From: Yann E. MORIN Date: Thu, 1 Aug 2019 16:22:32 +0000 (+0200) Subject: package/iputils: drop setuid on arping X-Git-Url: https://git.libre-soc.org/?a=commitdiff_plain;h=d413204a32352258d8a94fc9d00e2abbe793d6d1;p=buildroot.git package/iputils: drop setuid on arping arping can be used for arp poisoning, so it should really not be setuid. Reported-by: Petr Vorel Signed-off-by: Yann E. MORIN Acked-by: Petr Vorel Signed-off-by: Peter Korsgaard --- diff --git a/package/iputils/iputils.mk b/package/iputils/iputils.mk index b28222138f..7482bbdca1 100644 --- a/package/iputils/iputils.mk +++ b/package/iputils/iputils.mk @@ -80,7 +80,7 @@ IPUTILS_POST_INSTALL_TARGET_HOOKS += IPUTILS_CREATE_PING6_SYMLINK # handle permissions ourselves IPUTILS_CONF_OPTS += -DNO_SETCAP_OR_SUID=true define IPUTILS_PERMISSIONS - /usr/sbin/arping f 4755 0 0 - - - - - + /usr/sbin/arping f 755 0 0 - - - - - /usr/bin/clockdiff f 4755 0 0 - - - - - /bin/ping f 4755 0 0 - - - - - /usr/bin/traceroute6 f 4755 0 0 - - - - -