X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=dh_fixperms;h=d9c726ca5fa3c079f64bdd4a12c95cd90954410a;hb=3d774a91dd355f8236c63bd81fc4dfe5fa88219d;hp=d6b0f721487b48e5f5f085863e47a62d3db34587;hpb=1331f43bd02122e6368c808e5b69ceefc6e37c53;p=debhelper.git diff --git a/dh_fixperms b/dh_fixperms index d6b0f72..d9c726c 100755 --- a/dh_fixperms +++ b/dh_fixperms @@ -21,11 +21,12 @@ sane state -- a state that complies with Debian policy. dh_fixperms makes all files in usr/share/doc in the package build directory (excluding files in the examples/ directory) be mode 644. It also changes -the permissions of all man pages to mode 644. It makes all files be owned by -root, and it removes group and other write permission from all files. -It removes execute permissions from any libraries that have it set. It makes -all files in bin/ directories and etc/init.d executable (v4 only). Finally, -it removes the setuid and setgid bits from all files in the package. +the permissions of all man pages to mode 644. It makes all files be owned +by root, and it removes group and other write permission from all files. It +removes execute permissions from any libraries, headers, perl modules, or +desktop files that have it set. It makes all files in bin/ directories, +/usr/games/ and etc/init.d executable (since v4). Finally, it removes the +setuid and setgid bits from all files in the package. =head1 OPTIONS @@ -53,10 +54,10 @@ foreach my $package (@{$dh{DOPACKAGES}}) { # General permissions fixing. complex_doit("find $tmp $find_options -print0", - "2>/dev/null | xargs -0r chown --no-dereference 0.0"); + "2>/dev/null | xargs -0r chown --no-dereference 0:0"); complex_doit("find $tmp ! -type l $find_options -print0", "2>/dev/null | xargs -0r chmod go=rX,u+rw,a-s"); - + # Fix up premissions in usr/share/doc, setting everything to not # executable by default, but leave examples directories alone. complex_doit("find $tmp/usr/share/doc -type f $find_options ! -regex '$tmp/usr/share/doc/[^/]*/examples/.*' -print0 2>/dev/null", @@ -74,27 +75,41 @@ foreach my $package (@{$dh{DOPACKAGES}}) { "\\( -name '*.so*' -or -name '*.la' -or -name '*.a' \\) $find_options -print0", "2>/dev/null | xargs -0r chmod 644"); + # ..and header files .. + complex_doit("find $tmp/usr/include -type f $find_options -print0", + "2>/dev/null | xargs -0r chmod 644"); + + # ..and desktop files .. + complex_doit("find $tmp/usr/share/applications -type f $find_options -print0", + "2>/dev/null | xargs -0r chmod 644"); + # .. and perl modules. complex_doit("find $tmp/usr/lib/perl5 $tmp/usr/share/perl5 -type f", "-perm -5 -name '*.pm' $find_options -print0", "2>/dev/null | xargs -0r chmod a-X"); - # v4 only + # v4 and up if (! compat(3)) { # Programs in the bin and init.d dirs should be executable.. - for my $dir (qw{usr/bin bin usr/sbin sbin etc/init.d}) { + for my $dir (qw{usr/bin bin usr/sbin sbin usr/games etc/init.d}) { if (-d "$tmp/$dir") { complex_doit("find $tmp/$dir -type f $find_options -print0 2>/dev/null", - "| xargs -0r chmod +x"); + "| xargs -0r chmod a+x"); } } } + # ADA ali files should be mode 444 to avoid recompilation + if (-d "$tmp/usr/lib/ada") { + complex_doit("find $tmp/usr/lib/ada -type f", + "-name '*.ali' $find_options -print0", + "2>/dev/null | xargs -0r chmod uga-w"); + } } =head1 SEE ALSO -L +L This program is a part of debhelper.