mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-22 20:33:35 +07:00
Code Issues Packages Projects Releases Wiki Activity

fix permission-hardener issue "Removing capabilities failed. File: '/bin/ping'"

Browse Source 
no longer user end-of-options marker (`--`) for `setcap`
since setcap does not support it

Fixes https://github.com/QubesOS/qubes-issues/issues/9569

https://forums.whonix.org/t/permission-hardener-error/20719
This commit is contained in:
Patrick Schleizer 2024-11-10 06:29:17 -05:00
parent 3af2684134
commit 5bd0a277bf
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
usr/bin/permission-hardener
View File

@ -539,7 +539,12 @@ set_file_perms() {
## The value of the capability argument is not permitted for a file. Or
## the file is not a regular (non-symlink) file
## Therefore use echo_wrapper_ignore.
echo_wrapper_ignore verbose setcap -r -- "${fso}"
##
## NOTE: setcap does not support End-of-Options Marker ('--') yet.
## setcap bug report:
## setcap Command Does Not Support End-of-Options Marker ('--')
## https://bugzilla.kernel.org/show_bug.cgi?id=219487
echo_wrapper_ignore verbose setcap -r "${fso}"
getcap_output="$(getcap -- "${fso}")"
if test -n "${getcap_output}"; then
exit_code=205