To prevent glibc bug exploitation, make setuid-wrappers unreadable to non-root users

svn path=/nixos/trunk/; revision=24378
2010-10-20 09:29:02 +00:00 · 2010-10-20 09:29:02 +00:00 · f6bc3d61cf
commit f6bc3d61cf
parent baaf7bd6e3
1 changed files with 1 additions and 1 deletions
--- a/modules/security/setuid-wrappers.nix
+++ b/modules/security/setuid-wrappers.nix
@ -92,7 +92,7 @@ in
          , group ? "nogroup"
          , setuid ? false
          , setgid ? false
-          , permissions ? "u+rx,g+rx,o+rx"
+          , permissions ? "u+rx,g+x,o+x"
          }:

          ''