[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: dh_suidregister -> ?



On Mon, 05 Feb 2001, peter karlsson wrote:

> I have this in the postinst (after adding a group with addgroup):
> 
> if chown root.jwhois /usr/bin/jwhois; then
>   chmod 02755 /usr/bin/jwhois
> fi

Doing this you can overwrite changes done by local sysadmin. 
Think about this scenario:
1. user installs jwhois 
2. he does not like suids/sgids, so he adds an override: 
	dpkg-statoverride --update --force --add root jwhois 0755 /usr/bin/jwhoi
   After this /usr/bin/jwhois is mode 0755.
3. some time later he installs new version of jwhois and unless chown
   fails, /usr/bin/whois will get mode 02755!



Regards,

Robert

-- 
  Robert Luberda  *  robert@pingu.ii.uj.edu.pl  *  robert@debian.org
    * GnuPG:  AEE0 1F85 3E63 8BAA CDF1 3D18 4E18 7570 9D30 9C3B *



Reply to: