51924015e8
fixes CVE-2008-4311 The default policy for both sent and received messages was effectively *allow*, and not deny as stated. "looks good" todd@
18 lines
920 B
Plaintext
18 lines
920 B
Plaintext
$OpenBSD: patch-bus_Makefile_in,v 1.3 2008/12/09 14:12:08 jasper Exp $
|
|
--- bus/Makefile.in.orig Fri Dec 5 17:53:44 2008
|
|
+++ bus/Makefile.in Tue Dec 9 13:23:40 2008
|
|
@@ -1301,13 +1301,6 @@ install-data-hook:
|
|
$(mkinstalldirs) $(DESTDIR)$(datadir)/dbus-1/system-services
|
|
$(mkinstalldirs) $(DESTDIR)$(libexecdir)/dbus-1
|
|
$(INSTALL_PROGRAM) dbus-daemon-launch-helper $(DESTDIR)$(libexecdir)
|
|
- if test `id -u` -eq 0; then \
|
|
- chown root:$(DBUS_USER) $(DESTDIR)$(libexecdir)/dbus-daemon-launch-helper; \
|
|
- chmod 4750 $(DESTDIR)$(libexecdir)/dbus-daemon-launch-helper; \
|
|
- else \
|
|
- echo "Not installing $(DESTDIR)$(libexecdir)/dbus-daemon-launch-helper binary setuid!"; \
|
|
- echo "You'll need to manually set permissions to root:$(DBUS_USER) and permissions 4750"; \
|
|
- fi
|
|
# Tell versions [3.59,3.63) of GNU make to not export all variables.
|
|
# Otherwise a system limit (for SysV at least) may be exceeded.
|
|
.NOEXPORT:
|