use must manually enable permission-hardening.service

until development finished
2024-12-28 13:59:23 -05:00 · 2019-12-20 05:22:59 -05:00 · 2019-12-20 05:22:59 -05:00 · a135ae9400
commit a135ae9400
parent fa6f1e1568
3 changed files with 5 additions and 5 deletions
--- a/lib/systemd/system-preset/50-security-misc.preset
+++ b/lib/systemd/system-preset/50-security-misc.preset
@ -2,3 +2,6 @@
 ## See the file COPYING for copying conditions.

 disable hide-hardware-info.service
+
+## Disable for now until development finished / tested.
+disable permission-hardening.service
--- a/lib/systemd/system/permission-hardening.service
+++ b/lib/systemd/system/permission-hardening.service
@ -8,9 +8,7 @@ After=local-fs.target

 [Service]
 Type=oneshot
-## Disable for now until development finished / tested.
-ExecStart=/bin/true
-#ExecStart=/usr/lib/security-misc/permission-hardening
+ExecStart=/usr/lib/security-misc/permission-hardening

 [Install]
 WantedBy=sysinit.target
--- a/usr/lib/security-misc/permission-hardening
+++ b/usr/lib/security-misc/permission-hardening
@ -11,8 +11,7 @@ config_file="/etc/permission-hardening.conf"

 echo_wrapper() {
   echo "run: $@"
-   ## TODO
-   #"$@"
+   "$@"
 }

 add_nosuid_statoverride_entry() {