mirror of
https://github.com/Kicksecure/security-misc.git
synced 2024-10-01 08:25:45 -04:00
18 lines
709 B
Plaintext
18 lines
709 B
Plaintext
## Copyright (C) 2012 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
|
|
## See the file COPYING for copying conditions.
|
|
|
|
## Please use "/etc/permission-hardener.d/20_user.conf" or
|
|
## "/usr/local/etc/permission-hardener.d/20_user.conf" for your custom
|
|
## configuration. When security-misc is updated, this file may be overwritten.
|
|
|
|
## https://forums.whonix.org/t/disable-suid-binaries/7706/61
|
|
## Protect from 'chmod -x' (and SUID removal).
|
|
## SUID will be removed below in separate step.
|
|
/bin/mount exactwhitelist
|
|
/usr/bin/mount exactwhitelist
|
|
|
|
## Remove SUID from 'mount' but keep executable.
|
|
## https://forums.whonix.org/t/disable-suid-binaries/7706/61
|
|
/bin/mount 745 root root
|
|
/usr/bin/mount 745 root root
|