Bug 646458 - Replace SETUID in spec file with the correct file capabilities.
Summary: Replace SETUID in spec file with the correct file capabilities.
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Fedora
Classification: Fedora
Component: amanda
Version: rawhide
Hardware: Unspecified
OS: Unspecified
low
medium
Target Milestone: ---
Assignee: Jan Görig
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: removesuid16
TreeView+ depends on / blocked
 
Reported: 2010-10-25 13:15 UTC by Daniel Walsh
Modified: 2011-04-14 13:36 UTC (History)
3 users (show)

Fixed In Version:
Clone Of: 646443
Environment:
Last Closed: 2011-04-14 13:32:54 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Daniel Walsh 2010-10-25 13:15:02 UTC 
+++ This bug was initially created as a clone of Bug #646443 +++

Description of problem:

Please remove setuid setup of files in your package with file capabilities.

This is to satisfy the F15 feature.

https://fedoraproject.org/wiki/Features/RemoveSETUID

An example of how this was done for X is.


%if 0%{?fedora} < 15
%define Xorgperms %attr(4711, root, root)
%else
%define Xorgperms %attr(0711,root,root) %caps(cap_sys_admin,cap_sys_rawio,cap_dac_override=pe)
%endif
Comment 1 Daniel Walsh 2011-04-05 13:22:45 UTC 
Any movement on this?
Comment 2 Jan Görig 2011-04-14 13:32:54 UTC 
The amanda has complex handling with EUID so it isn't easy to replace SETUID with capabilities.
Comment 3 Daniel Walsh 2011-04-14 13:36:34 UTC 
Ok thanks for checking.
Note You need to log in before you can comment on or make changes to this bug.