diff mbox series

[11/20] Core Update 157: Apply changed permissions to /var/ipfire/urlfilter/bin/

Message ID e2f2cb7a-f7e6-b333-7e14-1123755c1f92@ipfire.org
State Accepted
Commit ef929318f6c45e2e3d0964c564ebcaf8f9df5a4e
Headers
Series Prevent "nobody" from escalating privileges by using writeable binaries as a vehicle |

Commit Message

Peter Müller May 17, 2021, 7:04 p.m. UTC 
  Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 config/rootfiles/core/157/update.sh | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/config/rootfiles/core/157/update.sh b/config/rootfiles/core/157/update.sh
index 7ed02d690..f46a47572 100644
--- a/config/rootfiles/core/157/update.sh
+++ b/config/rootfiles/core/157/update.sh
@@ -106,6 +106,7 @@  ldconfig
 # Fix file permissions changed
 chmod -s /usr/bin/gpg
 chmod -x /var/ipfire/fwhosts/icmp-types
+chown -R root:root /var/ipfire/urlfilter/bin
 
 # Delete scrubbed files
 rm -f \