mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-25 10:35:32 +07:00
Code Issues Packages Projects Releases Wiki Activity

comment

Browse Source
This commit is contained in:
Patrick Schleizer 2019-12-20 06:33:41 -05:00
parent fb4254547b
commit 36043fe5cc
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
usr/lib/security-misc/permission-hardening
View File

@ -50,6 +50,9 @@ add_nosuid_statoverride_entry() {
new_mode="$existing_mode" new_mode="$existing_mode"
fi fi
## Remove 'others' / 'group' execution ('chmod og-x /path/to/binary') rights for better usability?
## Make binaries such as 'su' fail closed rather than fail open if suid was removed from these?
## Are there suid or guid binaries which are still useful if suid / guid has been removed from these?
## https://forums.whonix.org/t/permission-hardening/8655/10 ## https://forums.whonix.org/t/permission-hardening/8655/10
# if [ "$new_mode" = "755" ]; then # if [ "$new_mode" = "755" ]; then
# new_mode=744 # new_mode=744