diff --git a/files/system/usr/share/ublue-os/just/70-secureblue.just b/files/system/usr/share/ublue-os/just/70-secureblue.just index 6437a08..b73edc6 100644 --- a/files/system/usr/share/ublue-os/just/70-secureblue.just +++ b/files/system/usr/share/ublue-os/just/70-secureblue.just @@ -356,7 +356,7 @@ audit-secureblue: local line=$(grep "^${prefix}=" <<< "$permissions" | sed -e "s/^${prefix}=//" -e "s/#.*//") IFS=';' read -r -a list <<< "$line" for p in ${list[@]}; do - if [[ "$p" == "$query" ]]; then + if [[ "$p" =~ ^$query$ ]]; then return fi done @@ -572,6 +572,10 @@ audit-secureblue: status="$STATUS_FAILURE" warnings+=("> $f has x11 access!") fi + if ! hasPermission "$permissions" "LD_PRELOAD" .*"/libhardened_malloc.so"; then + status="$STATUS_FAILURE" + warnings+=("> $f is not using hardened_malloc!") + fi flatpak_test_string="Auditing $f" print_status "$flatpak_test_string" "$status" for warning in "${warnings[@]}"; do