mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-19 16:40:46 -09:00
c41e4b3dd9
Fixes the following security issues:
CVE-2025-46805: do NOT send signals with root privileges
CVE-2025-46804: avoid file existence test information leaks
CVE-2025-46803: apply safe PTY default mode of 0620
CVE-2025-46802: prevent temporary 0666 mode on PTYs in attacher
CVE-2025-23395: reintroduce lf_secreopen() for logfile
https://lists.gnu.org/archive/html/info-gnu/2025-05/msg00002.html
For more details, see:
https://security.opensuse.org/2025/05/12/screen-security-issues.html
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9a1aaec3f3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
44 lines
1.3 KiB
Makefile
44 lines
1.3 KiB
Makefile
################################################################################
|
|
#
|
|
# screen
|
|
#
|
|
################################################################################
|
|
|
|
SCREEN_VERSION = 5.0.1
|
|
SCREEN_SITE = $(BR2_GNU_MIRROR)/screen
|
|
SCREEN_LICENSE = GPL-3.0+
|
|
SCREEN_LICENSE_FILES = COPYING
|
|
SCREEN_CPE_ID_VENDOR = gnu
|
|
SCREEN_SELINUX_MODULES = screen
|
|
SCREEN_DEPENDENCIES = ncurses
|
|
SCREEN_AUTORECONF = YES
|
|
SCREEN_CONF_ENV = CFLAGS="$(TARGET_CFLAGS)"
|
|
SCREEN_CONF_OPTS = --enable-colors256
|
|
SCREEN_INSTALL_TARGET_OPTS = DESTDIR=$(TARGET_DIR) SCREEN=screen install_bin
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBXCRYPT),y)
|
|
SCREEN_DEPENDENCIES += libxcrypt
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LINUX_PAM),y)
|
|
SCREEN_DEPENDENCIES += linux-pam
|
|
SCREEN_CONF_OPTS += --enable-pam
|
|
else
|
|
SCREEN_CONF_OPTS += --disable-pam
|
|
endif
|
|
|
|
define SCREEN_INSTALL_SCREENRC
|
|
$(INSTALL) -m 0755 -D $(@D)/etc/screenrc $(TARGET_DIR)/etc/screenrc
|
|
endef
|
|
SCREEN_POST_INSTALL_TARGET_HOOKS += SCREEN_INSTALL_SCREENRC
|
|
|
|
# Add /usr/bin/screen to /etc/shells otherwise some login tools like dropbear
|
|
# can reject the user connection. See man shells.
|
|
define SCREEN_ADD_SCREEN_TO_SHELLS
|
|
grep -qsE '^/usr/bin/screen$$' $(TARGET_DIR)/etc/shells \
|
|
|| echo "/usr/bin/screen" >> $(TARGET_DIR)/etc/shells
|
|
endef
|
|
SCREEN_TARGET_FINALIZE_HOOKS += SCREEN_ADD_SCREEN_TO_SHELLS
|
|
|
|
$(eval $(autotools-package))
|