fix(x11): keep /usr/bin/Xorg non-setuid (0755) for rootless elogind startup
This commit is contained in:
+4
-1
@@ -141,11 +141,14 @@ EOF
|
||||
chown 0:5 "$ROOTFS/usr/bin/wall"
|
||||
chmod 2755 "$ROOTFS/usr/bin/wall"
|
||||
fi
|
||||
if [ -e "$ROOTFS/usr/bin/Xorg" ] && [ ! -L "$ROOTFS/usr/bin/Xorg" ]; then
|
||||
chown 0:0 "$ROOTFS/usr/bin/Xorg"
|
||||
chmod 0755 "$ROOTFS/usr/bin/Xorg"
|
||||
fi
|
||||
for suid_bin in \
|
||||
"$ROOTFS/bin/su" \
|
||||
"$ROOTFS/bin/mount" \
|
||||
"$ROOTFS/bin/umount" \
|
||||
"$ROOTFS/usr/bin/Xorg" \
|
||||
"$ROOTFS/usr/bin/doas" \
|
||||
"$ROOTFS/usr/bin/sudo" \
|
||||
"$ROOTFS/usr/bin/pkexec" \
|
||||
|
||||
Reference in New Issue
Block a user