Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-20 08:44:10 -04:00
Code Issues Projects Releases Packages Wiki Activity

use must manually enable permission-hardening.service

Browse source 
until development finished
This commit is contained in:
Patrick Schleizer 2019-12-20 05:22:59 -05:00
parent fa6f1e1568
commit a135ae9400
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
3 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/systemd/system-preset/50-security-misc.preset
View file

@ -2,3 +2,6 @@
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
disable hide-hardware-info.service disable hide-hardware-info.service
## Disable for now until development finished / tested.
disable permission-hardening.service

4
lib/systemd/system/permission-hardening.service
View file

@ -8,9 +8,7 @@ After=local-fs.target
[Service] [Service]
Type=oneshot Type=oneshot
## Disable for now until development finished / tested. ExecStart=/usr/lib/security-misc/permission-hardening
ExecStart=/bin/true
#ExecStart=/usr/lib/security-misc/permission-hardening
[Install] [Install]
WantedBy=sysinit.target WantedBy=sysinit.target

3
usr/lib/security-misc/permission-hardening
View file

@ -11,8 +11,7 @@ config_file="/etc/permission-hardening.conf"
echo_wrapper() { echo_wrapper() {
echo "run: $@" echo "run: $@"
## TODO "$@"
#"$@"
} }
add_nosuid_statoverride_entry() { add_nosuid_statoverride_entry() {