From mboxrd@z Thu Jan 1 00:00:00 1970 From: Petr Vorel Date: Mon, 10 Jun 2019 01:07:02 +0200 Subject: [Buildroot] [PATCH 1/1] iputils: set the permissions with IPUTILS_PERMISSIONS Message-ID: <20190609230702.7068-1-petr.vorel@gmail.com> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: buildroot@busybox.net for arping, clockdiff and ping. These require root permission for socket(). Upstream solution (script setcap-setuid.sh) requires setcap binary on the host and cap_net_raw+ep + libcap or setting setuid root executable which is dangerous). This restores behavior used for version s20180629 (which was used for ping and traceroute6, but we don't build traceroute6 since s20190515). Signed-off-by: Petr Vorel --- Hi, it'd be great also create symlink ping -> ping6, but don't know how. Kind regards, Petr --- package/iputils/iputils.mk | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/package/iputils/iputils.mk b/package/iputils/iputils.mk index d9a51ece2a..8be54b4788 100644 --- a/package/iputils/iputils.mk +++ b/package/iputils/iputils.mk @@ -52,4 +52,12 @@ endif # XSL Stylesheets for DocBook 5 not packaged for buildroot IPUTILS_CONF_OPTS += -DBUILD_MANS=false -DBUILD_HTML_MANS=false +# handle permissions ourselves +IPUTILS_CONF_OPTS += -DNO_SETCAP_OR_SUID=true +define IPUTILS_PERMISSIONS + /bin/arping f 4755 0 0 - - - - - + /bin/clockdiff f 4755 0 0 - - - - - + /bin/ping f 4755 0 0 - - - - - +endef + $(eval $(meson-package)) -- 2.20.1