Bug in install applet
Harald Becker
ralda at gmx.de
Mon Feb 22 11:45:15 UTC 2010
On 22.02.2010 01:13, Rob Landley wrote:
>
> So what install really needs to do is call "strip -o" to write the new file,
> _then_ set the timestamp and permission bits on the new file afterwards.
>
That was the way I did in the patch I provided. Additionally there is
another raise. Changing the ownership of the file (owner or group) does
magically clear suid and sgid bits (on some systems even executable
bits) as a security reason. So its required to do the installation in
this order: copy (optionally preserving time), change owner and group,
set permission bits and then apply the security context (which could
eventually be affected by strip and chown too).
Harald
More information about the busybox
mailing list