Downgrade suid w/o PIE from error to warning

Some languages (such as Hare) do not support position-independent
executables. Such cases require extra care and scrutiny, but should not
be entirely disallowed.
This commit is contained in:
Drew DeVault 2022-08-28 14:23:27 +02:00
parent 3ee93ea8bc
commit 1571e2887e
1 changed files with 2 additions and 2 deletions

View File

@ -833,9 +833,9 @@ postcheck() {
| xargs scanelf --nobanner --etype ET_EXEC \
| sed "s|ET_EXEC $dir|\t|")
if [ -n "$i" ]; then
error "Found non-PIE files that has SUID:"
warning "Found non-PIE files that have SUID:"
echo "$i"
e=1
warning "suid executables SHOULD be compiled with PIE if possible"
fi
# test suid bit on executable
if ! options_has "suid"; then