File bsc975352-make-chage-sgid.patch of Package permissions.13185
From a0d1ad1352f3badc255dcc46a41901461af2e5f5 Mon Sep 17 00:00:00 2001
From: Marcus Meissner <meissner@suse.de>
Date: Wed, 13 Apr 2016 17:04:00 +0200
Subject: [PATCH] chage only needs read rights to /etc/shadow, so setgid shadow
is sufficient (bsc#975352)
---
permissions.easy | 2 +-
permissions.secure | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/permissions.easy b/permissions.easy
index 1f5771b..ff7c7cd 100644
--- a/permissions.easy
+++ b/permissions.easy
@@ -44,7 +44,7 @@
/usr/bin/newgrp root:root 4755
/usr/bin/passwd root:shadow 4755
/usr/bin/chfn root:shadow 4755
-/usr/bin/chage root:shadow 4755
+/usr/bin/chage root:shadow 2755
/usr/bin/chsh root:shadow 4755
/usr/bin/expiry root:shadow 4755
/usr/bin/sudo root:root 4755
diff --git a/permissions.secure b/permissions.secure
index c56187e..4c6d68b 100644
--- a/permissions.secure
+++ b/permissions.secure
@@ -82,7 +82,7 @@
/usr/bin/newgrp root:root 4755
/usr/bin/passwd root:shadow 4755
/usr/bin/chfn root:shadow 4755
-/usr/bin/chage root:shadow 4755
+/usr/bin/chage root:shadow 2755
/usr/bin/chsh root:shadow 4755
/usr/bin/expiry root:shadow 4755
/usr/bin/sudo root:root 4755