Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-02 17:14:50 -04:00
Code Issues Projects Releases Packages Wiki Activity

run permission hardener when new packages are install files to /usr or /opt

Browse source 
(basically anywhere)

fixes https://github.com/Kicksecure/security-misc/issues/189
This commit is contained in:
Patrick Schleizer 2024-01-17 13:23:20 -05:00
parent 66e6371221
commit 18a06935e0
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
2 changed files with 6 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

26
debian/security-misc.triggers vendored
View file

@ -1,25 +1,5 @@
## Copyright (C) 2019 - 2023 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## Copyright (C) 2024 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
#### meta start
#### project Kicksecure
#### category security
#### description
## Trigger 'activate-noawait update-initramfs' also works with both,
## initramfs-tools as well as dracut.
## - Activate initramfs hook that sets the sysctl values before init is executed.
## - dracut module 20remount-secure
activate-noawait update-initramfs
## LKRG /usr/share/security-misc/lkrg/lkrg-virtualbox
interest-noawait /usr/bin/vboxmanage
## /usr/libexec/security-misc/mmap-rnd-bits
## auto generates:
## /etc/sysctl.d/30_security-misc_aslr-mmap.conf
## sets:
## vm.mmap_rnd_bits
interest-noawait /boot
#### meta end
interest-await /usr
interest-await /opt