From a73d4aee753a09b8a4a074df26e06edc7e243d16 Mon Sep 17 00:00:00 2001
From: Michael Weiser <michael.weiser@gmx.de>
Date: Tue, 17 Dec 2019 21:13:07 +0100
Subject: [PATCH] man: Don't suggest making groupmems user-writeable

Suggesting mode 2770 is dangerous because it makes the binary writeable
by all members of the owning group which is supposed to be normal
end-users. Suggest 2710 instead as is usual for s[ug]id binaries,
allowing execution but neither reading nor writing.

Signed-off-by: Michael Weiser <michael.weiser@gmx.de>
---
 man/cs/man8/groupmems.8     | 4 ++--
 man/groupmems.8.xml         | 4 ++--
 man/po/da.po                | 4 ++--
 man/po/de.po                | 8 ++++----
 man/po/fr.po                | 8 ++++----
 man/po/it.po                | 8 ++++----
 man/po/pl.po                | 6 +++---
 man/po/ru.po                | 8 ++++----
 man/po/shadow-man-pages.pot | 4 ++--
 man/po/sv.po                | 6 +++---
 man/po/zh_CN.po             | 6 +++---
 po/fr.po                    | 8 ++++----
 12 files changed, 37 insertions(+), 37 deletions(-)

diff --git a/man/cs/man8/groupmems.8 b/man/cs/man8/groupmems.8
index 729fce4b9..daaae62dd 100644
--- a/man/cs/man8/groupmems.8
+++ b/man/cs/man8/groupmems.8
@@ -46,7 +46,7 @@ Vypíše seznam členů skupiny.
 Příkaz
 \fBgroupmems\fR
 by měl mít nastavena práva
-2770
+2710
 a měl by jej vlastnit uživatel
 \fIroot\fR
 a skupina
@@ -58,7 +58,7 @@ spravovat členství ve skupinách.
 .sp
 .nf
 	$ groupadd \-r groups
-	$ chmod 2770 groupmems
+	$ chmod 2710 groupmems
 	$ chown root.groups groupmems
 	$ groupmems \-g groups \-a gk4
 
diff --git a/man/groupmems.8.xml b/man/groupmems.8.xml
index 1432ea426..6077d5548 100644
--- a/man/groupmems.8.xml
+++ b/man/groupmems.8.xml
@@ -180,7 +180,7 @@
     <title>SETUP</title>
     <para>
       The <command>groupmems</command> executable should be in mode
-      <literal>2770</literal> as user <emphasis>root</emphasis> and in group
+      <literal>2710</literal> as user <emphasis>root</emphasis> and in group
       <emphasis>groups</emphasis>. The system administrator can add users to
       group <emphasis>groups</emphasis> to allow or disallow them using the
       <command>groupmems</command> utility to manage their own group
@@ -189,7 +189,7 @@
 
     <programlisting>
 	$ groupadd -r groups
-	$ chmod 2770 groupmems
+	$ chmod 2710 groupmems
 	$ chown root.groups groupmems
 	$ groupmems -g groups -a gk4
     </programlisting>
diff --git a/man/po/da.po b/man/po/da.po
index 3d789fcb6..ebc8fa466 100644
--- a/man/po/da.po
+++ b/man/po/da.po
@@ -6980,7 +6980,7 @@ msgstr ""
 
 #: groupmems.8.xml:181(para)
 msgid ""
-"The <command>groupmems</command> executable should be in mode <literal>2770</"
+"The <command>groupmems</command> executable should be in mode <literal>2710</"
 "literal> as user <emphasis>root</emphasis> and in group <emphasis>groups</"
 "emphasis>. The system administrator can add users to group <emphasis>groups</"
 "emphasis> to allow or disallow them using the <command>groupmems</command> "
@@ -6992,7 +6992,7 @@ msgstr ""
 msgid ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
diff --git a/man/po/de.po b/man/po/de.po
index 3ae1efd0a..85ecadfed 100644
--- a/man/po/de.po
+++ b/man/po/de.po
@@ -8878,14 +8878,14 @@ msgstr "EINRICHTUNG"
 
 #: groupmems.8.xml:181(para)
 msgid ""
-"The <command>groupmems</command> executable should be in mode <literal>2770</"
+"The <command>groupmems</command> executable should be in mode <literal>2710</"
 "literal> as user <emphasis>root</emphasis> and in group <emphasis>groups</"
 "emphasis>. The system administrator can add users to group <emphasis>groups</"
 "emphasis> to allow or disallow them using the <command>groupmems</command> "
 "utility to manage their own group membership list."
 msgstr ""
 "Die ausführbare Datei <command>groupmems</command> sollte die Rechte "
-"<literal>2770</literal> haben und dem Benutzer <emphasis>root</emphasis> und "
+"<literal>2710</literal> haben und dem Benutzer <emphasis>root</emphasis> und "
 "der Gruppe <emphasis>groups</emphasis> gehören. Der Systemadministrator kann "
 "Benutzer der Gruppe <emphasis>groups</emphasis> hinzufügen, um ihnen zu "
 "ermöglichen, mit <command>groupmems</command> die Mitgliederliste ihrer "
@@ -8896,14 +8896,14 @@ msgstr ""
 msgid ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
 msgstr ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
diff --git a/man/po/fr.po b/man/po/fr.po
index 1deb7eb2e..87b09b5c1 100644
--- a/man/po/fr.po
+++ b/man/po/fr.po
@@ -8701,14 +8701,14 @@ msgstr "CONFIGURATION"
 
 #: groupmems.8.xml:181(para)
 msgid ""
-"The <command>groupmems</command> executable should be in mode <literal>2770</"
+"The <command>groupmems</command> executable should be in mode <literal>2710</"
 "literal> as user <emphasis>root</emphasis> and in group <emphasis>groups</"
 "emphasis>. The system administrator can add users to group <emphasis>groups</"
 "emphasis> to allow or disallow them using the <command>groupmems</command> "
 "utility to manage their own group membership list."
 msgstr ""
 "L'exécutable <command>groupmems</command> doit être installé en mode "
-"<literal>2770</literal> avec pour utilisateur <emphasis>root</emphasis> et "
+"<literal>2710</literal> avec pour utilisateur <emphasis>root</emphasis> et "
 "pour groupe <emphasis>groups</emphasis>. L'administrateur système peut "
 "ajouter des utilisateurs au groupe <emphasis>groups</emphasis> pour leur "
 "permettre ou leur interdire d'utiliser <command>groupmems</command> pour "
@@ -8719,14 +8719,14 @@ msgstr ""
 msgid ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
 msgstr ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
diff --git a/man/po/it.po b/man/po/it.po
index b9f275a68..3e150d0dc 100644
--- a/man/po/it.po
+++ b/man/po/it.po
@@ -9254,14 +9254,14 @@ msgstr "CONFIGURAZIONE"
 
 #: groupmems.8.xml:181(para)
 msgid ""
-"The <command>groupmems</command> executable should be in mode <literal>2770</"
+"The <command>groupmems</command> executable should be in mode <literal>2710</"
 "literal> as user <emphasis>root</emphasis> and in group <emphasis>groups</"
 "emphasis>. The system administrator can add users to group <emphasis>groups</"
 "emphasis> to allow or disallow them using the <command>groupmems</command> "
 "utility to manage their own group membership list."
 msgstr ""
 "L'eseguibile <command>groupmems</command> dovrebbe avere i permessi "
-"<literal>2770</literal> ed essere di proprietà di <emphasis>root</emphasis> "
+"<literal>2710</literal> ed essere di proprietà di <emphasis>root</emphasis> "
 "e del gruppo <emphasis>groups</emphasis>. L'amministratore di sistema può "
 "aggiungere utenti al gruppo <emphasis>groups</emphasis> per permettere loro "
 "di poter gestire l'elenco di membri del proprio gruppo tramite il comando "
@@ -9272,14 +9272,14 @@ msgstr ""
 msgid ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
 msgstr ""
 "\n"
 "        $ groupadd -r groups\n"
-"        $ chmod 2770 groupmems\n"
+"        $ chmod 2710 groupmems\n"
 "        $ chown root.groups groupmems\n"
 "        $ groupmems -g groups -a gk4\n"
 "    "
diff --git a/man/po/pl.po b/man/po/pl.po
index 8a125fbf0..f1248181d 100644
--- a/man/po/pl.po
+++ b/man/po/pl.po
@@ -7558,7 +7558,7 @@ msgstr ""
 
