Changeset 37177 in vbox for trunk/src/VBox

Timestamp:

May 22, 2011 11:01:33 AM (14 years ago)

Author:

vboxsync

Message:

Relax the hardening for PC-BSD a bit. They have a group writable application directory. (Thanks to Kris Moore and Bernhard Froehlich)

File:

• trunk/src/VBox/HostDrivers/Support/SUPR3HardenedVerify.cpp (modified) (1 diff)

trunk/src/VBox/HostDrivers/Support/SUPR3HardenedVerify.cpp

@@ -1188 +1188 @@
         if (pFsObjState->Stat.st_gid != 80 /*admin*/) /** @todo dynamically resolve the admin group? */
 #endif
+#ifdef RT_OS_FREEBSD
+        /* PC-BSD 9 has group-writable application directory, similar to OSX and
+           their Applications directory */
+        if (pFsObjState->Stat.st_gid != 5 /*operators*/) /* Allow operators group-writes */
+#endif
             return supR3HardenedSetError3(VERR_SUPLIB_WRITE_NON_SYS_GROUP, pErrInfo,
                                           "The group is not a system group and it has write access to '", pszPath, "'");