mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-01-24 18:41:03 -05:00
README
This commit is contained in:
parent
3ba8fe586e
commit
0d78ecaee3
@ -436,8 +436,8 @@ include but are not limited to:
|
|||||||
##### permission-hardener #####
|
##### permission-hardener #####
|
||||||
|
|
||||||
`permission-hardener` removes SUID / SGID bits from non-essential binaries as
|
`permission-hardener` removes SUID / SGID bits from non-essential binaries as
|
||||||
these are often used in privilege escalation attacks. It runs at package
|
these are often used in privilege escalation attacks. It is enabled by default
|
||||||
installation and upgrade time.
|
and applied at security-misc package installation and upgrade time.
|
||||||
|
|
||||||
There is also an optional systemd unit which does the same at boot time that
|
There is also an optional systemd unit which does the same at boot time that
|
||||||
can be enabled by running `systemctl enable permission-hardener.service` as
|
can be enabled by running `systemctl enable permission-hardener.service` as
|
||||||
|
Loading…
Reference in New Issue
Block a user