|
 |
5f7b57 |
From c962918bc70a61a8cc647898ee8b1ff1c14a87c5 Mon Sep 17 00:00:00 2001
|
|
|
5f7b57 |
From: Jakub Filak <jfilak@redhat.com>
|
|
|
5f7b57 |
Date: Tue, 28 Apr 2015 12:49:38 +0200
|
|
|
5f7b57 |
Subject: [LIBREPORT PATCH] build: switch the default dump dir mode to 0640
|
|
|
5f7b57 |
|
|
|
5f7b57 |
The 0660 allows root escalations in ABRT. We don't really need to have
|
|
|
5f7b57 |
the dump directories writable for the group as ABRT processes run under
|
|
|
5f7b57 |
root. We introduced 0x1 for group with the switch to /var/tmp/abrt
|
|
|
5f7b57 |
because we thought that we will have ABRT processes run under the user
|
|
|
5f7b57 |
abrt, but there are no signs that we will ever pursue such a setup.
|
|
|
5f7b57 |
|
|
|
5f7b57 |
Related: #1212861
|
|
|
5f7b57 |
|
|
|
5f7b57 |
Signed-off-by: Jakub Filak <jfilak@redhat.com>
|
|
|
5f7b57 |
---
|
|
|
5f7b57 |
configure.ac | 4 ++--
|
|
|
5f7b57 |
1 file changed, 2 insertions(+), 2 deletions(-)
|
|
|
5f7b57 |
|
|
|
5f7b57 |
diff --git a/configure.ac b/configure.ac
|
|
|
5f7b57 |
index df88240..8aea410 100644
|
|
|
5f7b57 |
--- a/configure.ac
|
|
|
5f7b57 |
+++ b/configure.ac
|
|
|
5f7b57 |
@@ -249,8 +249,8 @@ AC_PATH_PROG(AUGPARSE, augparse, no)
|
|
|
5f7b57 |
|
|
|
5f7b57 |
AC_ARG_WITH([defaultdumpdirmode],
|
|
|
5f7b57 |
AS_HELP_STRING([--with-defaultdumpdirmode=OCTAL-MODE],
|
|
|
5f7b57 |
- [Default dump dir mode (default: 0660)]),
|
|
|
5f7b57 |
- [], [with_defaultdumpdirmode="0660"])
|
|
|
5f7b57 |
+ [Default dump dir mode (default: 0640)]),
|
|
|
5f7b57 |
+ [], [with_defaultdumpdirmode="0640"])
|
|
|
5f7b57 |
AC_SUBST([DEFAULT_DUMP_DIR_MODE], [$with_defaultdumpdirmode])
|
|
|
5f7b57 |
|
|
|
5f7b57 |
DUMP_DIR_OWNED_BY_USER=1
|
|
|
5f7b57 |
--
|
|
|
5f7b57 |
1.8.3.1
|
|
|
5f7b57 |
|