debian: correctly install sg-tape-cmd setuid binary

diff --git a/Makefile b/Makefile
index 3979bc68a1c261cc2709f3f0721ac061eb83e884..3dbcba15b7b16485cf372b6f5f81afbf3ffa0f88 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -142,7 +142,7 @@ install: $(COMPILED_BINS)
            install -m644 zsh-completions/_$(i) $(DESTDIR)$(ZSH_COMPL_DEST)/ ;)
        install -dm755 $(DESTDIR)$(LIBEXECDIR)/proxmox-backup
        # install sg-tape-cmd as setuid binary
-       install -m2755 -mu+s $(COMPILEDIR)/sg-tape-cmd $(DESTDIR)$(LIBEXECDIR)/proxmox-backup/sg-tape-cmd
+       install -m4755 -o root -g root $(COMPILEDIR)/sg-tape-cmd $(DESTDIR)$(LIBEXECDIR)/proxmox-backup/sg-tape-cmd
        $(foreach i,$(SERVICE_BIN), \
            install -m755 $(COMPILEDIR)/$(i) $(DESTDIR)$(LIBEXECDIR)/proxmox-backup/ ;)
        $(MAKE) -C www install

diff --git a/debian/proxmox-backup-server.install b/debian/proxmox-backup-server.install
index e825b875bf18259f8ac0323782b8f3ac129d2113..a44569cde2f8df0bbe34f2f29765dc6a2adfafd6 100644 (file)
--- a/debian/proxmox-backup-server.install
+++ b/debian/proxmox-backup-server.install
@@ -8,6 +8,7 @@ usr/lib/x86_64-linux-gnu/proxmox-backup/proxmox-backup-api
 usr/lib/x86_64-linux-gnu/proxmox-backup/proxmox-backup-proxy
 usr/lib/x86_64-linux-gnu/proxmox-backup/proxmox-backup-banner
 usr/lib/x86_64-linux-gnu/proxmox-backup/proxmox-daily-update
+usr/lib/x86_64-linux-gnu/proxmox-backup/sg-tape-cmd
 usr/sbin/proxmox-backup-manager
 usr/share/javascript/proxmox-backup/index.hbs
 usr/share/javascript/proxmox-backup/css/ext6-pbs.css

diff --git a/debian/rules b/debian/rules
index 2bc0f694e136cd40b2ce23d24aa4f4f9d5cfcdca..9012f82f698b52572e444d3d719c05e46f62047d 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -42,6 +42,9 @@ override_dh_installsystemd:
        # note: we start/try-reload-restart services manually in postinst
        dh_installsystemd --no-start --no-restart-after-upgrade
 
+override_dh_fixperms:
+       dh_fixperms --exclude sg-tape-cmd
+
 # workaround https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=933541
 # TODO: remove once available (Debian 11 ?)
 override_dh_dwz: