linux-kernel - Re: [PATCH] kbuild: Install dtb files as 0644 in Makefile.dtbinst

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 10 Jun 2024 00:41:54 +0200
From: Dragan Simic <dsimic@...jaro.org>
To: linux-kbuild@...r.kernel.org
Cc: masahiroy@...nel.org, nathan@...nel.org, nicolas@...sle.eu,
 linux-kernel@...r.kernel.org, stable@...r.kernel.org, didi.debian@...ow.org
Subject: Re: [PATCH] kbuild: Install dtb files as 0644 in Makefile.dtbinst

+Cc: stable@...r.kernel.org
+Cc: didi.debian@...ow.org

On 2024-06-09 21:32, Dragan Simic wrote:
> The compiled dtb files aren't executable, so install them with 0644 as 
> their
> permission mode, instead of defaulting to 0755 as the mode.
> 
> Signed-off-by: Dragan Simic <dsimic@...jaro.org>

Actually, some Linux distributions, including Debian, [1][2] already 
include
fixes in their kernel package builds to change the file permissions to 
0644.
Thus, let's have this fix propagated into the stable kernels, to allow 
such
distributions to remove their downstream fixes.

Fixes: aefd80307a05 ("kbuild: refactor Makefile.dtbinst more")

[1] https://salsa.debian.org/kernel-team/linux/-/merge_requests/642
[2] https://salsa.debian.org/kernel-team/linux/-/merge_requests/749

> ---
>  scripts/Makefile.dtbinst | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/scripts/Makefile.dtbinst b/scripts/Makefile.dtbinst
> index 67956f6496a5..9d920419a62c 100644
> --- a/scripts/Makefile.dtbinst
> +++ b/scripts/Makefile.dtbinst
> @@ -17,7 +17,7 @@ include $(srctree)/scripts/Kbuild.include
>  dst := $(INSTALL_DTBS_PATH)
> 
>  quiet_cmd_dtb_install = INSTALL $@
> -      cmd_dtb_install = install -D $< $@
> +      cmd_dtb_install = install -D -m 0644 $< $@
> 
>  $(dst)/%: $(obj)/%
>  	$(call cmd,dtb_install)