mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-01-15 03:57:10 -05:00
Restrict sysfs/cpuinfo if the whitelist is disabled
This commit is contained in:
parent
af607d5eb2
commit
f08c03ab21
@ -45,6 +45,7 @@ do
|
|||||||
if [ "${sysfs_whitelist}" = "1" ]; then
|
if [ "${sysfs_whitelist}" = "1" ]; then
|
||||||
create_whitelist sysfs
|
create_whitelist sysfs
|
||||||
else
|
else
|
||||||
|
chmod og-rwx /sys
|
||||||
echo "INFO: The sysfs whitelist is not enabled. Some things may not work properly."
|
echo "INFO: The sysfs whitelist is not enabled. Some things may not work properly."
|
||||||
fi
|
fi
|
||||||
elif [ "${i}" = "/proc/cpuinfo" ]; then
|
elif [ "${i}" = "/proc/cpuinfo" ]; then
|
||||||
@ -52,6 +53,7 @@ do
|
|||||||
if [ "${cpuinfo_whitelist}" = "1" ]; then
|
if [ "${cpuinfo_whitelist}" = "1" ]; then
|
||||||
create_whitelist cpuinfo
|
create_whitelist cpuinfo
|
||||||
else
|
else
|
||||||
|
chmod og-rwx /proc/cpuinfo
|
||||||
echo "INFO: The cpuinfo whitelist is not enabled. Some things may not work properly."
|
echo "INFO: The cpuinfo whitelist is not enabled. Some things may not work properly."
|
||||||
fi
|
fi
|
||||||
else
|
else
|
||||||
|
Loading…
Reference in New Issue
Block a user