Bug in install applet

Harald Becker ralda at gmx.de
Mon Feb 22 11:45:15 UTC 2010


On 22.02.2010 01:13, Rob Landley wrote:
>
> So what install really needs to do is call "strip -o" to write the new file, 
> _then_ set the timestamp and permission bits on the new file afterwards.
>   
That was the way I did in the patch I provided. Additionally there is
another raise. Changing the ownership of the file (owner or group) does
magically clear suid and sgid bits (on some systems even executable
bits) as a security reason. So its required to do the installation in
this order: copy (optionally preserving time), change owner and group,
set permission bits and then apply  the security context (which could
eventually be affected by strip and chown too).

Harald



More information about the busybox mailing list