From 7c3da38bd53427501bcb0ac0d56bd626ce9e6adb Mon Sep 17 00:00:00 2001
From: Patrick Schleizer <adrelanos@riseup.net>
Date: Sat, 21 Dec 2019 07:42:25 -0500
Subject: [PATCH] comment

---
 usr/lib/security-misc/permission-hardening-undo | 1 +
 1 file changed, 1 insertion(+)

diff --git a/usr/lib/security-misc/permission-hardening-undo b/usr/lib/security-misc/permission-hardening-undo
index 594a11e..0daba11 100755
--- a/usr/lib/security-misc/permission-hardening-undo
+++ b/usr/lib/security-misc/permission-hardening-undo
@@ -34,6 +34,7 @@ undo_all() {
       stat -c "%n %a %U %G" "$file_name" || true
 
       chown "${owner}:${group}" "$file_name" || exit_code=202
+      ## chmod need to be run after chown since chown would remove suid.
       chmod "$mode" "$file_name" || exit_code=203
 
       stat -c "%n %a %U %G" "$file_name" || true