Fix suid bits on plugin for debian packaging (#8996)
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
Arthur Outhenin-Chalandre committed
May 21, 2020 at 14:02 UTC
572ed46860752b545d7617a12bb7a10def7f7dd3
2 files changed
+10
-1
contrib/debian/netdata.postinst.in
+9
@@ -55,6 +55,15 @@ case "$1" in
55
chown -R root:netdata /var/lib/netdata/www
56
setcap cap_dac_read_search,cap_sys_ptrace+ep /usr/libexec/netdata/plugins.d/apps.plugin
57
58
+ chmod 4750 /usr/libexec/netdata/plugins.d/perf.plugin
59
+ chmod 4750 /usr/libexec/netdata/plugins.d/slabinfo.plugin
60
+ chmod 4750 /usr/libexec/netdata/plugins.d/cgroup-network
61
+ chmod 4750 /usr/libexec/netdata/plugins.d/nfacct.plugin
62
+ chmod 4750 /usr/libexec/netdata/plugins.d/ebpf.plugin
63
+
64
+ # Workaround for other plugins not installed directly by this package
65
+ chmod -f 4750 /usr/libexec/netdata/plugins.d/freeipmi.plugin || true
66
+
67
;;
68
esac
69
contrib/debian/rules
+1
-1
@@ -125,7 +125,7 @@ override_dh_fixperms:
125
chmod 0750 $(TOP)-plugin-cups/usr/libexec/netdata/plugins.d/cups.plugin
126
127
# freeIPMI plugin package
128
- chmod 0754 $(TOP)-plugin-freeipmi/usr/libexec/netdata/plugins.d/freeipmi.plugin
128
+ chmod 4750 $(TOP)-plugin-freeipmi/usr/libexec/netdata/plugins.d/freeipmi.plugin
129
130
override_dh_installlogrotate:
131
cp system/netdata.logrotate debian/netdata.logrotate