improving code and build system to be in line with gnunet access control model for services as described at https://gnunet.org/gnunet-access-control-model

1 files changed, 5 insertions, 2 deletions

diff --git a/src/dns/Makefile.am b/src/dns/Makefile.am
index f7376a111..99e78d7d6 100644
--- a/src/dns/Makefile.am
+++ b/src/dns/Makefile.am
@@ -20,8 +20,11 @@ HIJACKBIN = gnunet-helper-hijack-dns gnunet-helper-dns
 install-exec-hook:
         $(SUDO_BINARY) chown root:root $(bindir)/gnunet-helper-hijack-dns || true
         $(SUDO_BINARY) chmod u+s $(bindir)/gnunet-helper-hijack-dns || true
-        $(SUDO_BINARY) chown root:root $(bindir)/gnunet-helper-dns || true
-        $(SUDO_BINARY) chmod u+s $(bindir)/gnunet-helper-dns || true
+        $(SUDO_BINARY) chown root $(bindir)/gnunet-helper-dns || true
+        $(SUDO_BINARY) chgrp $(GNUNETDNS_GROUP) $(bindir)/gnunet-helper-dns || true
+        $(SUDO_BINARY) chmod 4750 $(bindir)/gnunet-helper-dns || true
+        $(SUDO_BINARY) chgrp $(GNUNETDNS_GROUP) $(bindir)/gnunet-service-dns-new || true
+        $(SUDO_BINARY) chmod 2755 $(bindir)/gnunet-helper-dns || true
 else
 install-exec-hook:
 endif