Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-03-13 04:06:33 -04:00
Code Issues Packages Projects Releases Wiki Activity

De-corrupt the new_mode permission-hardener statoverride database too

Browse Source
This commit is contained in:
Aaron Rainbolt 2025-01-14 19:25:15 -06:00
parent 396372c129
commit a0f81958df
No known key found for this signature in database
GPG Key ID: A709160D73C79109
2 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
debian/security-misc.postinst vendored
View File

@ -49,7 +49,9 @@ migrate_permission_hardener_state() {
mkdir --parents '/var/lib/security-misc/do_once' mkdir --parents '/var/lib/security-misc/do_once'
mkdir --parents '/var/lib/permission-hardener-v2/existing_mode' mkdir --parents '/var/lib/permission-hardener-v2/existing_mode'
mkdir --parents '/var/lib/permission-hardener-v2/new_mode'
cp --verbose '/usr/share/security-misc/permission-hardener-existing-mode-legacy-hardcoded' '/var/lib/permission-hardener-v2/existing_mode/statoverride' cp --verbose '/usr/share/security-misc/permission-hardener-existing-mode-legacy-hardcoded' '/var/lib/permission-hardener-v2/existing_mode/statoverride'
cp --verbose '/usr/share/security-misc/permission-hardener-new-mode-legacy-hardcoded' '/var/lib/permission-hardener-v2/new_mode/statoverride'
touch "/var/lib/security-misc/do_once/${FUNCNAME[0]}_version_1" touch "/var/lib/security-misc/do_once/${FUNCNAME[0]}_version_1"
} }

23
usr/share/security-misc/permission-hardener-new-mode-legacy-hardcoded Normal file
View File

@ -0,0 +1,23 @@
root root 700 /etc/cron.monthly
root root 700 /etc/sudoers.d
root shadow 744 /usr/bin/expiry
root root 755 /usr/bin/umount
root root 744 /usr/bin/gpasswd
root root 700 /usr/lib/modules
root root 744 /usr/bin/newgrp
root root 700 /etc/cron.weekly
root root 744 /usr/bin/su
root root 700 /etc/cron.daily
root root 644 /etc/motd
root _ssh 744 /usr/bin/ssh-agent
root root 700 /boot
root shadow 744 /usr/bin/chage
root root 744 /usr/lib/openssh/ssh-keysign
root root 744 /usr/bin/chsh
root root 755 /usr/bin/passwd
root root 744 /usr/bin/chfn
root root 600 /etc/permission-hardener.d
root root 700 /usr/src
root root 755 /usr/bin/mount
root root 644 /etc/issue
root root 700 /etc/cron.d