openbsd-ports/x11/dbus/patches/patch-bus_Makefile_in
jasper 51924015e8 - SECURITY UPDATE for dbus to 1.2.6
fixes CVE-2008-4311
The default policy for both sent and received messages was
effectively *allow*, and not deny as stated.

"looks good" todd@
2008-12-09 14:12:08 +00:00

18 lines
920 B
Plaintext

$OpenBSD: patch-bus_Makefile_in,v 1.3 2008/12/09 14:12:08 jasper Exp $
--- bus/Makefile.in.orig Fri Dec 5 17:53:44 2008
+++ bus/Makefile.in Tue Dec 9 13:23:40 2008
@@ -1301,13 +1301,6 @@ install-data-hook:
$(mkinstalldirs) $(DESTDIR)$(datadir)/dbus-1/system-services
$(mkinstalldirs) $(DESTDIR)$(libexecdir)/dbus-1
$(INSTALL_PROGRAM) dbus-daemon-launch-helper $(DESTDIR)$(libexecdir)
- if test `id -u` -eq 0; then \
- chown root:$(DBUS_USER) $(DESTDIR)$(libexecdir)/dbus-daemon-launch-helper; \
- chmod 4750 $(DESTDIR)$(libexecdir)/dbus-daemon-launch-helper; \
- else \
- echo "Not installing $(DESTDIR)$(libexecdir)/dbus-daemon-launch-helper binary setuid!"; \
- echo "You'll need to manually set permissions to root:$(DBUS_USER) and permissions 4750"; \
- fi
# Tell versions [3.59,3.63) of GNU make to not export all variables.
# Otherwise a system limit (for SysV at least) may be exceeded.
.NOEXPORT: