util-linux: Remove SUID bit from mount and umount.

We can use capabilities here, which brings us some
security advantages.

diff --git a/util-linux/util-linux.nm b/util-linux/util-linux.nm
index 681de64672fc534fea3d7d29238a792c53338e3f..4247cabca660b947ee6bf98763f829c7ca0fa7e8 100644 (file)
--- a/util-linux/util-linux.nm
+++ b/util-linux/util-linux.nm
@@ -6,7 +6,7 @@
 name       = util-linux
 version    = 2.19
 major_ver  = 2.19
-release    = 5
+release    = 6
 
 groups     = System/Base
 url        = http://kernel.org/~kzak/util-linux/
@@ -85,6 +85,12 @@ build
                # Create /etc/mtab symlink
                mkdir -pv %{BUILDROOT}/etc
                ln -svf /proc/mounts %{BUILDROOT}/etc/mtab
+
+               # Set capabilities
+               chmod -v -s %{BUILDROOT}/bin/mount
+               setcap CAP_DAC_OVERRIDE,CAP_SYS_ADMIN=ep %{BUILDROOT}/bin/mount
+               chmod -v -s %{BUILDROOT}/bin/umount
+               setcap CAP_DAC_OVERRIDE,CAP_SYS_ADMIN=ep %{BUILDROOT}/bin/umount
        end
 end