forked from Lainports/freebsd-ports
d16fd1e9a8
Because qt-dist.mk sets EXTRACT_AFTER_ARGS, the framework-standard --no-same-owner and --no-same-permissions aren't added. That means that the files end up in packages with the permissions from the tarball, and in particular that official packages contain group-writable (wheel) includes (C++ headers) and other files. This was reported in https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=227027 and fixed in 465911 (18 months ago) but the move from bsd.qt.mk to Uses/qt-dist.mk lost those settings again. Re-add them to the Uses/ file to improve package security. (The problem does not seem to be present in my local poudriere builds) PR: 227027 Reported by: grarpamp@gmail.com Reviewed by: tcberner Approved by: tcberner MFH: 2020Q1 Differential Revision: https://reviews.freebsd.org/D22999 |
||
|---|---|---|
| .. | ||
| Scripts | ||
| Uses | ||
| Wrappers | ||
| bsd.ccache.mk | ||
| bsd.commands.mk | ||
| bsd.default-versions.mk | ||
| bsd.destdir.mk | ||
| bsd.gcc.mk | ||
| bsd.gecko.mk | ||
| bsd.gstreamer.mk | ||
| bsd.java.mk | ||
| bsd.ldap.mk | ||
| bsd.licenses.db.mk | ||
| bsd.licenses.mk | ||
| bsd.local.mk | ||
| bsd.ocaml.mk | ||
| bsd.octave.mk | ||
| bsd.options.desc.mk | ||
| bsd.options.mk | ||
| bsd.port.mk | ||
| bsd.port.options.mk | ||
| bsd.port.post.mk | ||
| bsd.port.pre.mk | ||
| bsd.port.subdir.mk | ||
| bsd.ruby.mk | ||
| bsd.sanity.mk | ||
| bsd.sites.mk | ||
| bsd.ssp.mk | ||
| bsd.tex.mk | ||
| bsd.wx.mk | ||