This commit is contained in:
Patrick Schleizer 2020-03-03 09:18:38 -05:00
parent cd19c2da00
commit 1dea4dbcf6
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48

View File

@ -76,10 +76,10 @@ https://en.wikipedia.org/wiki/Bluetooth#History_of_security_concerns
* A systemd service restricts `/proc/cpuinfo`, `/proc/bus`, `/proc/scsi` and
`/sys` to the root user only. This hides a lot of hardware identifiers from
unprivileged users and increases security as `/sys` exposes a lot of information
that shouldn't be accessible to unprivileged users. As this will break many
things, it is disabled by default and can optionally be enabled by running
`systemctl enable hide-hardware-info.service` as root.
unprivileged users and increases security as `/sys` exposes a lot of
information that shouldn't be accessible to unprivileged users. As this will
break many things, it is disabled by default and can optionally be enabled by
running `systemctl enable hide-hardware-info.service` as root.
`/usr/lib/security-misc/hide-hardware-info`
`/lib/systemd/system/hide-hardware-info.service`
`/lib/systemd/system/user@.service.d/sysfs.conf`