Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-19 22:04:07 -04:00
Code Issues Projects Releases Packages Wiki Activity

comment

Browse source
This commit is contained in:
Patrick Schleizer 2019-12-20 04:01:40 -05:00
parent 35c4fce61b
commit 6876a2eaa8
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
usr/lib/security-misc/permission-hardening
View file

@ -116,10 +116,11 @@ set_file_perms() {
## Use dpkg-statoverride so permissions are not reset during upgrades. ## Use dpkg-statoverride so permissions are not reset during upgrades.
## Check there is an entry for the fso.
if dpkg-statoverride --list | grep -q "$fso_without_trailing_slash"; then if dpkg-statoverride --list | grep -q "$fso_without_trailing_slash"; then
## If there is an entry for the fso, but the owner/group/mode do not ## There is an fso entry. Check if owner/group/mode match.
## match, we remove and re-add the entry to update it.
if ! dpkg-statoverride --list | grep -q "$owner $group $mode_from_config $fso_without_trailing_slash"; then if ! dpkg-statoverride --list | grep -q "$owner $group $mode_from_config $fso_without_trailing_slash"; then
## The owner/group/mode do not match, therefore remove and re-add the entry to update it.
## fso_without_trailing_slash instead of fso to prevent ## fso_without_trailing_slash instead of fso to prevent
## "dpkg-statoverride: warning: stripping trailing /" ## "dpkg-statoverride: warning: stripping trailing /"
echo_wrapper dpkg-statoverride --remove "$fso_without_trailing_slash" echo_wrapper dpkg-statoverride --remove "$fso_without_trailing_slash"