mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-23 01:33:35 +07:00
Code Issues Packages Projects Releases Wiki Activity
15d0ee1008
security-misc/debian/security-misc.postinst

77 lines
2.2 KiB
Plaintext
Raw Normal View History

disable previews in nautilus by default for better security copied solution by @unman https://github.com/QubesOS/qubes-issues/issues/1108 https://github.com/QubesOS/qubes-core-agent-linux/pull/39 https://phabricator.whonix.org/T500
2017-02-20 05:25:28 +07:00
#!/bin/bash
Update copyright
2023-03-30 13:08:47 +07:00
## Copyright (C) 2012 - 2023 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
disable previews in nautilus by default for better security copied solution by @unman https://github.com/QubesOS/qubes-issues/issues/1108 https://github.com/QubesOS/qubes-core-agent-linux/pull/39 https://phabricator.whonix.org/T500
2017-02-20 05:25:28 +07:00
## See the file COPYING for copying conditions.
move /usr/lib/helper-scripts and /usr/lib/curl-scripts to /usr/libexec/helper-scripts as per lintian FHS
2021-08-03 23:48:57 +07:00
if [ -f /usr/libexec/helper-scripts/pre.bsh ]; then
source /usr/libexec/helper-scripts/pre.bsh
disable previews in nautilus by default for better security copied solution by @unman https://github.com/QubesOS/qubes-issues/issues/1108 https://github.com/QubesOS/qubes-core-agent-linux/pull/39 https://phabricator.whonix.org/T500
2017-02-20 05:25:28 +07:00
fi
set -e
true "
#####################################################################
"$@"
2017-03-06 22:00:33 +07:00
## INFO: BEGIN: $DPKG_MAINTSCRIPT_PACKAGE $DPKG_MAINTSCRIPT_NAME $@
disable previews in nautilus by default for better security copied solution by @unman https://github.com/QubesOS/qubes-issues/issues/1108 https://github.com/QubesOS/qubes-core-agent-linux/pull/39 https://phabricator.whonix.org/T500
2017-02-20 05:25:28 +07:00
#####################################################################
"
case "$1" in
configure)
import from anon-gpg-conf
2020-04-06 20:25:45 +07:00
if [ -d /etc/skel/.gnupg ]; then
## Lintian warns against use of chmod --recursive.
chmod 700 /etc/skel/.gnupg
fi
comment
2019-12-08 13:59:55 +07:00
## /usr/share/glib-2.0/schemas/30_security-misc.gschema.override
override glib-compile-schemas with || true in postinst https://phabricator.whonix.org/T500
2017-02-20 05:32:04 +07:00
glib-compile-schemas /usr/share/glib-2.0/schemas || true
disable previews in nautilus by default for better security copied solution by @unman https://github.com/QubesOS/qubes-issues/issues/1108 https://github.com/QubesOS/qubes-core-agent-linux/pull/39 https://phabricator.whonix.org/T500
2017-02-20 05:25:28 +07:00
;;
abort-upgrade|abort-remove|abort-deconfigure)
;;
port LKRG compatibility settings automation for VirtualBox hosts from systemd to dpkg trigger
2021-08-02 00:11:18 +07:00
triggered)
echo "INFO: triggered $DPKG_MAINTSCRIPT_PACKAGE: '$DPKG_MAINTSCRIPT_PACKAGE' $DPKG_MAINTSCRIPT_PACKAGE DPKG_MAINTSCRIPT_NAME: '$DPKG_MAINTSCRIPT_NAME' $\@: '$@' 2: '$2'"
/usr/share/security-misc/lkrg/lkrg-virtualbox || true
postinst: Don't fail if mmap-rnd-bits fails
2023-04-22 11:08:20 +07:00
/usr/libexec/security-misc/mmap-rnd-bits || true
port LKRG compatibility settings automation for VirtualBox hosts from systemd to dpkg trigger
2021-08-02 00:11:18 +07:00
exit 0
;;
disable previews in nautilus by default for better security copied solution by @unman https://github.com/QubesOS/qubes-issues/issues/1108 https://github.com/QubesOS/qubes-core-agent-linux/pull/39 https://phabricator.whonix.org/T500
2017-02-20 05:25:28 +07:00
*)
echo "$DPKG_MAINTSCRIPT_NAME called with unknown argument \`$1'" >&2
exit 1
;;
esac
remove modifying to /etc/pam.d directly (unrelased) config-package-dev displace /etc/securetty remove trailing spaces https://forums.whonix.org/t/restrict-root-access/7658/31
2019-07-13 18:41:37 +07:00
pam-auth-update --package
Due to error: Jul 07 20:35:39 host sudo[16090]: PAM unable to dlopen(pam_cgfs.so): /lib/security/pam_cgfs.so: cannot open shared object file: No such file or directory Jul 07 20:35:39 host sudo[16090]: PAM adding faulty module: pam_cgfs.so run: pam-auth-update --package from Debian maintainer scripts
2019-07-08 03:51:40 +07:00
move /usr/lib/security-misc to /usr/libexec/security-misc as per lintian FHS
2021-08-03 23:56:31 +07:00
/usr/libexec/security-misc/permission-lockdown
Removes read, write and execute access for others for all users who have home folders under folder /home by running for example "chmod o-rwx /home/user" during package installation or upgrade. This will be done only once per folder in folder /home so users who wish to relax file permissions are free to do so. This is to protect previously created files in user home folder which were previously created with lax file permissions prior installation of this package.
2019-07-13 23:20:14 +07:00
run update-grub from postinst so /etc/default/grub.d changes take effect
2019-09-07 12:44:23 +07:00
## https://phabricator.whonix.org/T377
## Debian has no update-grub trigger yet:
## https://bugs.debian.org/481542
if command -v update-grub >/dev/null 2>&1; then
update-grub || \
echo "$DPKG_MAINTSCRIPT_PACKAGE $DPKG_MAINTSCRIPT_NAME ERROR: Running \
'update-grub' failed with exit code $?. $DPKG_MAINTSCRIPT_PACKAGE is most \
likely only the trigger, not the cause. Unless you know this is not an issue, \
you should fix running 'update-grub', otherwise your system might no longer \
boot." >&2
fi
vm.mmap_rnd_bits: Fix ppc64le Probably fixes a bunch of other non-x86_64 arches too.
2023-03-24 19:32:58 +07:00
/usr/libexec/security-misc/mmap-rnd-bits
disable previews in nautilus by default for better security copied solution by @unman https://github.com/QubesOS/qubes-issues/issues/1108 https://github.com/QubesOS/qubes-core-agent-linux/pull/39 https://phabricator.whonix.org/T500
2017-02-20 05:25:28 +07:00
true "INFO: debhelper beginning here."
#DEBHELPER#
true "INFO: Done with debhelper."
true "
#####################################################################
"$@"
2017-03-06 22:00:33 +07:00
## INFO: END : $DPKG_MAINTSCRIPT_PACKAGE $DPKG_MAINTSCRIPT_NAME $@
disable previews in nautilus by default for better security copied solution by @unman https://github.com/QubesOS/qubes-issues/issues/1108 https://github.com/QubesOS/qubes-core-agent-linux/pull/39 https://phabricator.whonix.org/T500
2017-02-20 05:25:28 +07:00
#####################################################################
"
## Explicitly "exit 0", so eventually trapped errors can be ignored.
exit 0
Reference in New Issue Copy Permalink