FHS: Allow gpasswd, ksu and pkexec to have the setuid bit set

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/libpakfire/fhs.c b/src/libpakfire/fhs.c
index fc96ec1027b5643e92c137840b466309b5172951..f0ddc37ce0ea1e6c6dc2ba24b504a6ce5ebf1b9f 100644 (file)
--- a/src/libpakfire/fhs.c
+++ b/src/libpakfire/fhs.c
@@ -65,7 +65,10 @@ static const struct pakfire_fhs_check {
        { "/usr/sbin/*",          S_IFDIR,    0,   NULL,   NULL, PAKFIRE_FHS_MUSTNOTEXIST },
 
        // Permitted setuid binaries
+       { "/usr/bin/gpasswd",     S_IFREG, S_ISUID|0755, "root", "root", 0 },
+       { "/usr/bin/ksu",         S_IFREG, S_ISUID|0755, "root", "root", 0 },
        { "/usr/bin/passwd",      S_IFREG, S_ISUID|0755, "root", "root", 0 },
+       { "/usr/bin/pkexec",      S_IFREG, S_ISUID|0755, "root", "root", 0 },
        { "/usr/bin/su",          S_IFREG, S_ISUID|0755, "root", "root", 0 },
        { "/usr/bin/sudo",        S_IFREG, S_ISUID|0755, "root", "root", 0 },