sms@wlv.imsd.contel.com (Steven M. Schultz) (11/07/90)
The kernel makefile templates will install the kernel and/or networking images with completely wrong (and insecure) permissions and group ownership. After applying these patches don't forget to edit the YOURSYSTEMNAME/Makefile to incorporate the same fix. *** /usr/src/sys/conf/Make.nsunix.old Wed Nov 7 08:26:27 1990 --- /usr/src/sys/conf/Make.nsunix Wed Nov 7 08:24:04 1990 *************** *** 163,170 **** rm -f netnix netbind d.unix.s d.netnix.s install: ! install -c -o root -g staff -m 744 unix ${DESTDIR}/unix ! install -c -o root -g staff -m 744 netnix ${DESTDIR}/netnix depend: FRC for i in ${SUB}; do \ --- 163,170 ---- rm -f netnix netbind d.unix.s d.netnix.s install: ! install -c -o root -g kmem -m 740 unix ${DESTDIR}/unix ! install -c -o root -g kmem -m 740 netnix ${DESTDIR}/netnix depend: FRC for i in ${SUB}; do \ *** /usr/src/sys/conf/Make.sunix.old Wed Nov 7 08:26:36 1990 --- /usr/src/sys/conf/Make.sunix Wed Nov 7 08:24:14 1990 *************** *** 109,115 **** rm -f unix core mklog *.o *.i assym.h genassym checksys install: ! install -c -o root -g staff -m 744 unix ${DESTDIR}/unix depend: FRC for i in ${SUB}; do \ --- 109,115 ---- rm -f unix core mklog *.o *.i assym.h genassym checksys install: ! install -c -o root -g kmem -m 740 unix ${DESTDIR}/unix depend: FRC for i in ${SUB}; do \ *** /usr/src/sys/conf/Make.unix.old Wed Nov 7 08:26:47 1990 --- /usr/src/sys/conf/Make.unix Wed Nov 7 08:24:24 1990 *************** *** 112,118 **** rm -f unix core mklog *.o *.i assym.h genassym checksys install: ! install -c -o root -g staff -m 744 unix ${DESTDIR}/unix depend: FRC for i in ${SUB}; do \ --- 112,118 ---- rm -f unix core mklog *.o *.i assym.h genassym checksys install: ! install -c -o root -g kmem -m 740 unix ${DESTDIR}/unix depend: FRC for i in ${SUB}; do \