security-misc/usr/share
Patrick Schleizer c192644ee3
security-misc /usr/share/pam-configs/permission-lockdown-security-misc is no longer required, removed.
Thereby fix apparmor issue.

> Dec 08 09:47:50 host audit[3232]: AVC apparmor="DENIED" operation="exec" profile="/usr/bin/whonixcheck" name="/usr/lib/security-misc/permission-lockdown" pid=3232 comm="sudo" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
> Dec 08 09:47:50 host sudo[3232]: pam_exec(sudo:session): execve(/usr/lib/security-misc/permission-lockdown,...) failed: Permission denied

It is no longer required, because...

existing linux user accounts:

* Get permission lock down because security-misc `debian/security-misc.postinst` calls `/usr/lib/security-misc/permission-lockdown`.

new linux user accounts (created at first boot):

* security-misc `/usr/share/pam-configs/mkhomedir-security-misc` pam mkhomedir sets secure permissions using `umask=027`.
2019-12-08 05:21:35 -05:00
..
glib-2.0/schemas disable previews in nautilus by default for better security 2017-02-19 22:25:28 +00:00
lintian/overrides fix lintian warning 2019-11-09 12:55:00 +00:00
pam-configs security-misc /usr/share/pam-configs/permission-lockdown-security-misc is no longer required, removed. 2019-12-08 05:21:35 -05:00
security-misc copyright 2019-10-31 11:19:44 -04:00