man: Don't suggest making groupmems user-writeable
Suggesting mode 2770 is dangerous because it makes the binary writeable by all members of the owning group which is supposed to be normal end-users. Suggest 2710 instead as is usual for s[ug]id binaries, allowing execution but neither reading nor writing. Signed-off-by: Michael Weiser <michael.weiser@gmx.de>
This commit is contained in:
@@ -8701,14 +8701,14 @@ msgstr "CONFIGURATION"
|
||||
|
||||
#: groupmems.8.xml:181(para)
|
||||
msgid ""
|
||||
"The <command>groupmems</command> executable should be in mode <literal>2770</"
|
||||
"The <command>groupmems</command> executable should be in mode <literal>2710</"
|
||||
"literal> as user <emphasis>root</emphasis> and in group <emphasis>groups</"
|
||||
"emphasis>. The system administrator can add users to group <emphasis>groups</"
|
||||
"emphasis> to allow or disallow them using the <command>groupmems</command> "
|
||||
"utility to manage their own group membership list."
|
||||
msgstr ""
|
||||
"L'exécutable <command>groupmems</command> doit être installé en mode "
|
||||
"<literal>2770</literal> avec pour utilisateur <emphasis>root</emphasis> et "
|
||||
"<literal>2710</literal> avec pour utilisateur <emphasis>root</emphasis> et "
|
||||
"pour groupe <emphasis>groups</emphasis>. L'administrateur système peut "
|
||||
"ajouter des utilisateurs au groupe <emphasis>groups</emphasis> pour leur "
|
||||
"permettre ou leur interdire d'utiliser <command>groupmems</command> pour "
|
||||
@@ -8719,14 +8719,14 @@ msgstr ""
|
||||
msgid ""
|
||||
"\n"
|
||||
"\t$ groupadd -r groups\n"
|
||||
"\t$ chmod 2770 groupmems\n"
|
||||
"\t$ chmod 2710 groupmems\n"
|
||||
"\t$ chown root.groups groupmems\n"
|
||||
"\t$ groupmems -g groups -a gk4\n"
|
||||
" "
|
||||
msgstr ""
|
||||
"\n"
|
||||
"\t$ groupadd -r groups\n"
|
||||
"\t$ chmod 2770 groupmems\n"
|
||||
"\t$ chmod 2710 groupmems\n"
|
||||
"\t$ chown root.groups groupmems\n"
|
||||
"\t$ groupmems -g groups -a gk4\n"
|
||||
" "
|
||||
|
Reference in New Issue
Block a user