mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-23 01:03:35 +07:00
Code Issues Packages Projects Releases Wiki Activity

refactoring

Browse Source
This commit is contained in:
Patrick Schleizer 2024-10-28 05:06:05 -04:00
parent d00235897d
commit fdd1f4b7f8
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 17 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
usr/libexec/security-misc/hide-hardware-info
View File

@ -17,21 +17,25 @@ run_cmd_whitelist() {
echo "$0: INFO: START"
sysfs_whitelist=1
cpuinfo_whitelist=1
default_variables_set() {
sysfs_whitelist=1
cpuinfo_whitelist=1
sysfs=1
sysfs=1
## https://www.kicksecure.com/wiki/Security-misc#selinux
selinux=0
## https://www.kicksecure.com/wiki/Security-misc#selinux
selinux=0
}
shopt -s nullglob
## Allows for disabling the whitelist.
for i in /usr/local/etc/hide-hardware-info.d/*.conf /etc/hide-hardware-info.d/*.conf ; do
parse_configuration() {
## Allows for disabling the whitelist.
for i in /usr/local/etc/hide-hardware-info.d/*.conf /etc/hide-hardware-info.d/*.conf ; do
bash -n "${i}"
source "${i}"
done
done
}
create_whitelist() {
if [ "${1}" = "sysfs" ]; then
@ -55,6 +59,9 @@ create_whitelist() {
fi
}
default_variables_set
parse_configuration
## sysfs and debugfs expose a lot of information
## that should not be accessible by an unprivileged
## user which includes hardware info, debug info and