mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-02-02 20:34:46 +07:00
318ab570aa
split `/etc/permission-hardening.d/30_default.conf` into multiple files `/etc/permission-hardening.d/40_default_whitelist_[...].conf` therefore make it easier to delete any whitelisted SUID binaries
14 lines
564 B
Plaintext
14 lines
564 B
Plaintext
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
|
|
## See the file COPYING for copying conditions.
|
|
|
|
## Please use "/etc/permission-hardening.d/20_user.conf" or
|
|
## "/usr/local/etc/permission-hardening.d/20_user.conf" for your custom
|
|
## configuration. When security-misc is updated, this file may be overwritten.
|
|
|
|
## TODO: research
|
|
## https://github.com/QubesOS/qubes-core-agent-linux/blob/master/qubes-rpc/qfile-unpacker.c
|
|
## match both:
|
|
#/usr/lib/qubes/qfile-unpacker whitelist
|
|
#/lib/qubes/qfile-unpacker
|
|
/qubes/qfile-unpacker matchwhitelist
|