diff options
| author |  Kelvin M. Klann <kmk3.code@protonmail.com> | 2022-10-01 11:23:56 -0300 |
|---|---|---|
| committer | Kelvin M. Klann <kmk3.code@protonmail.com> | 2023-07-14 08:08:47 -0300 |
| commit | 580283d74b4e6cd425960d336cb0a5296ae36a68 (patch) | |
| tree | 828ec892bad07c4ae166637bccdc371e9715d594 /etc/ids.config | |
| parent | Merge pull request #5881 from glitsj16/rssguard (diff) | |
| download | firejail-580283d74b4e6cd425960d336cb0a5296ae36a68.tar.gz firejail-580283d74b4e6cd425960d336cb0a5296ae36a68.tar.zst firejail-580283d74b4e6cd425960d336cb0a5296ae36a68.zip | |
disable-common.inc: blacklist sudo/doas paths in /etc
Commands used to find the relevant paths in /etc:
$ pacman -Qo /etc/* 2>/dev/null | grep sudo | LC_ALL=C sort
/etc/pam.d/ is owned by sudo 1.9.14.p1-1
/etc/sudo.conf is owned by sudo 1.9.14.p1-1
/etc/sudo_logsrvd.conf is owned by sudo 1.9.14.p1-1
/etc/sudoers is owned by sudo 1.9.14.p1-1
/etc/sudoers.d/ is owned by sudo 1.9.14.p1-1
Environment: Artix Linux.
Also, add missing paths sudo/doas to etc/ids.config and jailcheck.
See also commit dbebd71db ("disable-common.inc: blacklist doas binary",
2022-10-05).
Relates to #5385.
Reported-by: Dieter Plaetinck <dieter@plaetinck.be>
Diffstat (limited to 'etc/ids.config')
| -rw-r--r-- | etc/ids.config | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/ids.config b/etc/ids.config index 880ec6ab5..4b75c701c 100644 --- a/etc/ids.config +++ b/etc/ids.config | |||
| @@ -139,6 +139,7 @@ ${HOME}/.local/share/autostart | |||
| 139 | /etc/security | 139 | /etc/security |
| 140 | /etc/selinux | 140 | /etc/selinux |
| 141 | /etc/shadow* | 141 | /etc/shadow* |
| 142 | /etc/sudo*.conf | ||
| 142 | /etc/sudoers* | 143 | /etc/sudoers* |
| 143 | /etc/tripwire | 144 | /etc/tripwire |
| 144 | ${HOME}/.config/firejail | 145 | ${HOME}/.config/firejail |