Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-24 10:59:45 -05:00
Code Issues Packages Projects Releases Wiki Activity

remove unicode

Browse Source
This commit is contained in:
Patrick Schleizer 2022-06-08 09:04:03 -04:00
parent fcaec49675
commit 55d16e1602
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@ -400,7 +400,7 @@ executing `systemctl enable hide-hardware-info.service` as root.
* Linux Kernel Runtime Guard (LKRG) * Linux Kernel Runtime Guard (LKRG)
* tirdad - TCP ISN CPU Information Leak Protection. * tirdad - TCP ISN CPU Information Leak Protection.
* Kicksecure ™ - a security-hardened Linux Distribution * Kicksecure (TM) - a security-hardened Linux Distribution
* And more. * And more.
* https://www.kicksecure.com/wiki/Linux_Kernel_Runtime_Guard_LKRG * https://www.kicksecure.com/wiki/Linux_Kernel_Runtime_Guard_LKRG
* https://github.com/Kicksecure/tirdad * https://github.com/Kicksecure/tirdad

2
etc/permission-hardening.d/25_default_whitelist_unix_chkpwd.conf
View File

@ -6,6 +6,6 @@
## configuration. When security-misc is updated, this file may be overwritten. ## configuration. When security-misc is updated, this file may be overwritten.
## required for performing password validation from unprivileged user ## required for performing password validation from unprivileged user
## processes such as KScreenLocker’s unlock prompt ## processes such as KScreenLocker's unlock prompt
/usr/sbin/unix_chkpwd exactwhitelist /usr/sbin/unix_chkpwd exactwhitelist
/sbin/unix_chkpwd exactwhitelist /sbin/unix_chkpwd exactwhitelist

2
usr/libexec/security-misc/permission-hardening
View File

@ -464,7 +464,7 @@ set_file_perms() {
parse_config_folder() { parse_config_folder() {
# Query contents of password and group databases only once and buffer them # Query contents of password and group databases only once and buffer them
# #
# If we don’t buffer we sometimes get incorrect results when checking for entries using # If we don't buffer we sometimes get incorrect results when checking for entries using
# `if getent passwd | grep -q '^root:'; …` since `grep` exits after the first match in # `if getent passwd | grep -q '^root:'; …` since `grep` exits after the first match in
# this case causing `getent` to receive SIGPIPE, which then fails the pipeline since # this case causing `getent` to receive SIGPIPE, which then fails the pipeline since
# `set -o pipefail` is set for this script. # `set -o pipefail` is set for this script.