[102085] trunk/dports/sysutils/htop

cal at macports.org cal at macports.org
Sun Jan 27 11:34:31 PST 2013


Revision: 102085
          https://trac.macports.org/changeset/102085
Author:   cal at macports.org
Date:     2013-01-27 11:34:31 -0800 (Sun, 27 Jan 2013)
Log Message:
-----------
htop: do no install binary SUID root, but SGID procmod, closes #37766, security issue, update stronly advised.

Modified Paths:
--------------
    trunk/dports/sysutils/htop/Portfile

Added Paths:
-----------
    trunk/dports/sysutils/htop/files/patch-Makefile.am-setgid-procmod.diff

Modified: trunk/dports/sysutils/htop/Portfile
===================================================================
--- trunk/dports/sysutils/htop/Portfile	2013-01-27 19:28:45 UTC (rev 102084)
+++ trunk/dports/sysutils/htop/Portfile	2013-01-27 19:34:31 UTC (rev 102085)
@@ -10,7 +10,7 @@
 
 epoch               1
 version             0.8.2.1
-revision            1
+revision            2
 name                htop
 categories          sysutils
 platforms           darwin
@@ -22,6 +22,8 @@
 long_description    This is htop, ${description}. It is a text-mode \
                     application (for console or X terminals).
 
+patchfiles          patch-Makefile.am-setgid-procmod.diff
+
 depends_build       port:autoconf \
                     port:automake \
                     port:libtool

Added: trunk/dports/sysutils/htop/files/patch-Makefile.am-setgid-procmod.diff
===================================================================
--- trunk/dports/sysutils/htop/files/patch-Makefile.am-setgid-procmod.diff	                        (rev 0)
+++ trunk/dports/sysutils/htop/files/patch-Makefile.am-setgid-procmod.diff	2013-01-27 19:34:31 UTC (rev 102085)
@@ -0,0 +1,9 @@
+--- Makefile.am.orig	2013-01-27 20:29:54.000000000 +0100
++++ Makefile.am	2013-01-27 20:30:13.000000000 +0100
+@@ -51,4 +51,5 @@
+ 	$(MAKE) all CFLAGS="-ggdb -DDEBUGLITE"
+ 
+ install-exec-hook:
+-	chmod 4755 $(DESTDIR)$(bindir)/htop
++	chgrp procmod $(DESTDIR)$(bindir)/htop
++	chmod 2755 $(DESTDIR)$(bindir)/htop
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macosforge.org/pipermail/macports-changes/attachments/20130127/a1efb832/attachment.html>


More information about the macports-changes mailing list