cvs commit: ports/databases/firebird2-server Makefile ports/databases/firebird2-client Makefile

Sergey Skvortsov skv at FreeBSD.org
Mon Nov 20 17:10:26 UTC 2006


skv         2006-11-20 16:51:15 UTC

  FreeBSD ports repository

  Modified files:
    databases/firebird2-server Makefile 
    databases/firebird2-client Makefile 
  Log:
  Change permissions for formerly suid-ed binaries:
  
  -r-xr-xr-x  root  wheel     fb_inet_server
  -r-sr-x---  root  firebird  fb_lock_mgr
  -r-x------  root  wheel     gds_drop
  
  1. fb_inet_server is installed as normal binary but still must be started
     under "firebird" user (it must be specified in x?inetd.conf)
  
  2. fb_lock_mgr is still suid-ed binary but can be started only by users
     in "firebird" group - it affects usage of "gsec" and similar utilities
     while using "embedded" (direct) database access mode.
  
  3. gds_drop is installed as normal binary but can be started by "root" only
     to prevent any improper/malicious usage.
  
  Revision  Changes    Path
  1.2       +1 -0      ports/databases/firebird2-client/Makefile
  1.58      +6 -6      ports/databases/firebird2-server/Makefile


More information about the cvs-ports mailing list