Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-08-02 23:46:14 -04:00
Code Issues Projects Releases Packages Wiki Activity

usrmerge

Browse source
This commit is contained in:
Patrick Schleizer 2025-01-20 06:28:16 -05:00
parent 8ff5f3b221
commit df9d058ed9
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
4 changed files with 1 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

1
usr/lib/permission-hardener.d/25_default_whitelist_passwd.conf
View file

@ -12,5 +12,4 @@
#
# See also: https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener#passwd
/usr/bin/passwd exactwhitelist
/bin/passwd exactwhitelist
/usr/bin/passwd 0755 root root

2
usr/lib/permission-hardener.d/25_default_whitelist_ssh.conf
View file

@ -12,4 +12,4 @@
## SSH, and is likely rarely used, thus this should be safe to disable.
#ssh-agent matchwhitelist
#ssh-keysign matchwhitelist
#/lib/openssh matchwhitelist
#/usr/lib/openssh matchwhitelist

1
usr/lib/permission-hardener.d/25_default_whitelist_unix_chkpwd.conf
View file

@ -8,4 +8,3 @@
## required for performing password validation from unprivileged user
## processes such as KScreenLocker's unlock prompt
/usr/sbin/unix_chkpwd exactwhitelist
/sbin/unix_chkpwd exactwhitelist

1
usr/lib/permission-hardener.d/25_default_whitelist_virtualbox.conf
View file

@ -7,7 +7,6 @@
## TODO: research
/usr/lib/virtualbox/ matchwhitelist
/lib/virtualbox/ matchwhitelist
VirtualBoxVM matchwhitelist
VBoxSDL matchwhitelist
VBoxNetNAT matchwhitelist