Skip to content

Commit

Permalink
add /bin/pkexec exactwhitelist for consistency
Browse files Browse the repository at this point in the history
since there is already `/usr/bin/pkexec exactwhitelist`
  • Loading branch information
Patrick Schleizer committed Nov 29, 2020
1 parent fe27483 commit cf07e97
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions etc/permission-hardening.d/30_default.conf
Expand Up @@ -42,7 +42,9 @@
/usr/lib/chromium/chrome-sandbox exactwhitelist

/usr/bin/pkexec exactwhitelist
/bin/pkexec exactwhitelist
/usr/bin/pkexec.security-misc-orig exactwhitelist
/bin/pkexec.security-misc-orig exactwhitelist

## https://forums.whonix.org/t/disable-suid-binaries/7706/61
## Protect from 'chmod -x' (and SUID removal).
Expand Down

0 comments on commit cf07e97

Please sign in to comment.