summaryrefslogtreecommitdiffstats
path: root/contrib
diff options
context:
space:
mode:
authorArthur Outhenin-Chalandre <arthur@cri.epita.fr>2020-05-21 14:02:21 +0200
committerGitHub <noreply@github.com>2020-05-21 22:02:21 +1000
commit572ed46860752b545d7617a12bb7a10def7f7dd3 (patch)
tree4a14cced46878125fa81d97621386d0c86d6c2f6 /contrib
parent83bc63694a79dc25dda26723bed8cb12e700da50 (diff)
Fix suid bits on plugin for debian packaging (#8996)
Signed-off-by: Arthur Outhenin-Chalandre <arthur@cri.epita.fr>
Diffstat (limited to 'contrib')
-rw-r--r--contrib/debian/netdata.postinst.in9
-rwxr-xr-xcontrib/debian/rules2
2 files changed, 10 insertions, 1 deletions
diff --git a/contrib/debian/netdata.postinst.in b/contrib/debian/netdata.postinst.in
index e93ff0ac11..1518aa479f 100644
--- a/contrib/debian/netdata.postinst.in
+++ b/contrib/debian/netdata.postinst.in
@@ -55,6 +55,15 @@ case "$1" in
chown -R root:netdata /var/lib/netdata/www
setcap cap_dac_read_search,cap_sys_ptrace+ep /usr/libexec/netdata/plugins.d/apps.plugin
+ chmod 4750 /usr/libexec/netdata/plugins.d/perf.plugin
+ chmod 4750 /usr/libexec/netdata/plugins.d/slabinfo.plugin
+ chmod 4750 /usr/libexec/netdata/plugins.d/cgroup-network
+ chmod 4750 /usr/libexec/netdata/plugins.d/nfacct.plugin
+ chmod 4750 /usr/libexec/netdata/plugins.d/ebpf.plugin
+
+ # Workaround for other plugins not installed directly by this package
+ chmod -f 4750 /usr/libexec/netdata/plugins.d/freeipmi.plugin || true
+
;;
esac
diff --git a/contrib/debian/rules b/contrib/debian/rules
index f18734d630..22c2b82caf 100755
--- a/contrib/debian/rules
+++ b/contrib/debian/rules
@@ -125,7 +125,7 @@ override_dh_fixperms:
chmod 0750 $(TOP)-plugin-cups/usr/libexec/netdata/plugins.d/cups.plugin
# freeIPMI plugin package
- chmod 0754 $(TOP)-plugin-freeipmi/usr/libexec/netdata/plugins.d/freeipmi.plugin
+ chmod 4750 $(TOP)-plugin-freeipmi/usr/libexec/netdata/plugins.d/freeipmi.plugin
override_dh_installlogrotate:
cp system/netdata.logrotate debian/netdata.logrotate