Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-23 10:11:00 -05:00
Code Issues Packages Projects Releases Wiki Activity

LANG=C str_replace

Browse Source
This commit is contained in:
Patrick Schleizer 2021-08-22 05:23:24 -04:00
parent ef2b067c03
commit db43cedcfd
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
3 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
etc/default/grub.d/40_kernel_hardening.cfg
View File

@ -62,9 +62,9 @@ GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX extra_latent_entropy"
## Prevent kernel info leaks in console during boot.
## https://phabricator.whonix.org/T950
## str_replace is provided by package helper-scripts.
## LANG=C str_replace is provided by package helper-scripts.
## Remove "quiet" from GRUB_CMDLINE_LINUX_DEFAULT because "quiet" must be first.
GRUB_CMDLINE_LINUX_DEFAULT="$(echo "$GRUB_CMDLINE_LINUX_DEFAULT" | str_replace "quiet" "")"
GRUB_CMDLINE_LINUX_DEFAULT="$(echo "$GRUB_CMDLINE_LINUX_DEFAULT" | LANG=C str_replace "quiet" "")"
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX quiet loglevel=0"
## Restrict access to debugfs since it can contain a lot of sensitive information.

4
usr/libexec/security-misc/pam-info
View File

@ -89,7 +89,7 @@ fi
## 2021-08-10 16:26:54 RHOST V
pam_faillock_output_first_line="$(echo "$pam_faillock_output" | head -1)"
user_name="$(echo "$pam_faillock_output_first_line" | str_replace ":" "")"
user_name="$(echo "$pam_faillock_output_first_line" | LANG=C str_replace ":" "")"
pam_faillock_output_count="$(echo "$pam_faillock_output" | wc -l)"
@ -112,7 +112,7 @@ deny=3
if test -f /etc/security/faillock.conf ; then
deny_line=$(grep --invert-match "#" /etc/security/faillock.conf | grep "deny =")
deny="$(echo "$deny_line" | str_replace "=" "" | str_replace "deny" "" | str_replace " " "")"
deny="$(echo "$deny_line" | LANG=C str_replace "=" "" | LANG=C str_replace "deny" "" | LANG=C str_replace " " "")"
## Example:
#deny=50
fi

4
usr/libexec/security-misc/remount-secure
View File

@ -55,8 +55,8 @@ remount_secure() {
## example status_file_full_path:
## /var/run/remount-secure/_home
## str_replace is provided by package helper-scripts.
mount_folder="$(echo "${status_file_name}" | str_replace "_" "/")"
## LANG=C str_replace is provided by package helper-scripts.
mount_folder="$(echo "${status_file_name}" | LANG=C str_replace "_" "/")"
## example mount_folder:
## /home