scottk/secureblue
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/secureblue.git synced 2025-11-09 16:26:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: replace SUID root with capabilities where possible (#303)

Browse Source
This commit is contained in:
qoijjj
2024-06-29 10:34:06 -07:00
committed by GitHub
parent f6d8037b26
commit bc325cca6d
5 changed files with 119 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
config/files/usr/lib/systemd/system/setcapsforunsuidbinaries.service Normal file
View File

@@ -0,0 +1,13 @@
[Unit]
Description=Set caps for suid-removed binaries
After=local-fs.target sysinit.target
DefaultDependencies=no
Before=graphical-session-pre.target
[Service]
Type=oneshot
ExecStart=/usr/bin/setcapsforunsuidbinaries
RemainAfterExit=yes
[Install]
WantedBy=multi-user.target