From 35c9d82abdc3203571cdd8d3fe74346fd290a41a Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Sun, 19 Mar 2023 19:41:02 +0000 Subject: [PATCH] FHS: Allow gpasswd, ksu and pkexec to have the setuid bit set Signed-off-by: Michael Tremer --- src/libpakfire/fhs.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/libpakfire/fhs.c b/src/libpakfire/fhs.c index fc96ec102..f0ddc37ce 100644 --- a/src/libpakfire/fhs.c +++ b/src/libpakfire/fhs.c @@ -65,7 +65,10 @@ static const struct pakfire_fhs_check { { "/usr/sbin/*", S_IFDIR, 0, NULL, NULL, PAKFIRE_FHS_MUSTNOTEXIST }, // Permitted setuid binaries + { "/usr/bin/gpasswd", S_IFREG, S_ISUID|0755, "root", "root", 0 }, + { "/usr/bin/ksu", S_IFREG, S_ISUID|0755, "root", "root", 0 }, { "/usr/bin/passwd", S_IFREG, S_ISUID|0755, "root", "root", 0 }, + { "/usr/bin/pkexec", S_IFREG, S_ISUID|0755, "root", "root", 0 }, { "/usr/bin/su", S_IFREG, S_ISUID|0755, "root", "root", 0 }, { "/usr/bin/sudo", S_IFREG, S_ISUID|0755, "root", "root", 0 }, -- 2.39.5