Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-03-13 05:56:30 -04:00
Code Issues Packages Projects Releases Wiki Activity

permission-hardener: move to new state folder /var/lib/permission-hardener-v2 without migration

Browse Source 
https://github.com/Kicksecure/security-misc/pull/294
This commit is contained in:
Patrick Schleizer 2025-01-10 10:21:12 -05:00
parent 3a31cc99b3
commit 482960d056
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
2 changed files with 1 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
debian/security-misc.postinst vendored
View File

@ -15,16 +15,6 @@ true "
##################################################################### #####################################################################
" "
permission_hardening_legacy_state_files() {
if test -d /var/lib/permission-hardener ; then
return 0
fi
if ! test -d /var/lib/permission-hardening ; then
return 0
fi
mv --verbose /var/lib/permission-hardening /var/lib/permission-hardener
}
permission_hardening_legacy_config_folder() { permission_hardening_legacy_config_folder() {
if ! test -d /etc/permission-hardening.d ; then if ! test -d /etc/permission-hardening.d ; then
return 0 return 0
@ -77,7 +67,6 @@ esac
pam-auth-update --package pam-auth-update --package
/usr/libexec/security-misc/permission-lockdown /usr/libexec/security-misc/permission-lockdown
permission_hardening_legacy_state_files
permission_hardening permission_hardening

2
usr/bin/permission-hardener
View File

@ -19,7 +19,7 @@ set -o errexit -o nounset -o pipefail
## Constants ## Constants
# shellcheck disable=SC2034 # shellcheck disable=SC2034
log_level=notice log_level=notice
store_dir="/var/lib/permission-hardener" store_dir="/var/lib/permission-hardener-v2"
state_file="${store_dir}/existing_mode/statoverride" state_file="${store_dir}/existing_mode/statoverride"
dpkg_admindir_parameter_existing_mode="--admindir ${store_dir}/existing_mode" dpkg_admindir_parameter_existing_mode="--admindir ${store_dir}/existing_mode"
dpkg_admindir_parameter_new_mode="--admindir ${store_dir}/new_mode" dpkg_admindir_parameter_new_mode="--admindir ${store_dir}/new_mode"