Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-25 21:29:24 -05:00
Code Issues Packages Projects Releases Wiki Activity

remove duplicates after usrmerge

Browse Source 
https://github.com/Kicksecure/security-misc/issues/190
This commit is contained in:
Patrick Schleizer 2024-01-17 13:45:17 -05:00
parent 0efee2f50f
commit 011e55e3e5
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 0 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
etc/permission-hardener.d/30_default.conf
View File

@ -37,13 +37,11 @@
## In case you need to use 'su'. See also: ## In case you need to use 'su'. See also:
## https://www.kicksecure.com/wiki/root#su ## https://www.kicksecure.com/wiki/root#su
#/usr/bin/su exactwhitelist #/usr/bin/su exactwhitelist
#/usr/bin/su exactwhitelist
## https://manpages.debian.org/xserver-xorg-legacy/Xorg.wrap.1.en.html ## https://manpages.debian.org/xserver-xorg-legacy/Xorg.wrap.1.en.html
## https://lwn.net/Articles/590315/ ## https://lwn.net/Articles/590315/
## https://forums.whonix.org/t/suid-disabler-and-permission-hardener/7706/35 ## https://forums.whonix.org/t/suid-disabler-and-permission-hardener/7706/35
#/usr/lib/xorg/Xorg.wrap whitelist #/usr/lib/xorg/Xorg.wrap whitelist
#/usr/lib/xorg/Xorg.wrap whitelist
###################################################################### ######################################################################
# SUID whitelist matches in any section of the path: matchwhitelist # SUID whitelist matches in any section of the path: matchwhitelist
@ -93,25 +91,20 @@
## ##
## Remove all SUID/SGID binaries/libraries. ## Remove all SUID/SGID binaries/libraries.
/usr/bin/ nosuid
/usr/local/bin/ nosuid /usr/local/bin/ nosuid
/usr/bin/ nosuid /usr/bin/ nosuid
/usr/local/usr/bin/ nosuid /usr/local/usr/bin/ nosuid
/usr/sbin/ nosuid
/usr/local/sbin/ nosuid /usr/local/sbin/ nosuid
/usr/sbin/ nosuid /usr/sbin/ nosuid
/usr/local/usr/sbin/ nosuid /usr/local/usr/sbin/ nosuid
/usr/lib/ nosuid
/usr/local/lib/ nosuid /usr/local/lib/ nosuid
/usr/lib32/ nosuid
/usr/local/lib32/ nosuid /usr/local/lib32/ nosuid
/usr/lib64/ nosuid
/usr/local/lib64/ nosuid /usr/local/lib64/ nosuid
/usr/lib/ nosuid /usr/lib/ nosuid