r1772: releasing version 4.9.4

[debhelper.git] / dh_fixperms

diff --git a/dh_fixperms b/dh_fixperms
index 7cd33935079642fa949a7ba8ddcbd6df32cd545e..2a565bd3f926937b12605c83bc83f9384d9cdeda 100755 (executable)
--- a/dh_fixperms
+++ b/dh_fixperms
@@ -11,7 +11,7 @@ use Debian::Debhelper::Dh_Lib;
 
 =head1 SYNOPSIS
 
 
 =head1 SYNOPSIS
 

-dh_fixperms [debhelper options] [-Xitem]
+B<dh_fixperms> [S<I<debhelper options>>] [B<-X>I<item>]

 
 =head1 DESCRIPTION
 
 
 =head1 DESCRIPTION
 


@@ -21,16 +21,18 @@ sane state -- a state that complies with Debian policy.
 
 dh_fixperms makes all files in usr/share/doc in the package build directory
 (excluding files in the examples/ directory) be mode 644. It also changes
 
 dh_fixperms makes all files in usr/share/doc in the package build directory
 (excluding files in the examples/ directory) be mode 644. It also changes

-the permissions of all man pages to mode 644. It makes all files be owned by
-root, and it removes group and other write permission from all files.
-It removes execute permissions from any libraries that have it set. Finally,
-it removes the setuid and setgid bits from all files in the package.
+the permissions of all man pages to mode 644. It makes all files be owned
+by root, and it removes group and other write permission from all files. It
+removes execute permissions from any libraries that have it set. It makes
+all files in bin/ directories, /usr/games/ and etc/init.d executable (v4
+only). Finally, it removes the setuid and setgid bits from all files in the
+package.

 
 =head1 OPTIONS
 
 =over 4
 
 
 =head1 OPTIONS
 
 =over 4
 

-=item B<-X>I<item>, B<--exclude>I<item>
+=item B<-X>I<item>, B<--exclude> I<item>

 
 Exclude files that contain "item" anywhere in their filename from having
 their permissions changed. You may use this option multiple times to build
 
 Exclude files that contain "item" anywhere in their filename from having
 their permissions changed. You may use this option multiple times to build


@@ -52,31 +54,59 @@ foreach my $package (@{$dh{DOPACKAGES}}) {
 
        # General permissions fixing.
        complex_doit("find $tmp $find_options -print0",
 
        # General permissions fixing.
        complex_doit("find $tmp $find_options -print0",

-               "2>/dev/null | xargs -0r chown --no-dereference 0.0");
+               "2>/dev/null | xargs -0r chown --no-dereference 0:0");

        complex_doit("find $tmp ! -type l $find_options -print0",
                "2>/dev/null | xargs -0r chmod go=rX,u+rw,a-s");
        complex_doit("find $tmp ! -type l $find_options -print0",
                "2>/dev/null | xargs -0r chmod go=rX,u+rw,a-s");

-               
+       

        # Fix up premissions in usr/share/doc, setting everything to not
        # executable by default, but leave examples directories alone.
        # Fix up premissions in usr/share/doc, setting everything to not
        # executable by default, but leave examples directories alone.

-       complex_doit("find $tmp/usr/share/doc $tmp/usr/doc -type f $find_options ! -regex '.*/examples/.*' -print0",
-               "2>/dev/null | xargs -0r chmod 644");
-       complex_doit("find $tmp/usr/share/doc $tmp/usr/doc -type d $find_options -print0",
-               "2>/dev/null | xargs -0r chmod 755");
+       complex_doit("find $tmp/usr/share/doc -type f $find_options ! -regex '$tmp/usr/share/doc/[^/]*/examples/.*' -print0 2>/dev/null",
+               "| xargs -0r chmod 644");
+       complex_doit("find $tmp/usr/share/doc -type d $find_options -print0 2>/dev/null",
+               "| xargs -0r chmod 755");

 
        # Executable man pages are a bad thing..
        complex_doit("find $tmp/usr/share/man $tmp/usr/man/ $tmp/usr/X11*/man/ -type f",
                "$find_options -print0 2>/dev/null | xargs -0r chmod 644");
 
        # ..and so are executable shared and static libraries 
 
        # Executable man pages are a bad thing..
        complex_doit("find $tmp/usr/share/man $tmp/usr/man/ $tmp/usr/X11*/man/ -type f",
                "$find_options -print0 2>/dev/null | xargs -0r chmod 644");
 
        # ..and so are executable shared and static libraries 

-       # (and .la files from libtool)
+       # (and .la files from libtool) ..

        complex_doit("find $tmp -perm -5 -type f",
                "\\( -name '*.so*' -or -name '*.la' -or -name '*.a' \\) $find_options -print0",
        complex_doit("find $tmp -perm -5 -type f",
                "\\( -name '*.so*' -or -name '*.la' -or -name '*.a' \\) $find_options -print0",

+               "2>/dev/null | xargs -0r chmod 644");
+       
+       # ..and header files ..
+       complex_doit("find $tmp/usr/include  -type f",
+               "-name '*.h' $find_options -print0",
+               "2>/dev/null | xargs -0r chmod 644");
+       
+       # .. and perl modules.
+       complex_doit("find $tmp/usr/lib/perl5 $tmp/usr/share/perl5 -type f",
+               "-perm -5 -name '*.pm' $find_options -print0",

                "2>/dev/null | xargs -0r chmod a-X");
                "2>/dev/null | xargs -0r chmod a-X");

+       
+       # v4 only
+       if (! compat(3)) {
+               # Programs in the bin and init.d dirs should be executable..
+               for my $dir (qw{usr/bin bin usr/sbin sbin usr/games etc/init.d}) {
+                       if (-d "$tmp/$dir") {
+                               complex_doit("find $tmp/$dir -type f $find_options -print0 2>/dev/null",
+                                       "| xargs -0r chmod +x");
+                       }
+               }
+       }
+       
+       # ADA ali files should be mode 444 to avoid recompilation
+       if (-d "$tmp/usr/lib/ada") {
+               complex_doit("find $tmp/usr/lib/ada -type f",
+                       "-name '*.ali' $find_options -print0",
+                       "2>/dev/null | xargs -0r chmod uga-w");
+       }

 }
 
 =head1 SEE ALSO
 
 }
 
 =head1 SEE ALSO
 

-L<debhelper(1)|debhelper>
+L<debhelper(7)>

 
 This program is a part of debhelper.
 
 
 This program is a part of debhelper.