]> git.pld-linux.org Git - packages/systemd.git/blob - uids_gids.patch
Patch for local DOS vulnerability
[packages/systemd.git] / uids_gids.patch
1 diff -dur systemd-218.orig/sysusers.d/basic.conf.in systemd-218/sysusers.d/basic.conf.in
2 --- systemd-218.orig/sysusers.d/basic.conf.in   2014-12-05 01:26:51.000000000 +0100
3 +++ systemd-218/sysusers.d/basic.conf.in        2015-04-20 08:47:12.000000000 +0200
4 @@ -12,26 +12,26 @@
5  u nobody  65534 "Nobody"     -
6  
7  # Administrator group: can *see* more than normal users
8 -g adm     -     -            -
9 +g adm     3     -            -
10  
11  # Administrator group: can *do* more than normal users
12 -g wheel   -     -            -
13 +g wheel   10     -            -
14  
15  # Access to certain kernel and userspace facilities
16 -g kmem    -     -            -
17 -g lock    -     -            -
18 +g kmem    9     -            -
19 +#g lock    -     -            -
20  g tty     @TTY_GID@     -            -
21 -g utmp    -     -            -
22 +g utmp    22     -            -
23  
24  # Hardware access groups
25 -g audio   -     -            -
26 -g cdrom   -     -            -
27 -g dialout -     -            -
28 -g disk    -     -            -
29 -g input   -     -            -
30 -g lp      -     -            -
31 -g tape    -     -            -
32 -g video   -     -            -
33 +g audio   23     -            -
34 +g cdrom   27     -            -
35 +g dialout 16     -            -
36 +g disk    6     -            -
37 +g input   182     -            -
38 +g lp      7     -            -
39 +g tape    68     -            -
40 +g video   24     -            -
41  
42  # Default group for normal users
43 -g users   -     -            -
44 +g users   1000     -            -
45 diff -dur systemd-218.orig/sysusers.d/systemd-remote.conf systemd-218/sysusers.d/systemd-remote.conf
46 --- systemd-218.orig/sysusers.d/systemd-remote.conf     2014-12-05 01:26:51.000000000 +0100
47 +++ systemd-218/sysusers.d/systemd-remote.conf  2015-04-20 08:48:22.000000000 +0200
48 @@ -5,6 +5,6 @@
49  #  the Free Software Foundation; either version 2.1 of the License, or
50  #  (at your option) any later version.
51  
52 -u systemd-journal-gateway - "systemd Journal Gateway"
53 -u systemd-journal-remote  - "systemd Journal Remote"
54 -u systemd-journal-upload  - "systemd Journal Upload"
55 +u systemd-journal-gateway 287 "systemd Journal Gateway"
56 +u systemd-journal-remote  319 "systemd Journal Remote"
57 +u systemd-journal-upload  320 "systemd Journal Upload"
58 --- systemd-220/sysusers.d/systemd.conf.m4~     2014-12-05 01:26:51.000000000 +0100
59 +++ systemd-220/sysusers.d/systemd.conf.m4      2015-05-25 17:34:30.699429304 +0200
60 @@ -5,14 +5,14 @@
61  #  the Free Software Foundation; either version 2.1 of the License, or
62  #  (at your option) any later version.
63  
64 -g systemd-journal   - -
65 +g systemd-journal   288 -
66 -u systemd-bus-proxy - "systemd Bus Proxy"
67 +u systemd-bus-proxy 315 "systemd Bus Proxy"
68  m4_ifdef(`ENABLE_NETWORKD',
69 -u systemd-network   - "systemd Network Management"
70 +u systemd-network   316 "systemd Network Management"
71  )m4_dnl
72  m4_ifdef(`ENABLE_RESOLVED',
73 -u systemd-resolve   - "systemd Resolver"
74 +u systemd-resolve   317 "systemd Resolver"
75  )m4_dnl
76  m4_ifdef(`ENABLE_TIMESYNCD',
77 -u systemd-timesync  - "systemd Time Synchronization"
78 +u systemd-timesync  318 "systemd Time Synchronization"
79  )m4_dnl
This page took 0.029867 seconds and 3 git commands to generate.