
man (man was already installed properly).

MFC will occur when approved.
This commit is contained in:
Matthew Dillon 2001-09-09 04:54:10 +00:00
parent 7b832f6f75
commit ea079e4650
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=83238
6 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
gnu/libexec/uucp/cu/Makefile
View File

@ -12,6 +12,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

1
gnu/libexec/uucp/uucp/Makefile
View File

@ -11,6 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

2
gnu/libexec/uucp/uuname/Makefile
View File

@ -11,7 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

1
gnu/libexec/uucp/uustat/Makefile
View File

@ -13,6 +13,7 @@ DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DOWNER=\"$(owner)\"\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

1
gnu/libexec/uucp/uux/Makefile
View File

@ -11,6 +11,7 @@ LDADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
DPADD+= $(LIBUNIX) $(LIBUUCONF) $(LIBUUCP)
CFLAGS+= -I$(.CURDIR)/../common_sources\
-DVERSION=\"$(VERSION)\"
INSTALLFLAGS+= -fschg
.include <bsd.prog.mk>
.PATH: $(.CURDIR)/../common_sources

1
usr.bin/tip/tip/Makefile
View File

@ -21,6 +21,7 @@ LINKS= ${BINDIR}/tip
MAN= tip.1 modems.5
SRCS= acu.c acutab.c cmds.c cmdtab.c cu.c hunt.c log.c partab.c \
remote.c tip.c tipout.c value.c vars.c
INSTALLFLAGS+= -fschg
BINDIR?= /usr/bin
BINOWN= uucp