diff --git a/usr/bin/permission-hardener b/usr/bin/permission-hardener index a11e6a6..2e1345b 100755 --- a/usr/bin/permission-hardener +++ b/usr/bin/permission-hardener @@ -6,6 +6,8 @@ ## https://forums.whonix.org/t/disable-suid-binaries/7706 ## https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707 +## dpkg-statoverride does not support end-of-options ("--"). + set -o errexit -o nounset -o pipefail exit_code=0