Drop launch-ether-wake

The helper binary is being dropped and etherwake is enabled
for CAP_NET_RAW. This allows execution by unprivileged users
as needed by the web user interface (nobody).

Reported-by: Albert Schwarzkopf <ipfire@quitesimple.org>
Fixes: #12562
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2021-01-05 16:01:56 +00:00
parent 29156d15f6
commit d9f9f16366
8 changed files with 9 additions and 40 deletions

View File

@@ -0,0 +1 @@
../../../common/etherwake

View File

@@ -19,6 +19,7 @@ srv/web/ipfire/cgi-bin/optionsfw.cgi
srv/web/ipfire/cgi-bin/pakfire.cgi
srv/web/ipfire/cgi-bin/remote.cgi
srv/web/ipfire/cgi-bin/services.cgi
srv/web/ipfire/cgi-bin/wakeonlan.cgi
srv/web/ipfire/cgi-bin/wirelessclient.cgi
usr/local/bin/ipsec-interfaces
usr/local/bin/sshctrl

View File

@@ -33,6 +33,7 @@ done
# Remove files
rm -vf \
/usr/local/bin/launch-ether-wake \
/usr/local/bin/upnpctrl
# Stop services