mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-07-14 01:42:01 +07:00
Code Issues Packages Projects Releases Wiki Activity

proc-hidepid.service add gid=proc

Browse Source 
This allows users that are a member of the `proc` group to be excluded from `hidepid` protections.

https://github.com/Kicksecure/security-misc/issues/208
This commit is contained in:
Patrick Schleizer
2024-03-10 08:44:53 -04:00
parent 0f0d9ca2a4
commit a5206bde33
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
usr/lib/systemd/system/proc-hidepid.service
View File

@ -12,7 +12,7 @@ After=local-fs.target
[Service] [Service]
Type=oneshot Type=oneshot
ExecStart=/bin/mount -o remount,nosuid,nodev,noexec,hidepid=2 /proc ExecStart=/bin/mount -o remount,nosuid,nodev,noexec,hidepid=2,gid=proc /proc
RemainAfterExit=yes RemainAfterExit=yes
[Install] [Install]