Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-08-06 05:04:28 -04:00
Code Issues Projects Releases Packages Wiki Activity

Refactor permission-hardener to be more idempotent

Browse source
This commit is contained in:
Aaron Rainbolt 2024-12-24 20:14:57 -06:00
parent 2f3a2bce77
commit 83d3867959
No known key found for this signature in database
GPG key ID: A709160D73C79109
4 changed files with 1287 additions and 514 deletions
Download patch file Download diff file Expand all files Collapse all files

2
usr/lib/permission-hardener.d/25_default_passwd.conf → usr/lib/permission-hardener.d/25_default_whitelist_passwd.conf
View file

@ -10,5 +10,7 @@
# user logins with `su` and KScreenLocker
#
# See also: https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener#passwd
/usr/bin/passwd exactwhitelist
/bin/passwd exactwhitelist
/usr/bin/passwd 0755 root root
/bin/passwd 0755 root root