There's no reason to allow the group write-access, even if it's root.

        * ping/Makefile.am (SUIDMODE): Change mode to `4755'.
---
 ping/Makefile.am |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/ping/Makefile.am b/ping/Makefile.am
index ec275f6..88b1481 100644
--- a/ping/Makefile.am
+++ b/ping/Makefile.am
@@ -30,7 +30,7 @@ ping_SOURCES = ping.c ping_common.c ping_echo.c 
ping_address.c \
   ping_router.c ping_timestamp.c ping_common.h  ping_impl.h ping.h libping.c
 ping6_SOURCES = ping6.c ping_common.c ping_common.h ping6.h
 
-SUIDMODE = -o root -m 4775
+SUIDMODE = -o root -m 4755
 
 install-ping-hook:
        -...@for program in $(bin_PROGRAMS); do \
-- 
1.6.5.4



Reply via email to