diff options
| author | Patrick Williams <patrick@stwcx.xyz> | 2024-01-20 01:45:58 +0300 |
|---|---|---|
| committer | Patrick Williams <patrick@stwcx.xyz> | 2024-01-20 01:46:02 +0300 |
| commit | d3135247287cb3a4b932a89c088c9011b4a19a56 (patch) | |
| tree | a5ba56efb8937c02e7bdeed354c42015e0a147ee /meta-facebook/meta-harma | |
| parent | cf77973df7b3fdce9ec381c4599ef2a12873e6ce (diff) | |
| download | openbmc-d3135247287cb3a4b932a89c088c9011b4a19a56.tar.xz | |
meta-facebook: reduce permissions on scripts
Scripts should be installed with 0755 permissions and not 0777,
otherwise non-root users can potentially modify or delete them.
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: I41270a2bb3fb940d8ca49ed6230545d98efb2fea
Diffstat (limited to 'meta-facebook/meta-harma')
| -rw-r--r-- | meta-facebook/meta-harma/recipes-phosphor/gpio/phosphor-gpio-monitor_%.bbappend | 14 | ||||
| -rw-r--r-- | meta-facebook/meta-harma/recipes-phosphor/state/phosphor-state-manager_%.bbappend | 14 |
2 files changed, 14 insertions, 14 deletions
diff --git a/meta-facebook/meta-harma/recipes-phosphor/gpio/phosphor-gpio-monitor_%.bbappend b/meta-facebook/meta-harma/recipes-phosphor/gpio/phosphor-gpio-monitor_%.bbappend index 8ab2deb3b0..e13d98d3c6 100644 --- a/meta-facebook/meta-harma/recipes-phosphor/gpio/phosphor-gpio-monitor_%.bbappend +++ b/meta-facebook/meta-harma/recipes-phosphor/gpio/phosphor-gpio-monitor_%.bbappend @@ -44,16 +44,16 @@ do_install:append:() { install -m 0644 ${WORKDIR}/*.service ${D}${systemd_system_unitdir}/ install -d ${D}${libexecdir}/${PN} - install -m 0777 ${WORKDIR}/multi-gpios-sys-init ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/multi-gpios-sys-init ${D}${libexecdir}/${PN}/ - install -m 0777 ${WORKDIR}/assert-reset-button ${D}${libexecdir}/${PN}/ - install -m 0777 ${WORKDIR}/deassert-reset-button ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/assert-reset-button ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/deassert-reset-button ${D}${libexecdir}/${PN}/ - install -m 0777 ${WORKDIR}/assert-post-end ${D}${libexecdir}/${PN}/ - install -m 0777 ${WORKDIR}/deassert-post-end ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/assert-post-end ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/deassert-post-end ${D}${libexecdir}/${PN}/ - install -m 0777 ${WORKDIR}/assert-power-good ${D}${libexecdir}/${PN}/ - install -m 0777 ${WORKDIR}/deassert-power-good ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/assert-power-good ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/deassert-power-good ${D}${libexecdir}/${PN}/ } SYSTEMD_OVERRIDE:${PN}-monitor:harma += "phosphor-multi-gpio-monitor.conf:phosphor-multi-gpio-monitor.service.d/phosphor-multi-gpio-monitor.conf" diff --git a/meta-facebook/meta-harma/recipes-phosphor/state/phosphor-state-manager_%.bbappend b/meta-facebook/meta-harma/recipes-phosphor/state/phosphor-state-manager_%.bbappend index 358cf3ded1..954bc3962e 100644 --- a/meta-facebook/meta-harma/recipes-phosphor/state/phosphor-state-manager_%.bbappend +++ b/meta-facebook/meta-harma/recipes-phosphor/state/phosphor-state-manager_%.bbappend @@ -48,13 +48,13 @@ do_install:append:harma() { install -m 0644 ${WORKDIR}/*.service ${D}${systemd_system_unitdir}/ install -d ${D}${libexecdir}/${PN} - install -m 0777 ${WORKDIR}/chassis-powercycle ${D}${libexecdir}/${PN}/ - install -m 0777 ${WORKDIR}/host-poweroff ${D}${libexecdir}/${PN}/ - install -m 0777 ${WORKDIR}/host-poweron ${D}${libexecdir}/${PN}/ - install -m 0777 ${WORKDIR}/host-powercycle ${D}${libexecdir}/${PN}/ - install -m 0777 ${WORKDIR}/host-powerreset ${D}${libexecdir}/${PN}/ - install -m 0777 ${WORKDIR}/power-cmd ${D}${libexecdir}/${PN}/ - install -m 0777 ${WORKDIR}/phosphor-state-manager-init ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/chassis-powercycle ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/host-poweroff ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/host-poweron ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/host-powercycle ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/host-powerreset ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/power-cmd ${D}${libexecdir}/${PN}/ + install -m 0755 ${WORKDIR}/phosphor-state-manager-init ${D}${libexecdir}/${PN}/ } SYSTEMD_OVERRIDE:${PN}-discover:harma += "discover-sys-init.conf:phosphor-discover-system-state@0.service.d/discover-sys-init.conf" SYSTEMD_OVERRIDE:${PN}-systemd-target-monitor:harma += "phosphor-state-manager-init.conf:phosphor-systemd-target-monitor.service.d/phosphor-state-manager-init.conf" |