Bug#589574: [PATCH] dh_fixperms: Ensure files in /etc/sudoers.d/ are mode 440. Closes...

Signed-off-by: Carsten Hey <carsten@debian.org>

diff --git a/debian/changelog b/debian/changelog
index 628b0434a60cc8730dcf2d2fe6e8fa1b0f8a00ed..c895d78039d2c27f20f7f5e9e307eb3e93a0b90b 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+debhelper (7.9.4) UNRELEASED; urgency=low
+
+  * dh_fixperms: Ensure files in /etc/sudoers.d/ are mode 440. Closes: #589574
+
+ -- Carsten Hey <carsten@debian.org>  Sun, 18 Jul 2010 22:30:06 +0200
+
 debhelper (7.9.3) unstable; urgency=low
 
   * perl_makemaker: import compat(). Closes: #587654

diff --git a/dh_fixperms b/dh_fixperms
index 893ca56482e76649107805b65abd1af0f4466951..65beac6f2aff42b0bca95681fca2563490cd0596 100755 (executable)
--- a/dh_fixperms
+++ b/dh_fixperms
@@ -117,6 +117,13 @@ foreach my $package (@{$dh{DOPACKAGES}}) {
                        "-type f $find_options -print0",
                        "2>/dev/null | xargs -0r chmod 644");
        }
+
+       # Files in $tmp/etc/sudoers.d/ must be mode 440.
+       if (-d "$tmp/etc/sudoers.d") {
+               complex_doit("find $tmp/etc/sudoers.d",
+                       "-type f ! -perm 440 $find_options -print0",
+                       "2>/dev/null | xargs -0r chmod 440");
+       }
 }
 
 =head1 SEE ALSO