mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-22 02:17:04 +07:00
Code Issues Packages Projects Releases Wiki Activity

When using systemd-nspawn (chroot) then login requires console 'console' to be permitted.

Browse Source
This commit is contained in:
Patrick Schleizer 2020-03-31 07:08:25 -04:00
parent a369a0a94d
commit 814f613a2f
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
etc/security/access-security-misc.conf
View File

@ -18,7 +18,8 @@
## Allow members of group 'console' to use tty1 to tty7 and pts/0 to pts/9 and hvc0 to hvc9.
## Qubes has 'pts/0' when for example running "sudo" from a terminal emulator.
## Qubes uses 'hvc0' when using in dom0 "sudo xl console vm-name".
+:console:tty1 tty2 tty3 tty4 tty5 tty6 tty7 pts/0 pts/1 pts/2 pts/3 pts/4 pts/5 pts/6 pts/7 pts/8 pts/9 hvc0 hvc1 hvc2 hvc3 hvc4 hvc5 hvc6 hvc7 hvc8 hvc9
## When using systemd-nspawn (chroot) then `login` requires console 'console' to be permitted.
+:console:console tty1 tty2 tty3 tty4 tty5 tty6 tty7 pts/0 pts/1 pts/2 pts/3 pts/4 pts/5 pts/6 pts/7 pts/8 pts/9 hvc0 hvc1 hvc2 hvc3 hvc4 hvc5 hvc6 hvc7 hvc8 hvc9
## Everyone else except members of group 'console-unrestricted'
## are restricted from everything else.