From: Kai Kang <kai.kang@windriver.com>
Date: Sat, 27 May 2017 07:45:03 +0000 (+0800)
Subject: lsof: clear setuid
X-Git-Tag: uninative-1.7~749
X-Git-Url: https://code.ossystems.io/gitweb?a=commitdiff_plain;h=346c65dd6855106069d1861ca965d3121eb084d1;p=openembedded-core.git

lsof: clear setuid

Having 'lsof' as a +s (setuid) binary could lead to security issues if
a compromise in the binary is found.  It is better that it be -s by
default as a precaution.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/recipes-extended/lsof/lsof_4.89.bb b/meta/recipes-extended/lsof/lsof_4.89.bb
index b732cf0acd..650b34c7e2 100644
--- a/meta/recipes-extended/lsof/lsof_4.89.bb
+++ b/meta/recipes-extended/lsof/lsof_4.89.bb
@@ -53,6 +53,6 @@ do_compile () {
 
 do_install () {
 	install -d ${D}${sbindir} ${D}${mandir}/man8
-	install -m 4755 lsof ${D}${sbindir}/lsof
+	install -m 0755 lsof ${D}${sbindir}/lsof
 	install -m 0644 lsof.8 ${D}${mandir}/man8/lsof.8
 }