Gentoo Archives: gentoo-portage-dev

From: Michael Orlitzky <mjo@g.o>
To: gentoo-portage-dev@l.g.o
Subject: [gentoo-portage-dev] [PATCH v2 0/2] Two insecure ownership and group-writability QA checks.
Date: Mon, 30 Jul 2018 00:17:45
Message-Id: 20180730001730.19257-1-mjo@gentoo.org
1 Changes in v2:
2
3 * Also check executables in /opt/bin (mgorny).
4 * Don't report group-writable executables that are setgid (ulm).
5 * Add a comment on why we don't do the same for setuid.
6 * Wrap long lines with backslashes.
7 * Fix nesting of output loop; output should happen after all checks.
8
9 Michael Orlitzky (2):
10 bin/install-qa-check.d: add new 90bad-bin-owner QA check.
11 bin/install-qa-check.d: add new 90bad-bin-group-write QA check.
12
13 bin/install-qa-check.d/90bad-bin-group-write | 49 ++++++++++++++++++++++++++++
14 bin/install-qa-check.d/90bad-bin-owner | 47 ++++++++++++++++++++++++++
15 2 files changed, 96 insertions(+)
16 create mode 100644 bin/install-qa-check.d/90bad-bin-group-write
17 create mode 100644 bin/install-qa-check.d/90bad-bin-owner
18
19 --
20 2.16.4

Replies