Remove setuid flag at mount/umount 22/134322/1 accepted/tizen/4.0/base/20170811.092720 accepted/tizen/4.0/base/20170828.221057 accepted/tizen/base/20170707.183418 submit/tizen_4.0_base/20170811.071500 submit/tizen_4.0_base/20170828.000000 submit/tizen_4.0_base/20170828.000001 submit/tizen_base/20170622.011122 submit/tizen_base/20170705.023041 submit/tizen_base/20170705.023439
authorDongHun Kwak <dh0128.kwak@samsung.com>
Fri, 16 Jun 2017 01:38:12 +0000 (10:38 +0900)
committerDongHun Kwak <dh0128.kwak@samsung.com>
Fri, 16 Jun 2017 04:16:48 +0000 (13:16 +0900)
[Model] All
[BinType] AP
[Customer] OPEN

[Issue#] N/A
[Request] N/A
[Occurrence Version] N/A

[Problem] Security team (yunjin-.lee@samsung.com) request.
[Cause & Measure] remove setuid flag at sys-utils/Makemodule.am
[Checking Method] After unpack util-linux rpm, check "ls -ldr
 mount/umount"

[Team] Open Source Management and Setting Part
[Developer] dh0128.kwak
[Solution company] Samsung
[Change Type] N/A

Change-Id: I9d23d473bddd009a26c674751b747ae27b6de246
Signed-off-by: DongHun Kwak <dh0128.kwak@samsung.com>
sys-utils/Makemodule.am

index e6f86eb..48cdca5 100644 (file)
@@ -291,8 +291,8 @@ endif
 
 if MAKEINSTALL_DO_SETUID
 install-exec-hook-mount:
-       chmod 4755 $(DESTDIR)$(bindir)/mount
-       chmod 4755 $(DESTDIR)$(bindir)/umount
+       chmod 755 $(DESTDIR)$(bindir)/mount
+       chmod 755 $(DESTDIR)$(bindir)/umount
 
 INSTALL_EXEC_HOOKS += install-exec-hook-mount
 endif