enable kernel mitigations for file spoofing

ProtonAOSP · Jun 7, 2022 · 112cbfc · 112cbfc
1 parent 64935cc
commit 112cbfc
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/rootdir/init.rc b/rootdir/init.rc
@@ -328,6 +328,9 @@ on init
     write /proc/sys/fs/protected_hardlinks 1
     write /proc/sys/fs/protected_symlinks 1
 
+    write /proc/sys/fs/protected_fifos 2
+    write /proc/sys/fs/protected_regular 2
+
     # scheduler tunables
     # Disable auto-scaling of scheduler tunables with hotplug. The tunables
     # will vary across devices in unpredictable ways if allowed to scale with