components/automake/automake-1.10/patches/00-CVE-2009-4029.patch
author Norm Jacobs <Norm.Jacobs@Oracle.COM>
Sun, 13 Mar 2011 16:12:25 -0700
changeset 127 3e3c266b3a81
permissions -rw-r--r--
7013705 userland build needs local tarball caching 7015775 userland build should be more symlink friendly. 7023611 top should move to userland 7024384 userlands shared-macros.mk has a bad reference for the gnu C++ compiler 7026199 libtool should move to userland 7026200 autoconf should move to userland 7026202 automake should move to userland

--- a/Makefile.in	Sun Oct 15 10:25:23 2006
+++ b/Makefile.in	Thu Dec 10 07:59:14 2009
@@ -429,7 +429,8 @@
 	      || exit 1; \
 	  fi; \
 	done
-	-find $(distdir) -type d ! -perm -777 -exec chmod a+rwx {} \; -o \
+	-find "$(distdir)" -type d ! -perm -755 \
+		-exec chmod u+rwx,go+rx {} \; -o \
 	  ! -type d ! -perm -444 -links 1 -exec chmod a+r {} \; -o \
 	  ! -type d ! -perm -400 -exec chmod a+r {} \; -o \
 	  ! -type d ! -perm -444 -exec $(install_sh) -c -m a+r {} {} \; \
--- a/lib/am/distdir.am	Sun Oct 15 09:41:08 2006
+++ b/lib/am/distdir.am	Thu Dec 10 08:00:54 2009
@@ -196,11 +196,7 @@
 endif %?DIST-TARGETS%
 ##
 ## This complex find command will try to avoid changing the modes of
-## links into the source tree, in case they're hard-linked.  It will
-## also make directories writable by everybody, because some
-## brain-dead tar implementations change ownership and permissions of
-## a directory before extracting the files, thus becoming unable to
-## extract them.
+## links into the source tree, in case they're hard-linked.
 ##
 ## Ignore return result from chmod, because it might give an error
 ## if we chmod a symlink.
@@ -213,7 +209,8 @@
 ## the file in place in the source tree.
 ##
 if %?TOPDIR_P%
-	-find $(distdir) -type d ! -perm -777 -exec chmod a+rwx {} \; -o \
+	-find "$(distdir)" -type d ! -perm -755 \
+		-exec chmod u+rwx,go+rx {} \; -o \
 	  ! -type d ! -perm -444 -links 1 -exec chmod a+r {} \; -o \
 	  ! -type d ! -perm -400 -exec chmod a+r {} \; -o \
 	  ! -type d ! -perm -444 -exec $(install_sh) -c -m a+r {} {} \; \