From 908bf19b3f1a08fd18ecda695d3d9d99dc2541c3 Mon Sep 17 00:00:00 2001 From: Tommy Date: Sat, 24 Jun 2023 06:55:10 -0700 Subject: [PATCH] Update Desktop Linux Hardening.md Signed-off-by: Tommy --- content/posts/linux/Desktop Linux Hardening.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/content/posts/linux/Desktop Linux Hardening.md b/content/posts/linux/Desktop Linux Hardening.md index 1c1cd24..5ac84a3 100644 --- a/content/posts/linux/Desktop Linux Hardening.md +++ b/content/posts/linux/Desktop Linux Hardening.md @@ -180,6 +180,8 @@ Another option is [Kata Containers](https://katacontainers.io/) which masquerade On distributions besides openSUSE, consider changing the default [umask](https://wiki.archlinux.org/title/Umask) for both root and regular users to `077` (symbolically, `u=rwx,g=,o=`). _On openSUSE, a umask of 077 can break snapper and is thus not recommended._ +On Ubuntu, the "Software & Update" application will not work properly if the repository lists in `/etc/apt/sources.list` have 600 permission. You should make sure that they have the 644 permission. + The configuration for this varies per distribution, but typically it can be set in `/etc/profile`, `/etc/bashrc`, or `/etc/login.defs`. Note that, unlike on macOS, this will only change the umask for the shell. Files created by running applications will not have their permissions set to 600.