From 11899c9904f48964fcdc369c6fe05f0d1fe72c5e Mon Sep 17 00:00:00 2001
From: Bob Mottram <bob@robotics.uk.to>
Date: Tue, 29 Nov 2016 20:49:11 +0000
Subject: [PATCH] Set command file permissions

---
 src/freedombone-utils-final    |  1 +
 src/freedombone-utils-selector |  6 ++++++
 src/freedombone-utils-setup    | 21 +++++++++++++++++++++
 3 files changed, 28 insertions(+)

diff --git a/src/freedombone-utils-final b/src/freedombone-utils-final
index 09fa6e456..d28b82757 100755
--- a/src/freedombone-utils-final
+++ b/src/freedombone-utils-final
@@ -39,6 +39,7 @@ function install_final {
     fi
     function_check split_gpg_key_into_fragments
     split_gpg_key_into_fragments
+    set_command_file_permissions
 
     mark_completed $FUNCNAME
     clear
diff --git a/src/freedombone-utils-selector b/src/freedombone-utils-selector
index 8fd90209c..25670c4dd 100755
--- a/src/freedombone-utils-selector
+++ b/src/freedombone-utils-selector
@@ -570,6 +570,9 @@ function install_apps {
 
                             ${PROJECT_NAME}-mirrors --app ${a}
 
+                            function_check set_command_file_permissions
+                            set_command_file_permissions
+
                             function_check install_completed
                             install_completed ${a}
                             echo $"${a} was installed from interactive"
@@ -599,6 +602,9 @@ function install_apps {
                                 function_check add_users_after_install
                                 add_users_after_install ${a}
 
+                                function_check set_command_file_permissions
+                                set_command_file_permissions
+
                                 ${PROJECT_NAME}-mirrors --app ${a}
 
                                 function_check install_completed
diff --git a/src/freedombone-utils-setup b/src/freedombone-utils-setup
index 776cd2097..15a829741 100755
--- a/src/freedombone-utils-setup
+++ b/src/freedombone-utils-setup
@@ -416,6 +416,27 @@ function remove_serial_logins {
     fi
 }
 
+function set_command_file_permissions {
+    if [ -d /bin ]; then
+        chown root:root /bin/*
+    fi
+    if [ -d /usr/bin ]; then
+        chown root:root /usr/bin/*
+    fi
+    if [ -d /usr/local/bin ]; then
+        chown root:root /usr/local/bin/*
+    fi
+    if [ -d /sbin ]; then
+        chown root:root /sbin/*
+    fi
+    if [ -d /usr/sbin ]; then
+        chown root:root /usr/sbin/*
+    fi
+    if [ -d /usr/local/sbin ]; then
+        chown root:root /usr/local/sbin/*
+    fi
+}
+
 function setup_firewall {
     function_check create_completion_file
     create_completion_file
-- 
GitLab