scottk/secureblue
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/secureblue.git synced 2026-01-07 20:51:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: additional setuid reduction and removal of unused packages (#388)

Browse Source 
* feat: additional setuid reduction and removal of unused packages

* leave packages but keep suid removal
This commit is contained in:
qoijjj
2024-08-23 00:00:54 -07:00
committed by GitHub
parent c711b3c398
commit c526c770ba
1 changed files with 0 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
files/scripts/removesuid.sh
View File

@@ -50,10 +50,6 @@ whitelist=(
"/usr/lib64/glibc-hwcaps/x86-64-v4/libhardened_malloc.so"
# Requires cap_setgid,cap_setuid if the SUID bit is removed
"/usr/sbin/grub2-set-bootflag"
# See /usr/bin/mount
"/usr/sbin/mount.nfs"
# https://gist.github.com/ok-ryoko/1ff42a805d496cb1ca22e5cdf6ddefb0#why-does-this-binary-need-to-be-suid-root-6
"/usr/sbin/pam_timestamp_check"
)