From f70a034da2b4b615855504e7080baf1a7e7b461c Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Fri, 22 Dec 2023 08:31:58 -0500 Subject: [PATCH] exclude hardened malloc from SUID disabler fixes https://github.com/Kicksecure/security-misc/issues/179 --- .../25_default_whitelist_hardened_malloc.conf | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 etc/permission-hardening.d/25_default_whitelist_hardened_malloc.conf diff --git a/etc/permission-hardening.d/25_default_whitelist_hardened_malloc.conf b/etc/permission-hardening.d/25_default_whitelist_hardened_malloc.conf new file mode 100644 index 0000000..4934ff0 --- /dev/null +++ b/etc/permission-hardening.d/25_default_whitelist_hardened_malloc.conf @@ -0,0 +1,9 @@ +## Copyright (C) 2012 - 2023 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + +## Please use "/etc/permission-hardening.d/20_user.conf" or +## "/usr/local/etc/permission-hardening.d/20_user.conf" for your custom +## configuration. When security-misc is updated, this file may be overwritten. + +libhardened_malloc.so matchwhitelist +libhardened_malloc-light.so matchwhitelist