[mtr] Use file capabilities instead of SUID (#646479).

Adam Tkac atkac at fedoraproject.org
Wed Nov 3 13:32:31 UTC 2010


commit 3faa33afa9b5b3817072d98c25ccc524bbdd50d8
Author: Adam Tkac <atkac at redhat.com>
Date:   Wed Nov 3 14:32:15 2010 +0100

    Use file capabilities instead of SUID (#646479).
    
    Signed-off-by: Adam Tkac <atkac at redhat.com>

 mtr.spec |    7 +++++--
 1 files changed, 5 insertions(+), 2 deletions(-)
---
diff --git a/mtr.spec b/mtr.spec
index f837cf7..85c3b32 100644
--- a/mtr.spec
+++ b/mtr.spec
@@ -1,7 +1,7 @@
 Summary: A network diagnostic tool
 Name: mtr
 Version: 0.80
-Release: 1%{?dist}
+Release: 2%{?dist}
 Epoch:	2
 Group: Applications/Internet
 License: GPLv2+
@@ -78,7 +78,7 @@ rm -rf $RPM_BUILD_ROOT
 %files
 %defattr(-,root,root,-)
 %doc AUTHORS COPYING FORMATS NEWS README SECURITY
-%attr(4755,root,root) %{_sbindir}/mtr
+%attr(0755,root,root) %caps(cap_net_raw=pe) %{_sbindir}/mtr
 %{_mandir}/man8/*
 
 %files gtk
@@ -91,6 +91,9 @@ rm -rf $RPM_BUILD_ROOT
 %{_datadir}/pixmaps/mtr_icon.xpm
 
 %changelog
+* Wed Nov 03 2010 Adam Tkac <atkac redhat com> 2:0.80-2
+- use file capabilities instead of SUID (#646479)
+
 * Tue Oct 26 2010 Jan Görig <jgorig redhat com> 2:0.80-1
 - update to 0.80
 - mtr now waits for last sent packet (#611739)


More information about the scm-commits mailing list