svn commit: r270289 - in head: sbin/mksnap_ffs sbin/shutdown usr.sbin/ppp

[Neel Natu]

Author: neel
Date: Thu Aug 21 19:04:15 2014
New Revision: 270289
URL: http://svnweb.freebsd.org/changeset/base/270289

Log:
  Change file permissions for some setuid executables so they are "o+r".
  The executable itself doesn't contain any privileged information.
  
  An example of where this is useful is when makefs(8) is creating an image
  that includes /sbin/shutdown. This can now be done without root privileges.
  
  Reviewed by:	delphij
  Discussed with:	delphij, des
  CR:		https://reviews.freebsd.org/D662

Modified:
  head/sbin/mksnap_ffs/Makefile
  head/sbin/shutdown/Makefile
  head/usr.sbin/ppp/Makefile

Modified: head/sbin/mksnap_ffs/Makefile
==============================================================================
--- head/sbin/mksnap_ffs/Makefile	Thu Aug 21 18:26:32 2014	(r270288)
+++ head/sbin/mksnap_ffs/Makefile	Thu Aug 21 19:04:15 2014	(r270289)
@@ -10,9 +10,9 @@ WARNS?=	2
 CFLAGS+=-I${.CURDIR}/../mount
 
 .if defined(NOSUID)
-BINMODE=550
+BINMODE=554
 .else
-BINMODE=4550
+BINMODE=4554
 BINOWN=	root
 .endif
 BINGRP=	operator

Modified: head/sbin/shutdown/Makefile
==============================================================================
--- head/sbin/shutdown/Makefile	Thu Aug 21 18:26:32 2014	(r270288)
+++ head/sbin/shutdown/Makefile	Thu Aug 21 19:04:15 2014	(r270289)
@@ -8,6 +8,6 @@ MLINKS=	shutdown.8 poweroff.8
 
 BINOWN=	root
 BINGRP=	operator
-BINMODE=4550
+BINMODE=4554
 
 .include <bsd.prog.mk>

Modified: head/usr.sbin/ppp/Makefile
==============================================================================
--- head/usr.sbin/ppp/Makefile	Thu Aug 21 18:26:32 2014	(r270288)
+++ head/usr.sbin/ppp/Makefile	Thu Aug 21 19:04:15 2014	(r270289)
@@ -33,9 +33,9 @@ PPP_NO_PAM=
 .endif
 
 .if defined(PPP_NO_SUID)
-BINMODE=550
+BINMODE=554
 .else
-BINMODE=4550
+BINMODE=4554
 BINOWN=	root
 .endif
 BINGRP=	network