Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-20 10:24:10 -04:00
Code Issues Projects Releases Packages Wiki Activity

Revert "remove no longer required remount-service systemd unit"

Browse source 
This reverts commit 479ab61a1d.

https://github.com/Kicksecure/security-misc/pull/152
This commit is contained in:
Patrick Schleizer 2023-11-05 20:49:36 -05:00
parent 24b4d59ce4
commit 95d1cfb4a0
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
2 changed files with 24 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/systemd/system-preset/50-security-misc.preset
View file

@ -7,5 +7,8 @@ disable hide-hardware-info.service
## Disable for now until development finished / tested. ## Disable for now until development finished / tested.
disable permission-hardening.service disable permission-hardening.service
## Disable for now until development finished / tested.
disable remount-secure.service
## Disable due to pkexec issues. ## Disable due to pkexec issues.
disable proc-hidepid.service disable proc-hidepid.service

21
lib/systemd/system/remount-secure.service Normal file
View file

@ -0,0 +1,21 @@
## Copyright (C) 2019 - 2023 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[Unit]
Description=remount /home /tmp /dev/shm /run with nosuid,nodev (default) and noexec (opt-in)
Documentation=https://github.com/Kicksecure/security-misc
DefaultDependencies=no
Before=sysinit.target
Requires=local-fs.target
After=local-fs.target
After=qubes-sysinit.service
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/usr/bin/remount-secure
[Install]
WantedBy=sysinit.target