This commit is contained in:
Patrick Schleizer 2023-10-22 15:40:49 -04:00
parent 7112eac3be
commit a7629b98cf
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
2 changed files with 4 additions and 1 deletions

View File

@ -180,7 +180,7 @@ _tmp() {
_var() { _var() {
mount_folder="$NEWROOT/var" mount_folder="$NEWROOT/var"
## noexec: Not possible. Reason: ## noexec: Not possible. Reason:
## Debian stores executable maintainer scripts in /var/lib/dpkg/info/ folder. ## Debian stores executable maintainer scripts in /var/lib/dpkg/info folder.
intended_mount_options="nosuid,nodev" intended_mount_options="nosuid,nodev"
remount_secure "$@" remount_secure "$@"
} }

View File

@ -9,3 +9,6 @@ security-misc: no-manual-page [usr/bin/pkexec.security-misc]
## Non-ideal but still a good solution. ## Non-ideal but still a good solution.
security-misc: file-in-unusual-dir [var/cache/security-misc/state-files/placeholder] security-misc: file-in-unusual-dir [var/cache/security-misc/state-files/placeholder]
## False-positive. Just a comment mentioning dpkg's folder.
security-misc: uses-dpkg-database-directly [usr/bin/remount-secure]