From e2821a494b06325a1f3554012cd25dec831e84d1 Mon Sep 17 00:00:00 2001 From: Petr Vorel Date: Mon, 10 Jun 2019 01:07:02 +0200 Subject: [PATCH] iputils: set the permissions with IPUTILS_PERMISSIONS ... for arping, clockdiff and ping. These require root permission for socket(). Upstream solution (script setcap-setuid.sh) requires setcap binary on the host and cap_net_raw+ep + libcap, or setting setuid root executable (which is dangerous). Neither would work anyway since we install as non-root user. This restores behavior used for version s20180629. We used to setuid the ping and traceroute6 programs. traceroute6 is no longer built since the bump to s20190515, but now arping and clockdiff are built, and these need setuid as well. So enable setuid on arping, clockdiff and ping. Signed-off-by: Petr Vorel Signed-off-by: Arnout Vandecappelle (Essensium/Mind) --- package/iputils/iputils.mk | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/package/iputils/iputils.mk b/package/iputils/iputils.mk index d9a51ece2a..8be54b4788 100644 --- a/package/iputils/iputils.mk +++ b/package/iputils/iputils.mk @@ -52,4 +52,12 @@ endif # XSL Stylesheets for DocBook 5 not packaged for buildroot IPUTILS_CONF_OPTS += -DBUILD_MANS=false -DBUILD_HTML_MANS=false +# handle permissions ourselves +IPUTILS_CONF_OPTS += -DNO_SETCAP_OR_SUID=true +define IPUTILS_PERMISSIONS + /bin/arping f 4755 0 0 - - - - - + /bin/clockdiff f 4755 0 0 - - - - - + /bin/ping f 4755 0 0 - - - - - +endef + $(eval $(meson-package)) -- 2.30.2