[gnome-build-meta/tristan/gnome-boot: 36/39] vm/desktop-vm-image-x86_64.bst: Set required setuid/setgid bits

[Tristan Van Berkom <tvb src gnome org>]

commit 8b293723aaec085ea194840a8a02bc5b09433fb7
Author: Tristan Van Berkom <tristan vanberkom codethink co uk>
Date:   Thu Jun 6 20:18:00 2019 +0900

    vm/desktop-vm-image-x86_64.bst: Set required setuid/setgid bits

 elements/vm/desktop-vm-image-x86_64.bst | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
---
diff --git a/elements/vm/desktop-vm-image-x86_64.bst b/elements/vm/desktop-vm-image-x86_64.bst
index db150a01..ab40a9fe 100644
--- a/elements/vm/desktop-vm-image-x86_64.bst
+++ b/elements/vm/desktop-vm-image-x86_64.bst
@@ -32,6 +32,23 @@ config:
     (<):
     - mkdir -p %{build-root}/dev
     - mkdir -p %{build-root}/proc
+    (>):
+    - |
+      # Set some setuid/setgid binaries, since BuildStream still does not
+      # support persisting these attributes in the artifacts, we need to
+      # do it at the last minute when creating the image.
+      chmod 4755 %{build-root}/usr/bin/su
+      chmod 4755 %{build-root}/usr/bin/passwd
+      chmod 4755 %{build-root}/usr/bin/gpasswd
+      chmod 4755 %{build-root}/usr/bin/chsh
+      chmod 4755 %{build-root}/usr/bin/chfn
+      chmod 4755 %{build-root}/usr/bin/newgrp
+      chmod 4755 %{build-root}/usr/bin/pkexec
+      chmod 4755 %{build-root}/usr/bin/mount
+      chmod 4755 %{build-root}/usr/bin/umount
+      chmod 2755 %{build-root}/usr/bin/expiry
+      chmod 2755 %{build-root}/usr/bin/chage
+      chmod 2755 %{build-root}/usr/bin/ssh-agent
 
   final-commands:
     (>):