Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-03 01:34:50 -04:00
Code Issues Projects Releases Packages Wiki Activity

update permission-hardener.service

Browse source 
Which is now only an additional opt-in systemd unit,
because permission-hardener is run by default at security-misc
package installation time.

https://github.com/Kicksecure/security-misc/pull/181
This commit is contained in:
Patrick Schleizer 2024-01-16 09:23:54 -05:00
parent 186f6015da
commit 3ba8fe586e
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
lib/systemd/system/permission-hardener.service
View file

@ -2,7 +2,7 @@
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
[Unit] [Unit]
Description=SUID, SGID, Capability and File Permission Hardening Description=Permission Hardener at Boot Time (opt-in in addition to security-misc package installation time hardening)
Documentation=https://github.com/Kicksecure/security-misc Documentation=https://github.com/Kicksecure/security-misc
DefaultDependencies=no DefaultDependencies=no
@ -13,7 +13,7 @@ After=local-fs.target
[Service] [Service]
Type=oneshot Type=oneshot
RemainAfterExit=yes RemainAfterExit=yes
ExecStart=permission-hardener ExecStart=permission-hardener enable
[Install] [Install]
WantedBy=sysinit.target WantedBy=sysinit.target

2
usr/bin/permission-hardener
View file

@ -616,7 +616,7 @@ spare() {
To remove all: To remove all:
$0 disable all $0 disable all
This change might not be permanent (because of the permission-hardener.service systemd unit). For full instructions, see: This change might not be permanent. For full instructions, see:
https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener
To view list of changed by SUID Disabler and Permission Hardener: To view list of changed by SUID Disabler and Permission Hardener: