From 7927e64f35bba463eb8de420454607fe40dca73c Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Sun, 28 Apr 2024 02:11:13 +0200
Subject: Merging debian version 2.36.1-8+deb11u2.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'debian/rules')

diff --git a/debian/rules b/debian/rules
index e4986a7..3e34c75 100755
--- a/debian/rules
+++ b/debian/rules
@@ -37,6 +37,9 @@ CONFOPTS += --disable-chfn-chsh
 # => bsdmainutils
 CONFOPTS += --disable-cal
 
+# Reduce setgid programs (cf. CVE-2024-28085)
+CONFOPTS += --disable-use-tty-group
+
 # Get the list of binary package, except lib* and *-udeb, from
 # debian/control instead of hardcoding the list when installing
 # bash-completions below.
-- 
cgit v1.2.3