Bug 646452 - Replace SETUID in spec file with the correct file capabilities.
Summary: Replace SETUID in spec file with the correct file capabilities.
Keywords:
Status: CLOSED DUPLICATE of bug 646494
Alias: None
Product: Fedora
Classification: Fedora
Component: usermode
Version: rawhide
Hardware: Unspecified
OS: Unspecified
low
medium
Target Milestone: ---
Assignee: Miloslav Trmač
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: removesetuid
TreeView+ depends on / blocked
 
Reported: 2010-10-25 13:05 UTC by Daniel Walsh
Modified: 2011-04-05 13:10 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 646450
Environment:
Last Closed: 2010-10-25 17:02:37 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Daniel Walsh 2010-10-25 13:05:15 UTC 
+++ This bug was initially created as a clone of Bug #646450 +++

+++ This bug was initially created as a clone of Bug #646443 +++

Description of problem:

Please remove setuid setup of files in your package with file capabilities.

This is to satisfy the F15 feature.

https://fedoraproject.org/wiki/Features/RemoveSETUID

An example of how this was done for X is.


%if 0%{?fedora} < 15
%define Xorgperms %attr(4711, root, root)
%else
%define Xorgperms %attr(0711,root,root) %caps(cap_sys_admin,cap_sys_rawio,cap_dac_override=pe)
%endif
Comment 1 Miloslav Trmač 2010-10-25 17:02:37 UTC 

*** This bug has been marked as a duplicate of bug 646494 ***
Note You need to log in before you can comment on or make changes to this bug.