[opensuse-packaging] permissions-file-setuid-bit
I get in the RPMlint check: virtualbox-qt3.i586: E: permissions-file-setuid-bit (Badness: 10000) /usr/lib/virtualbox-qt3/VBoxHeadless is packaged with setuid/setgid bits (04711) virtualbox-qt3.i586: E: permissions-file-setuid-bit (Badness: 10000) /usr/lib/virtualbox-qt3/VBoxSDL is packaged with setuid/setgid bits (04711) Please remove the setuid/setgid bits or contact security@suse.de for review. I tried to chmot the files in any possible way and also to disable this error message - nothing helps. What should I do? -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-packaging+help@opensuse.org
I tried to chmot the files in any possible way and also to disable this error message - nothing helps. What should I do?
Again, you do not disable this messages! in short , NO error of the build system is meant to be disabled. contact the security team for help. -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-packaging+help@opensuse.org
problem is cused by /etc/permissions.easy which indirectly breaks your build, because you have VBoxSDL in /usr/lib/virtualbox-qt3/ directory, if you check /etc/permissions.easy, you will find the permissions granted on /usr/lib/virtualbox/VBoxSDL file, for testing purpose you could also use ./configure --disable-hardening in case of virtualbox package. also see bugreport with a lot of info : https://bugzilla.novell.com/show_bug.cgi?id=429725 btw why do you need vbox compiled with qt3 ? On Thu, Dec 23, 2010 at 6:34 PM, Ilya Chernykh <neptunia@mail.ru> wrote:
I get in the RPMlint check:
virtualbox-qt3.i586: E: permissions-file-setuid-bit (Badness: 10000) /usr/lib/virtualbox-qt3/VBoxHeadless is packaged with setuid/setgid bits (04711) virtualbox-qt3.i586: E: permissions-file-setuid-bit (Badness: 10000) /usr/lib/virtualbox-qt3/VBoxSDL is packaged with setuid/setgid bits (04711) Please remove the setuid/setgid bits or contact security@suse.de for review.
I tried to chmot the files in any possible way and also to disable this error message - nothing helps. What should I do? -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-packaging+help@opensuse.org
-- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-packaging+help@opensuse.org
participants (3)
-
Cristian Rodríguez
-
Ilya Chernykh
-
Michal Šebeň