Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-02 19:04:45 -05:00
Code Issues Packages Projects Releases Wiki Activity

remove "/lib/ nosuid" from permission hardening

Browse Source 
Takes 1 minute to parse. No SUID binaries there by default.
remount-secure mounts it with nosuid anyhow.
Therefore no processing it here.
This commit is contained in:
Patrick Schleizer 2019-12-20 05:29:37 -05:00
parent af0f074987
commit 6c8127e3cd
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
etc/permission-hardening.conf
View File

@ -22,7 +22,12 @@
/sbin/ nosuid /sbin/ nosuid
/usr/sbin/ nosuid /usr/sbin/ nosuid
/usr/local/sbin/ nosuid /usr/local/sbin/ nosuid
/lib/ nosuid
## Takes 1 minute to parse. No SUID binaries there by default.
## remount-secure mounts it with nosuid anyhow.
## Therefore no processing it here.
#/lib/ nosuid
/lib32/ nosuid /lib32/ nosuid
/lib64/ nosuid /lib64/ nosuid
/usr/lib/ nosuid /usr/lib/ nosuid