Bug#589574: [PATCH] dh_fixperms: Ensure files in /etc/sudoers.d/ are mode 440. Closes...

[debhelper.git] / dh_fixperms

diff --git a/dh_fixperms b/dh_fixperms
index 893ca56482e76649107805b65abd1af0f4466951..65beac6f2aff42b0bca95681fca2563490cd0596 100755 (executable)
--- a/dh_fixperms
+++ b/dh_fixperms
@@ -117,6 +117,13 @@ foreach my $package (@{$dh{DOPACKAGES}}) {
                        "-type f $find_options -print0",
                        "2>/dev/null | xargs -0r chmod 644");
        }
+
+       # Files in $tmp/etc/sudoers.d/ must be mode 440.
+       if (-d "$tmp/etc/sudoers.d") {
+               complex_doit("find $tmp/etc/sudoers.d",
+                       "-type f ! -perm 440 $find_options -print0",
+                       "2>/dev/null | xargs -0r chmod 440");
+       }
 }
 
 =head1 SEE ALSO