set group of /var/cache/man to root and drop setgid bit

- resolves: #1515823
This commit is contained in:
Nikola Forró 2017-11-21 17:55:57 +01:00
parent 5794aabdfa
commit 71f8f47846
2 changed files with 8 additions and 4 deletions

View File

@ -13,7 +13,7 @@ index 1eb40ce..21936d5 100644
+++ b/init/systemd/man-db.conf +++ b/init/systemd/man-db.conf
@@ -1 +1 @@ @@ -1 +1 @@
-d /var/cache/man 0755 man man 1w -d /var/cache/man 0755 man man 1w
+d /var/cache/man 0755 root man 1w +d /var/cache/man 0755 root root 1w
-- --
2.7.4 2.7.4

View File

@ -4,7 +4,7 @@
Summary: Tools for searching and reading man pages Summary: Tools for searching and reading man pages
Name: man-db Name: man-db
Version: 2.7.6.1 Version: 2.7.6.1
Release: 7%{?dist} Release: 8%{?dist}
# GPLv2+ .. man-db # GPLv2+ .. man-db
# GPLv3+ .. gnulib # GPLv3+ .. gnulib
License: GPLv2+ and GPLv3+ License: GPLv2+ and GPLv3+
@ -57,7 +57,7 @@ This package provides periodic update of man-db cache.
%build %build
%configure \ %configure \
--with-sections="1 1p 8 2 3 3p 4 5 6 7 9 0p n l p o 1x 2x 3x 4x 5x 6x 7x 8x" \ --with-sections="1 1p 8 2 3 3p 4 5 6 7 9 0p n l p o 1x 2x 3x 4x 5x 6x 7x 8x" \
--disable-setuid --enable-cache-owner=root \ --disable-setuid --disable-cache-owner \
--with-browser=elinks --with-lzip=lzip \ --with-browser=elinks --with-lzip=lzip \
--with-override-dir=overrides --with-override-dir=overrides
make CC="%{__cc} %{optflags}" %{?_smp_mflags} V=1 make CC="%{__cc} %{optflags}" %{?_smp_mflags} V=1
@ -144,7 +144,7 @@ fi
%{_libexecdir}/man-db/globbing %{_libexecdir}/man-db/globbing
%{_libexecdir}/man-db/manconv %{_libexecdir}/man-db/manconv
%{_libexecdir}/man-db/zsoelim %{_libexecdir}/man-db/zsoelim
%attr(2755,root,man) %verify(not mtime) %dir %{cache} %verify(not mtime) %dir %{cache}
# documentation and translation # documentation and translation
%{_mandir}/man1/apropos.1* %{_mandir}/man1/apropos.1*
%{_mandir}/man1/lexgrog.1* %{_mandir}/man1/lexgrog.1*
@ -174,6 +174,10 @@ fi
%config(noreplace) %{_sysconfdir}/sysconfig/man-db %config(noreplace) %{_sysconfdir}/sysconfig/man-db
%changelog %changelog
* Tue Nov 21 2017 Nikola Forró <nforro@redhat.com> - 2.7.6.1-8
- set group of /var/cache/man to root and drop setgid bit
resolves: #1515823
* Thu Nov 16 2017 Nikola Forró <nforro@redhat.com> - 2.7.6.1-7 * Thu Nov 16 2017 Nikola Forró <nforro@redhat.com> - 2.7.6.1-7
- make file trigger scriptlets not to fail in case systemd is unavailable - make file trigger scriptlets not to fail in case systemd is unavailable
- drop systemd dependency - drop systemd dependency