cvs commit: ports/databases/firebird2-server Makefile
ports/databases/firebird2-client Makefile
Sergey Skvortsov
skv at FreeBSD.org
Mon Nov 20 17:10:26 UTC 2006
skv 2006-11-20 16:51:15 UTC
FreeBSD ports repository
Modified files:
databases/firebird2-server Makefile
databases/firebird2-client Makefile
Log:
Change permissions for formerly suid-ed binaries:
-r-xr-xr-x root wheel fb_inet_server
-r-sr-x--- root firebird fb_lock_mgr
-r-x------ root wheel gds_drop
1. fb_inet_server is installed as normal binary but still must be started
under "firebird" user (it must be specified in x?inetd.conf)
2. fb_lock_mgr is still suid-ed binary but can be started only by users
in "firebird" group - it affects usage of "gsec" and similar utilities
while using "embedded" (direct) database access mode.
3. gds_drop is installed as normal binary but can be started by "root" only
to prevent any improper/malicious usage.
Revision Changes Path
1.2 +1 -0 ports/databases/firebird2-client/Makefile
1.58 +6 -6 ports/databases/firebird2-server/Makefile
More information about the cvs-ports
mailing list