 #: groupmems.8.xml:181(para)
 msgid ""
-"The <command>groupmems</command> executable should be in mode <literal>2770</"
+"The <command>groupmems</command> executable should be in mode <literal>2710</"
 "literal> as user <emphasis>root</emphasis> and in group <emphasis>groups</"
 "emphasis>. The system administrator can add users to group <emphasis>groups</"
 "emphasis> to allow or disallow them using the <command>groupmems</command> "
@@ -7570,14 +7570,14 @@ msgstr ""
 msgid ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
 msgstr ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
diff --git a/man/po/ru.po b/man/po/ru.po
index f39782553..7809d6707 100644
--- a/man/po/ru.po
+++ b/man/po/ru.po
@@ -9292,14 +9292,14 @@ msgstr "НАСТРОЙКА"
 
 #: groupmems.8.xml:181(para)
 msgid ""
-"The <command>groupmems</command> executable should be in mode <literal>2770</"
+"The <command>groupmems</command> executable should be in mode <literal>2710</"
 "literal> as user <emphasis>root</emphasis> and in group <emphasis>groups</"
 "emphasis>. The system administrator can add users to group <emphasis>groups</"
 "emphasis> to allow or disallow them using the <command>groupmems</command> "
 "utility to manage their own group membership list."
 msgstr ""
 "Исполняемый файл программы <command>groupmems</command> должен иметь права "
-"<literal>2770</literal>, принадлежать пользователю <emphasis>root</emphasis> "
+"<literal>2710</literal>, принадлежать пользователю <emphasis>root</emphasis> "
 "и группе <emphasis>groups</emphasis>. Системный администратор может "
 "добавлять пользователей в группу <emphasis>groups</emphasis>, разрешая или "
 "запрещая им запускать программу <command>groupmems</command> для управления "
@@ -9311,14 +9311,14 @@ msgstr ""
 msgid ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
 msgstr ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
diff --git a/man/po/shadow-man-pages.pot b/man/po/shadow-man-pages.pot
index 507057fe7..2b2e4e3d3 100644
--- a/man/po/shadow-man-pages.pot
+++ b/man/po/shadow-man-pages.pot
@@ -4233,12 +4233,12 @@ msgid "SETUP"
 msgstr ""
 
 #: groupmems.8.xml:181(para)
-msgid "The <command>groupmems</command> executable should be in mode <literal>2770</literal> as user <emphasis>root</emphasis> and in group <emphasis>groups</emphasis>. The system administrator can add users to group <emphasis>groups</emphasis> to allow or disallow them using the <command>groupmems</command> utility to manage their own group membership list."
+msgid "The <command>groupmems</command> executable should be in mode <literal>2710</literal> as user <emphasis>root</emphasis> and in group <emphasis>groups</emphasis>. The system administrator can add users to group <emphasis>groups</emphasis> to allow or disallow them using the <command>groupmems</command> utility to manage their own group membership list."
 msgstr ""
 
 #: groupmems.8.xml:190(programlisting)
 #, no-wrap
-msgid "\n\t$ groupadd -r groups\n\t$ chmod 2770 groupmems\n\t$ chown root.groups groupmems\n\t$ groupmems -g groups -a gk4\n    "
+msgid "\n\t$ groupadd -r groups\n\t$ chmod 2710 groupmems\n\t$ chown root.groups groupmems\n\t$ groupmems -g groups -a gk4\n    "
 msgstr ""
 
