From a37da1c96880b14a8271712801e6da3d3ea766eb Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Fri, 24 Jan 2020 04:39:06 -0500 Subject: [PATCH] add digits to drop-in file names --- debian/control | 4 ++-- debian/security-misc.maintscript | 3 +++ .../{disable-coredumps.conf => 30_security-misc.conf} | 0 .../{disable-coredumps.conf => 30_security-misc.conf} | 0 4 files changed, 5 insertions(+), 2 deletions(-) rename etc/security/limits.d/{disable-coredumps.conf => 30_security-misc.conf} (100%) rename lib/systemd/coredump.conf.d/{disable-coredumps.conf => 30_security-misc.conf} (100%) diff --git a/debian/control b/debian/control index 63c0f64..2444db6 100644 --- a/debian/control +++ b/debian/control @@ -79,9 +79,9 @@ Description: enhances misc security settings . * Coredumps are disabled as they may contain important information such as encryption keys or passwords. - /etc/security/limits.d/disable-coredumps.conf + /etc/security/limits.d/30_security-misc.conf /etc/sysctl.d/security-misc.conf - /lib/systemd/coredump.conf.d/disable-coredumps.conf + /lib/systemd/coredump.conf.d/30_security-misc.conf . * The thunderbolt and firewire kernel modules are blacklisted as they can be used for DMA (Direct Memory Access) attacks. diff --git a/debian/security-misc.maintscript b/debian/security-misc.maintscript index a2aa848..32ea40a 100644 --- a/debian/security-misc.maintscript +++ b/debian/security-misc.maintscript @@ -32,3 +32,6 @@ rm_conffile /etc/modprobe.d/vivid.conf rm_conffile /etc/modprobe.d/blacklist-dma.conf rm_conffile /etc/modprobe.d/msr.conf rm_conffile /etc/modprobe.d/30_nf_conntrack_helper_disable.conf + +## renamed to /etc/security/limits.d/30_security-misc.conf +rm_conffile /etc/security/limits.d/disable-coredumps.conf diff --git a/etc/security/limits.d/disable-coredumps.conf b/etc/security/limits.d/30_security-misc.conf similarity index 100% rename from etc/security/limits.d/disable-coredumps.conf rename to etc/security/limits.d/30_security-misc.conf diff --git a/lib/systemd/coredump.conf.d/disable-coredumps.conf b/lib/systemd/coredump.conf.d/30_security-misc.conf similarity index 100% rename from lib/systemd/coredump.conf.d/disable-coredumps.conf rename to lib/systemd/coredump.conf.d/30_security-misc.conf