From 79cd3b86b6e5e186da66fd329b04fb3b42c0276e Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Fri, 20 Dec 2019 10:47:23 -0500 Subject: [PATCH] comment --- usr/lib/security-misc/permission-hardening | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/usr/lib/security-misc/permission-hardening b/usr/lib/security-misc/permission-hardening index 85cf3b9..014dd1c 100755 --- a/usr/lib/security-misc/permission-hardening +++ b/usr/lib/security-misc/permission-hardening @@ -206,6 +206,12 @@ set_file_perms() { fi ## Check there is an entry for the fso. + ## + ## example: dpkg-statoverride --list | grep /home + ## output: + ## root root 755 /home + ## + ## dpkg-statoverride does not show leading '0'. if dpkg-statoverride --list | grep -q "$fso_without_trailing_slash"; then ## There is an fso entry. Check if owner/group/mode match. if dpkg-statoverride --list | grep -q "$owner $group $mode_for_grep $fso_without_trailing_slash"; then