From 9d34ab7cc39a98088db35245276dd41509f00e46 Mon Sep 17 00:00:00 2001
From: jlam <jlam>
Date: Fri, 15 Jun 2007 14:46:02 +0000
Subject: Change the default setuid-root permissions from 4711 to 4555.  This
 strips off the write bit for root and gets rid of the unnecessary lack of
 read permissions for "group" and "other".  Inspired by /usr/bin/su on NetBSD.

---
 mk/pkginstall/bsd.pkginstall.mk | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'mk/pkginstall')

diff --git a/mk/pkginstall/bsd.pkginstall.mk b/mk/pkginstall/bsd.pkginstall.mk
index 3f291cd39d4..cac8fd23a06 100644
--- a/mk/pkginstall/bsd.pkginstall.mk
+++ b/mk/pkginstall/bsd.pkginstall.mk
@@ -1,4 +1,4 @@
-# $NetBSD: bsd.pkginstall.mk,v 1.23 2007/06/15 14:14:36 jlam Exp $
+# $NetBSD: bsd.pkginstall.mk,v 1.24 2007/06/15 14:46:02 jlam Exp $
 #
 # This Makefile fragment is included by bsd.pkg.mk and implements the
 # common INSTALL/DEINSTALL scripts framework.  To use the pkginstall
@@ -315,7 +315,7 @@ su-create-usergroup: ${_INSTALL_USERGROUP_UNPACKER}
 # Keywords: setuid setgid st_mode perms
 #
 SPECIAL_PERMS?=		# empty
-SETUID_ROOT_PERMS?=	${REAL_ROOT_USER} ${REAL_ROOT_GROUP} 4711
+SETUID_ROOT_PERMS?=	${REAL_ROOT_USER} ${REAL_ROOT_GROUP} 4555
 
 _INSTALL_PERMS_FILE=		${_PKGINSTALL_DIR}/perms
 _INSTALL_PERMS_DATAFILE=	${_PKGINSTALL_DIR}/perms-data
-- 
cgit v1.2.3