mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-24 01:36:33 +07:00
Code Issues Packages Projects Releases Wiki Activity

update permission-hardener.service

Browse Source 
Which is now only an additional opt-in systemd unit,
because permission-hardener is run by default at security-misc
package installation time.

https://github.com/Kicksecure/security-misc/pull/181
This commit is contained in:
Patrick Schleizer 2024-01-16 09:23:54 -05:00
parent 186f6015da
commit 3ba8fe586e
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/systemd/system/permission-hardener.service
View File

@ -2,7 +2,7 @@
## See the file COPYING for copying conditions.
[Unit]
Description=SUID, SGID, Capability and File Permission Hardening
Description=Permission Hardener at Boot Time (opt-in in addition to security-misc package installation time hardening)
Documentation=https://github.com/Kicksecure/security-misc
DefaultDependencies=no
@ -13,7 +13,7 @@ After=local-fs.target
[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=permission-hardener
ExecStart=permission-hardener enable
[Install]
WantedBy=sysinit.target

2
usr/bin/permission-hardener
View File

@ -616,7 +616,7 @@ spare() {
To remove all:
$0 disable all
This change might not be permanent (because of the permission-hardener.service systemd unit). For full instructions, see:
This change might not be permanent. For full instructions, see:
https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener
To view list of changed by SUID Disabler and Permission Hardener: