Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-07 05:22:41 -04:00
Code Issues Projects Releases Packages Wiki Activity

comment

Browse source
This commit is contained in:
Patrick Schleizer 2019-12-20 06:33:41 -05:00
parent fb4254547b
commit 36043fe5cc
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
usr/lib/security-misc/permission-hardening
View file

@ -50,6 +50,9 @@ add_nosuid_statoverride_entry() {
new_mode="$existing_mode"
fi
## Remove 'others' / 'group' execution ('chmod og-x /path/to/binary') rights for better usability?
## Make binaries such as 'su' fail closed rather than fail open if suid was removed from these?
## Are there suid or guid binaries which are still useful if suid / guid has been removed from these?
## https://forums.whonix.org/t/permission-hardening/8655/10
# if [ "$new_mode" = "755" ]; then
# new_mode=744