2024-05-10 23:18:36 -04:00
|
|
|
## Copyright (C) 2012 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
|
2022-06-07 04:11:51 -04:00
|
|
|
## See the file COPYING for copying conditions.
|
|
|
|
|
|
2024-01-02 07:34:29 -05:00
|
|
|
## Please use "/etc/permission-hardener.d/20_user.conf" or
|
|
|
|
|
## "/usr/local/etc/permission-hardener.d/20_user.conf" for your custom
|
2022-06-07 04:11:51 -04:00
|
|
|
## configuration. When security-misc is updated, this file may be overwritten.
|
|
|
|
|
|
|
|
|
|
# Keep the `passwd` utility executable to prevent issues with the
|
|
|
|
|
# /usr/libexec/security-misc/pam-abort-on-locked-password script blocking
|
|
|
|
|
# user logins with `su` and KScreenLocker
|
|
|
|
|
#
|
|
|
|
|
# See also: https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener#passwd
|
|
|
|
|
/usr/bin/passwd 0755 root root
|
|
|
|
|
/bin/passwd 0755 root root
|
