[102085] trunk/dports/sysutils/htop
cal at macports.org
cal at macports.org
Sun Jan 27 11:34:31 PST 2013
Revision: 102085
https://trac.macports.org/changeset/102085
Author: cal at macports.org
Date: 2013-01-27 11:34:31 -0800 (Sun, 27 Jan 2013)
Log Message:
-----------
htop: do no install binary SUID root, but SGID procmod, closes #37766, security issue, update stronly advised.
Modified Paths:
--------------
trunk/dports/sysutils/htop/Portfile
Added Paths:
-----------
trunk/dports/sysutils/htop/files/patch-Makefile.am-setgid-procmod.diff
Modified: trunk/dports/sysutils/htop/Portfile
===================================================================
--- trunk/dports/sysutils/htop/Portfile 2013-01-27 19:28:45 UTC (rev 102084)
+++ trunk/dports/sysutils/htop/Portfile 2013-01-27 19:34:31 UTC (rev 102085)
@@ -10,7 +10,7 @@
epoch 1
version 0.8.2.1
-revision 1
+revision 2
name htop
categories sysutils
platforms darwin
@@ -22,6 +22,8 @@
long_description This is htop, ${description}. It is a text-mode \
application (for console or X terminals).
+patchfiles patch-Makefile.am-setgid-procmod.diff
+
depends_build port:autoconf \
port:automake \
port:libtool
Added: trunk/dports/sysutils/htop/files/patch-Makefile.am-setgid-procmod.diff
===================================================================
--- trunk/dports/sysutils/htop/files/patch-Makefile.am-setgid-procmod.diff (rev 0)
+++ trunk/dports/sysutils/htop/files/patch-Makefile.am-setgid-procmod.diff 2013-01-27 19:34:31 UTC (rev 102085)
@@ -0,0 +1,9 @@
+--- Makefile.am.orig 2013-01-27 20:29:54.000000000 +0100
++++ Makefile.am 2013-01-27 20:30:13.000000000 +0100
+@@ -51,4 +51,5 @@
+ $(MAKE) all CFLAGS="-ggdb -DDEBUGLITE"
+
+ install-exec-hook:
+- chmod 4755 $(DESTDIR)$(bindir)/htop
++ chgrp procmod $(DESTDIR)$(bindir)/htop
++ chmod 2755 $(DESTDIR)$(bindir)/htop
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macosforge.org/pipermail/macports-changes/attachments/20130127/a1efb832/attachment.html>
More information about the macports-changes
mailing list