From: Michael Tremer Date: Sun, 19 Mar 2023 19:41:02 +0000 (+0000) Subject: FHS: Allow gpasswd, ksu and pkexec to have the setuid bit set X-Git-Tag: 0.9.29~235 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=35c9d82abdc3203571cdd8d3fe74346fd290a41a;p=pakfire.git FHS: Allow gpasswd, ksu and pkexec to have the setuid bit set Signed-off-by: Michael Tremer --- diff --git a/src/libpakfire/fhs.c b/src/libpakfire/fhs.c index fc96ec102..f0ddc37ce 100644 --- a/src/libpakfire/fhs.c +++ b/src/libpakfire/fhs.c @@ -65,7 +65,10 @@ static const struct pakfire_fhs_check { { "/usr/sbin/*", S_IFDIR, 0, NULL, NULL, PAKFIRE_FHS_MUSTNOTEXIST }, // Permitted setuid binaries + { "/usr/bin/gpasswd", S_IFREG, S_ISUID|0755, "root", "root", 0 }, + { "/usr/bin/ksu", S_IFREG, S_ISUID|0755, "root", "root", 0 }, { "/usr/bin/passwd", S_IFREG, S_ISUID|0755, "root", "root", 0 }, + { "/usr/bin/pkexec", S_IFREG, S_ISUID|0755, "root", "root", 0 }, { "/usr/bin/su", S_IFREG, S_ISUID|0755, "root", "root", 0 }, { "/usr/bin/sudo", S_IFREG, S_ISUID|0755, "root", "root", 0 },