]> git.ipfire.org Git - thirdparty/util-linux.git/commit
hwclock: don't allow non-root access
authorKarel Zak <kzak@redhat.com>
Tue, 26 May 2015 08:32:38 +0000 (10:32 +0200)
committerKarel Zak <kzak@redhat.com>
Tue, 26 May 2015 08:32:38 +0000 (10:32 +0200)
commit687cc5d58942b24a9f4013c68876d8cbea907ab1
tree2b83b6fd3bac3acb9a31acd2967e6a7ef3177af4
parentd681e0956cdca1a016346424939fe1b9c6a0a549
hwclock: don't allow non-root access

Fortunately very few people are crazy enough to install hwclock as
setuid. Some comments in code and unfortunately also man page
advertising that setuid is no problem. That's pretty stupid promise.

The code quality is poor and it's obviously not designed to be secure
(things like popen() without drop privileges, etc.).

This patch removes all notes about "setuid support" and for sure
disable hwclock execution for non-root users.

Addresses: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786804
Signed-off-by: Karel Zak <kzak@redhat.com>
sys-utils/hwclock.8.in
sys-utils/hwclock.c