From owner-svn-src-stable@FreeBSD.ORG Thu Sep 4 01:38:32 2014 Return-Path: Delivered-To: svn-src-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 2A4C58C4; Thu, 4 Sep 2014 01:38:32 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id EF9D51512; Thu, 4 Sep 2014 01:38:31 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id s841cVhc093948; Thu, 4 Sep 2014 01:38:31 GMT (envelope-from neel@FreeBSD.org) Received: (from neel@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id s841cVWl093945; Thu, 4 Sep 2014 01:38:31 GMT (envelope-from neel@FreeBSD.org) Message-Id: <201409040138.s841cVWl093945@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: neel set sender to neel@FreeBSD.org using -f From: Neel Natu Date: Thu, 4 Sep 2014 01:38:31 +0000 (UTC) To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-10@freebsd.org Subject: svn commit: r271075 - in stable/10: sbin/mksnap_ffs sbin/shutdown usr.sbin/ppp X-SVN-Group: stable-10 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-src-stable@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for all the -stable branches of the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Sep 2014 01:38:32 -0000 Author: neel Date: Thu Sep 4 01:38:31 2014 New Revision: 271075 URL: http://svnweb.freebsd.org/changeset/base/271075 Log: MFC r270289: Change file permissions for some setuid executables so they are "o+r". The executable itself doesn't contain any privileged information. An example of where this is useful is when makefs(8) is creating an image that includes /sbin/shutdown. This can now be done without root privileges. Modified: stable/10/sbin/mksnap_ffs/Makefile stable/10/sbin/shutdown/Makefile stable/10/usr.sbin/ppp/Makefile Directory Properties: stable/10/ (props changed) Modified: stable/10/sbin/mksnap_ffs/Makefile ============================================================================== --- stable/10/sbin/mksnap_ffs/Makefile Thu Sep 4 01:21:33 2014 (r271074) +++ stable/10/sbin/mksnap_ffs/Makefile Thu Sep 4 01:38:31 2014 (r271075) @@ -10,9 +10,9 @@ WARNS?= 2 CFLAGS+=-I${.CURDIR}/../mount .if defined(NOSUID) -BINMODE=550 +BINMODE=554 .else -BINMODE=4550 +BINMODE=4554 BINOWN= root .endif BINGRP= operator Modified: stable/10/sbin/shutdown/Makefile ============================================================================== --- stable/10/sbin/shutdown/Makefile Thu Sep 4 01:21:33 2014 (r271074) +++ stable/10/sbin/shutdown/Makefile Thu Sep 4 01:38:31 2014 (r271075) @@ -8,6 +8,6 @@ MLINKS= shutdown.8 poweroff.8 BINOWN= root BINGRP= operator -BINMODE=4550 +BINMODE=4554 .include Modified: stable/10/usr.sbin/ppp/Makefile ============================================================================== --- stable/10/usr.sbin/ppp/Makefile Thu Sep 4 01:21:33 2014 (r271074) +++ stable/10/usr.sbin/ppp/Makefile Thu Sep 4 01:38:31 2014 (r271075) @@ -33,9 +33,9 @@ PPP_NO_PAM= .endif .if defined(PPP_NO_SUID) -BINMODE=550 +BINMODE=554 .else -BINMODE=4550 +BINMODE=4554 BINOWN= root .endif BINGRP= network