1dpkg-statoverride(1) dpkg suite dpkg-statoverride(1)
2
3
4
6 dpkg-statoverride - override ownership and mode of files
7
9 dpkg-statoverride [option...] command
10
12 “stat overrides” are a way to tell dpkg(1) to use a different owner or
13 mode for a path when a package is installed (this applies to any
14 filesystem object that dpkg handles, including directories, devices,
15 etc.). This can be used to force programs that are normally setuid to
16 be install without a setuid flag, or only executable by a certain
17 group.
18
19 dpkg-statoverride is a utility to manage the list of stat overrides. It
20 has three basic functions: adding, removing and listing overrides.
21
23 --add user group mode path
24 Add an override for path. path does not need to exist nor be known
25 to dpkg when this command is used; the override will be stored and
26 used later. Users and groups can be specified by their name (for
27 example root or nobody), or by their number by prepending the
28 number with a ‘#’ (for example #0 or #65534). The mode needs to be
29 specified in octal.
30
31 If --update is specified and path exists, it is immediately set to
32 the new owner and mode.
33
34 --remove path
35 Remove an override for path, the status of path is left unchanged
36 by this command.
37
38 --list [glob-pattern]
39 List all overrides. If a glob pattern is specified restrict the
40 output to overrides which match the glob.
41
42 --help
43 Show the usage message and exit.
44
45 --force-help
46 Give help about the --force-thing options (since dpkg 1.19.5).
47
48 --version
49 Show the version and exit.
50
52 --admindir directory
53 Set the administrative directory to directory. This is where the
54 statoverride file is stored. Defaults to «/var/lib/dpkg» if
55 DPKG_ADMINDIR has not been set.
56
57 --instdir directory
58 Set the installation directory, which refers to the directory where
59 packages get installed (since dpkg 1.19.2). Defaults to «/» if
60 DPKG_ROOT has not been set.
61
62 --root directory
63 Set the root directory to directory, which sets the installation
64 directory to «directory» and the administrative directory to
65 «directory/var/lib/dpkg» (since dpkg 1.19.2) if DPKG_ROOT has not
66 been set.
67
68 --force-things
69 --no-force-things, --refuse-things
70 Force or refuse (no-force and refuse mean the same thing) to do
71 some things (since dpkg 1.19.5). things is a comma separated list
72 of things specified below. --force-help displays a message
73 describing them. Things marked with (*) are forced by default.
74
75 Warning: These options are mostly intended to be used by experts
76 only. Using them without fully understanding their effects may
77 break your whole system.
78
79 all: Turns on (or off) all force options.
80
81 statoverride-add: Overwrite an existing stat override when adding
82 it (since dpkg 1.19.5).
83
84 statoverride-remove: Ignore a missing stat override when removing
85 it (since dpkg 1.19.5).
86
87 security-mac(*): Use platform-specific Mandatory Access Controls
88 (MAC) based security when installing files into the filesystem
89 (since dpkg 1.19.5). On Linux systems the implementation uses
90 SELinux.
91
92 not-root: Try to (de)install things even when not root (since dpkg
93 1.21.8).
94
95 --force
96 Force an action, even if a sanity check would otherwise prohibit
97 it. This is necessary to override an existing override. This
98 option is deprecated (since dpkg 1.19.5), it is replaced by
99 --force-all.
100
101 --update
102 Immediately try to change the path to the new owner and mode if it
103 exists.
104
105 --quiet
106 Be less verbose about what we do.
107
109 0 The requested action was successfully performed.
110
111 1 For --list, if there are no overrides or none match the supplied
112 glob.
113
114 2 Fatal or unrecoverable error due to invalid command-line usage, or
115 interactions with the system, such as accesses to the database,
116 memory allocations, etc.
117
119 DPKG_ROOT
120 If set and the --instdir or --root options have not been specified,
121 it will be used as the filesystem root directory (since dpkg
122 1.19.2).
123
124 DPKG_ADMINDIR
125 If set and the --admindir or --root options have not been
126 specified, it will be used as the dpkg data directory.
127
128 DPKG_FORCE
129 If set and none of the --force-... options have been specified, it
130 will be used as the force options to use (since dpkg 1.19.5).
131
132 DPKG_COLORS
133 Sets the color mode (since dpkg 1.18.5). The currently accepted
134 values are: auto (default), always and never.
135
137 /var/lib/dpkg/statoverride
138 File which contains the current list of stat overrides of the
139 system. It is located in the dpkg administration directory, along
140 with other files important to dpkg, such as status or available.
141
142 Note: dpkg-statoverride preserves the old copy of this file, with
143 extension “-old”, before replacing it with the new one.
144
146 dpkg(1).
147
148
149
1501.21.9 2022-07-01 dpkg-statoverride(1)