diff options
| author | Steve Langasek <vorlon@debian.org> | 2008-07-26 21:28:12 -0700 |
|---|---|---|
| committer | Steve Langasek <steve.langasek@ubuntu.com> | 2019-01-03 17:01:55 -0800 |
| commit | bfe72a9278cfa0e444ec4cd8ad4f9caea46feb89 (patch) | |
| tree | e79bc2705272c9db564607e3de9647b8c936bb02 | |
| parent | bbe908ef78c1043460d0bea512049cacdfd7206a (diff) | |
update the unix_chkpwd override to match the current perms
| -rw-r--r-- | debian/changelog | 1 | ||||
| -rw-r--r-- | debian/libpam-modules.lintian | 5 |
2 files changed, 4 insertions, 2 deletions
diff --git a/debian/changelog b/debian/changelog index d2910c92..f23b36a2 100644 --- a/debian/changelog +++ b/debian/changelog @@ -43,6 +43,7 @@ pam (0.99.10.0-1) UNRELEASED; urgency=low split out into a separate unix_update binary, so at long last we can change unix_chkpwd to be sgid shadow instead of suid root. Closes: #155583. + - Update the lintian override to match. * Install the new unix_update helper into libpam-modules. * Use a pristine upstream tarball instead of repacking; requires various changes to debian/rules and debhelper files. diff --git a/debian/libpam-modules.lintian b/debian/libpam-modules.lintian index 9da39180..e323f6f8 100644 --- a/debian/libpam-modules.lintian +++ b/debian/libpam-modules.lintian @@ -1,2 +1,3 @@ -# yes, we know it's suid, that's the whole point... -libpam-modules: setuid-binary sbin/unix_chkpwd 4755 root/root +# yes, we know it's sgid, that's the whole point... +libpam-modules: setgid-binary sbin/unix_chkpwd 2755 root/shadow + |