Changeset 59453 in vbox for trunk/src/VBox

Timestamp:

Jan 25, 2016 9:40:06 AM (9 years ago)

Author:

vboxsync

Message:

ticketref:15069: Minor issue with file permissions - fail SCAP security validation: change the permissions with which Linux kernel module files (host and guest) are installed under /lib/modules from 0664 to 0644. I note in passing that the host module make files have not yet been changed to use the generic make file template code, so four changes are needed for the host modules versus one for the guest ones.

Location:

trunk/src/VBox

Files:

• HostDrivers/Support/linux/Makefile (modified) (2 diffs)
• HostDrivers/VBoxNetAdp/linux/Makefile (modified) (2 diffs)
• HostDrivers/VBoxNetFlt/linux/Makefile (modified) (2 diffs)
• HostDrivers/VBoxPci/linux/Makefile (modified) (1 diff)
• Installer/linux/Makefile.include.footer (modified) (1 diff)

trunk/src/VBox/HostDrivers/Support/linux/Makefile

@@ -300 +300 @@
 install: $(MODULE)
         @mkdir -p $(MODULE_DIR); \
-        install -m 0664 -o root -g root $(MODULE).$(MODULE_EXT) $(MODULE_DIR); \
+        install -m 0644 -o root -g root $(MODULE).$(MODULE_EXT) $(MODULE_DIR); \
         PATH="$(PATH):/bin:/sbin" depmod -a; \
         rm -f /etc/vbox/module_not_compiled
@@ -306 +306 @@
 install_rpm: $(MODULE)
         @mkdir -p $(MODULE_DIR); \
-        install -m 0664 $(MODULE).$(MODULE_EXT) $(MODULE_DIR)
+        install -m 0644 $(MODULE).$(MODULE_EXT) $(MODULE_DIR)
 
 else # eq ($(MAKECMDGOALS),clean)

trunk/src/VBox/HostDrivers/VBoxNetAdp/linux/Makefile

@@ -203 +203 @@
 install: $(MODULE)
         @mkdir -p $(MODULE_DIR); \
-        install -m 0664 -o root -g root $(MODULE).$(MODULE_EXT) $(MODULE_DIR); \
+        install -m 0644 -o root -g root $(MODULE).$(MODULE_EXT) $(MODULE_DIR); \
         PATH="$(PATH):/bin:/sbin" depmod -a; \
         rm -f /etc/vbox/module_not_compiled
@@ -209 +209 @@
 install_rpm: $(MODULE)
         @mkdir -p $(MODULE_DIR); \
-        install -m 0664 $(MODULE).$(MODULE_EXT) $(MODULE_DIR)
+        install -m 0644 $(MODULE).$(MODULE_EXT) $(MODULE_DIR)
 
 else # eq ($(MAKECMDGOALS),clean)

trunk/src/VBox/HostDrivers/VBoxNetFlt/linux/Makefile

@@ -207 +207 @@
 install: $(MODULE)
         @mkdir -p $(MODULE_DIR); \
-        install -m 0664 -o root -g root $(MODULE).$(MODULE_EXT) $(MODULE_DIR); \
+        install -m 0644 -o root -g root $(MODULE).$(MODULE_EXT) $(MODULE_DIR); \
         PATH="$(PATH):/bin:/sbin" depmod -a; \
         rm -f /etc/vbox/module_not_compiled
@@ -213 +213 @@
 install_rpm: $(MODULE)
         @mkdir -p $(MODULE_DIR); \
-        install -m 0664 $(MODULE).$(MODULE_EXT) $(MODULE_DIR)
+        install -m 0644 $(MODULE).$(MODULE_EXT) $(MODULE_DIR)
 
 else # eq ($(MAKECMDGOALS),clean)

trunk/src/VBox/HostDrivers/VBoxPci/linux/Makefile

@@ -206 +206 @@
 install: $(MODULE)
         @mkdir -p $(MODULE_DIR); \
-        install -m 0664 -o root -g root $(MODULE).$(MODULE_EXT) $(MODULE_DIR); \
+        install -m 0644 -o root -g root $(MODULE).$(MODULE_EXT) $(MODULE_DIR); \
         PATH="$(PATH):/bin:/sbin" depmod -a;
 
 install_rpm: $(MODULE)
         @mkdir -p $(MODULE_DIR); \
-        install -m 0664 $(MODULE).$(MODULE_EXT) $(MODULE_DIR)
+        install -m 0644 $(MODULE).$(MODULE_EXT) $(MODULE_DIR)
 
 else # eq ($(MAKECMDGOALS),clean)

trunk/src/VBox/Installer/linux/Makefile.include.footer

@@ -86 +86 @@
 install: $(MODULE)
         @mkdir -p $(MODULE_DIR); \
-        install -m 0664 -o root -g root $(MODULE).$(MODULE_EXT) $(MODULE_DIR); \
+        install -m 0644 -o root -g root $(MODULE).$(MODULE_EXT) $(MODULE_DIR); \
         PATH="$(PATH):/bin:/sbin" depmod -a;