 #: groupmems.8.xml:222(para)
diff --git a/man/po/sv.po b/man/po/sv.po
index 4059527d5..785c1e201 100644
--- a/man/po/sv.po
+++ b/man/po/sv.po
@@ -7780,7 +7780,7 @@ msgstr ""
 
 #: groupmems.8.xml:181(para)
 msgid ""
-"The <command>groupmems</command> executable should be in mode <literal>2770</"
+"The <command>groupmems</command> executable should be in mode <literal>2710</"
 "literal> as user <emphasis>root</emphasis> and in group <emphasis>groups</"
 "emphasis>. The system administrator can add users to group <emphasis>groups</"
 "emphasis> to allow or disallow them using the <command>groupmems</command> "
@@ -7792,14 +7792,14 @@ msgstr ""
 msgid ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
 msgstr ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
diff --git a/man/po/zh_CN.po b/man/po/zh_CN.po
index 71288870e..942a2ff20 100644
--- a/man/po/zh_CN.po
+++ b/man/po/zh_CN.po
@@ -7960,7 +7960,7 @@ msgstr ""
 
 #: groupmems.8.xml:181(para)
 msgid ""
-"The <command>groupmems</command> executable should be in mode <literal>2770</"
+"The <command>groupmems</command> executable should be in mode <literal>2710</"
 "literal> as user <emphasis>root</emphasis> and in group <emphasis>groups</"
 "emphasis>. The system administrator can add users to group <emphasis>groups</"
 "emphasis> to allow or disallow them using the <command>groupmems</command> "
@@ -7972,14 +7972,14 @@ msgstr ""
 msgid ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
 msgstr ""
 "\n"
 "\t$ groupadd -r groups\n"
-"\t$ chmod 2770 groupmems\n"
+"\t$ chmod 2710 groupmems\n"
 "\t$ chown root.groups groupmems\n"
 "\t$ groupmems -g groups -a gk4\n"
 "    "
diff --git a/po/fr.po b/po/fr.po
index 41646752f..8bf6fe843 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -9701,14 +9701,14 @@ msgstr ""
 
 #~ msgid ""
 #~ "The <command>groupmems</command> executable should be in mode "
-#~ "<literal>2770</literal> as user <emphasis>root</emphasis> and in group "
+#~ "<literal>2710</literal> as user <emphasis>root</emphasis> and in group "
 #~ "<emphasis>groups</emphasis>. The system administrator can add users to "
 #~ "group <emphasis>groups</emphasis> to allow or disallow them using the "
 #~ "<command>groupmems</command> utility to manage their own group membership "
 #~ "list."
 #~ msgstr ""
 #~ "L'exécutable <command>groupmems</command> doit être installé en mode "
-#~ "<literal>2770</literal> avec pour utilisateur <emphasis>root</emphasis> "
+#~ "<literal>2710</literal> avec pour utilisateur <emphasis>root</emphasis> "
 #~ "et pour groupe <emphasis>groups</emphasis>. L'administrateur système peut "
 #~ "ajouter des utilisateurs au groupe <emphasis>groups</emphasis> pour leur "
 #~ "permettre ou leur interdire d'utiliser <command>groupmems</command> pour "
@@ -9717,14 +9717,14 @@ msgstr ""
 #~ msgid ""
 #~ "\n"
 #~ "\t$ groupadd -r groups\n"
-#~ "\t$ chmod 2770 groupmems\n"
+#~ "\t$ chmod 2710 groupmems\n"
 #~ "\t$ chown root.groups groupmems\n"
 #~ "\t$ groupmems -g groups -a gk4\n"
 #~ "    "
 #~ msgstr ""
 #~ "\n"
 #~ "\t$ groupadd -r groups\n"
-#~ "\t$ chmod 2770 groupmems\n"
+#~ "\t$ chmod 2710 groupmems\n"
 #~ "\t$ chown root.groups groupmems\n"
 #~ "\t$ groupmems -g groups -a gk4\n"
 #~ "    "
-- 
2.39.5