man: Don't suggest making groupmems user-writeable

Suggesting mode 2770 is dangerous because it makes the binary writeable
by all members of the owning group which is supposed to be normal
end-users. Suggest 2710 instead as is usual for s[ug]id binaries,
allowing execution but neither reading nor writing.

Signed-off-by: Michael Weiser <michael.weiser@gmx.de>
This commit is contained in:
Michael Weiser
2019-12-17 21:13:07 +01:00
parent 7f53048875
commit a73d4aee75
12 changed files with 37 additions and 37 deletions

View File

@@ -7780,7 +7780,7 @@ msgstr ""
#: groupmems.8.xml:181(para)
msgid ""
"The <command>groupmems</command> executable should be in mode <literal>2770</"
"The <command>groupmems</command> executable should be in mode <literal>2710</"
"literal> as user <emphasis>root</emphasis> and in group <emphasis>groups</"
"emphasis>. The system administrator can add users to group <emphasis>groups</"
"emphasis> to allow or disallow them using the <command>groupmems</command> "
@@ -7792,14 +7792,14 @@ msgstr ""
msgid ""
"\n"
"\t$ groupadd -r groups\n"
"\t$ chmod 2770 groupmems\n"
"\t$ chmod 2710 groupmems\n"
"\t$ chown root.groups groupmems\n"
"\t$ groupmems -g groups -a gk4\n"
" "
msgstr ""
"\n"
"\t$ groupadd -r groups\n"
"\t$ chmod 2770 groupmems\n"
"\t$ chmod 2710 groupmems\n"
"\t$ chown root.groups groupmems\n"
"\t$ groupmems -g groups -a gk4\n"
" "