mirror of
https://github.com/Kicksecure/security-misc.git
synced 2024-12-22 20:43:36 +07:00
README
This commit is contained in:
parent
3ba8fe586e
commit
0d78ecaee3
@ -436,8 +436,8 @@ include but are not limited to:
|
||||
##### permission-hardener #####
|
||||
|
||||
`permission-hardener` removes SUID / SGID bits from non-essential binaries as
|
||||
these are often used in privilege escalation attacks. It runs at package
|
||||
installation and upgrade time.
|
||||
these are often used in privilege escalation attacks. It is enabled by default
|
||||
and applied at security-misc package installation and upgrade time.
|
||||
|
||||
There is also an optional systemd unit which does the same at boot time that
|
||||
can be enabled by running `systemctl enable permission-hardener.service` as
|
||||
|
Loading…
Reference in New Issue
Block a user