add more restrictive permissions and root:root as owner for binary

diff --git a/Makefile b/Makefile
index 5dbb81723e7cbbd86769c5214502e93da4dc26df..66792eb7f566e39c33a398a237557df1734074e4 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -6,8 +6,8 @@ PROG=   doas
 MAN=   doas.1 doas.conf.5
 
 BINOWN= root
-BINGRP= wheel
-BINMODE=4511
+BINGRP= root
+BINMODE=4111
 
 CFLAGS+= -I${CURDIR}
 COPTS+= -Wall -Wextra -Werror -pedantic -std=c11