bin/suid-list: add groupmems to trusted SGID programs

On ArchLinux, /usr/bin/groupmems now has a SGID bit.
fishilico · Nov 15, 2023 · 487a4a4 · 487a4a4
1 parent d9c72a7
commit 487a4a4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/bin/suid-list b/bin/suid-list
@@ -626,6 +626,9 @@ TRUSTED_SGID_FILES = [
     LinkToSuidFile('/etc/alternatives/rxvt', '/bin/urxvt',
                    groups=('utmp', )),
 
+    # shadow, https://github.com/shadow-maint/shadow
+    SuidFile('/bin/groupmems', groups=('groups', )),
+
     # uw-imap, https://web.archive.org/web/20081005002032/https://www.washington.edu/imap/
     # https://salsa.debian.org/holmgren/uw-imap
     SuidFile('/bin/mlock', groups=('mail', )),