- rel 5; mount /run with 0755 (security issue)

diff --git a/geninitrd-git.patch b/geninitrd-git.patch
index 30660b5a0b5dcf079aff1e0c71b93bbaa787ad73..0ee27c0eb0944a9df83537d426cf64b7f4c5f526 100644 (file)
--- a/geninitrd-git.patch
+++ b/geninitrd-git.patch
@@ -56,3 +56,22 @@ index 92a519d..771245e 100755
                        echo "DEVICE set to $device based on fstab entry from initrd gen time"
                fi
  
+commit 583a7f5f8783fb1f92b75ca9f651d675df016b73
+Author: Arkadiusz Miśkiewicz <arekm@maven.pl>
+Date:   Tue Jun 7 08:30:46 2016 +0200
+
+    Mount /run with 0755.
+
+diff --git a/geninitrd b/geninitrd
+index 771245e..62e47ee 100755
+--- a/geninitrd
++++ b/geninitrd
+@@ -273,7 +273,7 @@ mount_run() {
+       fi
+ 
+       run_mounted=yes
+-      echo "mount -t tmpfs run /run" | add_linuxrc
++      echo "mount -t tmpfs run /run -o mode=0755" | add_linuxrc
+ }
+ 
+ # unmount all mountpoints mounted by geninitrd

diff --git a/geninitrd.spec b/geninitrd.spec
index d45d8f83c686cc84af89e9aeb73de1036e1d1003..ed1777be04b2987ae15bc018fbf36d4fe4ca76e1 100644 (file)
--- a/geninitrd.spec
+++ b/geninitrd.spec
@@ -7,7 +7,7 @@ Summary:        Creates an initial ramdisk image for preloading modules
 Summary(pl.UTF-8):     Narzędzie do tworzenia inicjalnego ramdysku używanego przy starcie systemu
 Name:          geninitrd
 Version:       12757
-Release:       4
+Release:       5
 License:       GPL
 Group:         Applications/System
 Source0:       %{name}-%{version}.tar.gz