1dpkg-statoverride(1) dpkg suite dpkg-statoverride(1)
2
6 dpkg-statoverride - override ownership and mode of files
7
9 dpkg-statoverride [option...] command
10
12 “stat overrides” are a way to tell dpkg(1) to use a different owner or
13 mode for a path when a package is installed (this applies to any
14 filesystem object that dpkg handles, including directories, devices,
15 etc.). This can be used to force programs that are normally setuid to
16 be install without a setuid flag, or only executable by a certain
17 group.
18 dpkg-statoverride is a utility to manage the list of stat overrides. It
20 has three basic functions: adding, removing and listing overrides.
21
23 --add user group mode path
24 Add an override for path. path does not need to exist nor be known
25 to dpkg when this command is used; the override will be stored and
26 used later. Users and groups can be specified by their name (for
27 example root or nobody), or by their number by prepending the
28 number with a ‘#’ (for example #0 or #65534). The mode needs to be
29 specified in octal.
30 If --update is specified and path exists, it is immediately set to
32 the new owner and mode.
33 --remove path
35 Remove an override for path, the status of path is left unchanged
36 by this command.
37 --list [glob-pattern]
39 List all overrides. If a glob pattern is specified restrict the
40 output to overrides which match the glob.
41 --help
43 Show the usage message and exit.
44 --force-help
46 Give help about the --force-thing options (since dpkg 1.19.5).
47 --version
49 Show the version and exit.
50
52 --admindir directory
53 Set the administrative directory to directory. This is where the
54 statoverride file is stored. Defaults to «/var/lib/dpkg» if
55 DPKG_ADMINDIR has not been set.
56 --instdir directory
58 Set the installation directory, which refers to the directory where
59 packages get installed (since dpkg 1.19.2). Defaults to «/» if
60 DPKG_ROOT has not been set.
61 --root directory
63 Set the root directory to directory, which sets the installation
64 directory to «directory» and the administrative directory to
65 «directory/var/lib/dpkg» (since dpkg 1.19.2) if DPKG_ROOT has not
66 been set.
67 --force-things
69 --no-force-things, --refuse-things
70 Force or refuse (no-force and refuse mean the same thing) to do
71 some things (since dpkg 1.19.5). things is a comma separated list
72 of things specified below. --force-help displays a message
73 describing them. Things marked with (*) are forced by default.
74 Warning: These options are mostly intended to be used by experts
76 only. Using them without fully understanding their effects may
77 break your whole system.
78 all: Turns on (or off) all force options.
80 statoverride-add: Overwrite an existing stat override when adding
82 it (since dpkg 1.19.5).
83 statoverride-remove: Ignore a missing stat override when removing
85 it (since dpkg 1.19.5).
86 security-mac(*): Use platform-specific Mandatory Access Controls
88 (MAC) based security when installing files into the filesystem
89 (since dpkg 1.19.5). On Linux systems the implementation uses
90 SELinux.
91 not-root: Try to (de)install things even when not root (since dpkg
93 1.21.8).
94 --force
96 Force an action, even if a sanity check would otherwise prohibit
97 it. This is necessary to override an existing override. This
98 option is deprecated (since dpkg 1.19.5), it is replaced by
99 --force-all.
100 --update
102 Immediately try to change the path to the new owner and mode if it
103 exists.
104 --quiet
106 Be less verbose about what we do.
107
109 0 The requested action was successfully performed.
110 1 For --list, if there are no overrides or none match the supplied
112 glob.
113 2 Fatal or unrecoverable error due to invalid command-line usage, or
115 interactions with the system, such as accesses to the database,
116 memory allocations, etc.
117
119 DPKG_ROOT
120 If set and the --instdir or --root options have not been specified,
121 it will be used as the filesystem root directory (since dpkg
122 1.19.2).
123 DPKG_ADMINDIR
125 If set and the --admindir or --root options have not been
126 specified, it will be used as the dpkg data directory.
127 DPKG_DEBUG
129 Sets the debug mask (since dpkg 1.21.10) from an octal value. The
130 currently accepted flags are described in the dpkg --debug option,
131 but not all these flags might have an effect on this program.
132 DPKG_FORCE
134 If set and none of the --force-... options have been specified, it
135 will be used as the force options to use (since dpkg 1.19.5).
136 DPKG_COLORS
138 Sets the color mode (since dpkg 1.18.5). The currently accepted
139 values are: auto (default), always and never.
140
142 /var/lib/dpkg/statoverride
143 File which contains the current list of stat overrides of the
144 system. It is located in the dpkg administration directory, along
145 with other files important to dpkg, such as status or available.
146 Note: dpkg-statoverride preserves the old copy of this file, with
148 extension “-old”, before replacing it with the new one.
149
151 dpkg(1).
1521.21.21 2023-02-25 dpkg-statoverride(1)