diff options
| author | Karel Zak | 2015-05-26 10:32:38 +0200 |
|---|---|---|
| committer | Karel Zak | 2015-05-26 10:32:38 +0200 |
| commit | 687cc5d58942b24a9f4013c68876d8cbea907ab1 (patch) | |
| tree | 2b83b6fd3bac3acb9a31acd2967e6a7ef3177af4 /include/sysfs.h | |
| parent | sulogin: don't use strcpy(), enlarge pwd line buffer (diff) | |
| download | kernel-qcow2-util-linux-687cc5d58942b24a9f4013c68876d8cbea907ab1.tar.gz kernel-qcow2-util-linux-687cc5d58942b24a9f4013c68876d8cbea907ab1.tar.xz kernel-qcow2-util-linux-687cc5d58942b24a9f4013c68876d8cbea907ab1.zip | |
hwclock: don't allow non-root access
Fortunately very few people are crazy enough to install hwclock as
setuid. Some comments in code and unfortunately also man page
advertising that setuid is no problem. That's pretty stupid promise.
The code quality is poor and it's obviously not designed to be secure
(things like popen() without drop privileges, etc.).
This patch removes all notes about "setuid support" and for sure
disable hwclock execution for non-root users.
Addresses: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786804
Signed-off-by: Karel Zak <kzak@redhat.com>
Diffstat (limited to 'include/sysfs.h')
0 files changed, 0 insertions, 0 deletions