Changeset 1957 for branches/fc15-dev

Timestamp:

Aug 24, 2011, 10:17:03 PM (14 years ago)

Author:

achernya

Message:

ping and ping6 now use capabilities

ping and ping6 have been changed to use capabilities, and are no
longer setuid. Therefore, they are being moved between whitelists.

Location:

branches/fc15-dev/server/fedora/config/etc

Files:

• scripts/allowed-filecaps.list (modified) (1 diff)
• scripts/allowed-setugid.list (modified) (1 diff)
• yum/post-actions/capoverride.action (modified) (1 diff)

branches/fc15-dev/server/fedora/config/etc/scripts/allowed-filecaps.list

@@ +1 @@
+/bin/ping
+/bin/ping6

branches/fc15-dev/server/fedora/config/etc/scripts/allowed-setugid.list

@@ -1 @@
-/bin/ping
-/bin/ping6
 /sbin/pam_timestamp_check
 /sbin/unix_chkpwd

branches/fc15-dev/server/fedora/config/etc/yum/post-actions/capoverride.action

@@ -6 +6 @@
 /usr/bin/rlogin:install:setcap -r /usr/bin/rlogin
 /usr/libexec/pt_chown:install:setcap -r /usr/libexec/pt_chown
-/bin/ping6:install:setcap -r /bin/ping6
-/bin/ping:install:setcap -r /bin/ping