Changeset 2292

Timestamp:

Aug 8, 2012, 9:50:47 AM (13 years ago)

Author:

ezyang

Message:

Ignore setuid binaries in /var/lib/mock, which are nosuid'd

File:

• trunk/server/fedora/config/etc/cron.d/check-setugid (modified) (1 diff)

trunk/server/fedora/config/etc/cron.d/check-setugid

@@ -1 +1 @@
 MAILTO=scripts-root@mit.edu
-23 5 * * * root find / -xdev -not -perm -o=x -prune -o -type f -perm /ug=s -print | grep -Fxvf /etc/scripts/allowed-setugid.list | sed 's/^/Extra set[ug]id binary: /'
+23 5 * * * root find / -xdev -not -perm -o=x -prune -o -type f -perm /ug=s -print | grep -Fxvf /etc/scripts/allowed-setugid.list | grep -ve ^/var/lib/mock/ | sed 's/^/Extra set[ug]id binary: /'