no longer set sysctl fs.binfmt_misc.status=0 /

no longer disallow registering interpreters for miscellaneous binary formats

causing file/folder permissions issue `d????????? ? ? ? ?            ? .`

Firefox no longer starting (probably not not a Firefox issue)

https://github.com/Kicksecure/security-misc/issues/267
This commit is contained in:
Patrick Schleizer 2024-08-28 06:49:50 -04:00
parent 463aa58f28
commit f70fe308a9
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
2 changed files with 6 additions and 2 deletions

View File

@ -69,8 +69,9 @@ User space:
- Increase the maximum number of memory map areas a process is able to utilize.
- Disallow registering interpreters for various (miscellaneous) binary formats based
- Optional - Disallow registering interpreters for various (miscellaneous) binary formats based
on a magic number or their file extension to prevent unintended code execution.
See issue: https://github.com/Kicksecure/security-misc/issues/267
Core dumps:

View File

@ -304,7 +304,10 @@ vm.max_map_count=1048576
## KSPP=yes
## KSPP does not set CONFIG_BINFMT_MISC.
##
fs.binfmt_misc.status=0
## This is disabled by default due to file/folder permission issues:
## https://github.com/Kicksecure/security-misc/issues/267
##
#fs.binfmt_misc.status=0
## 3. Core Dumps:
##