From 580283d74b4e6cd425960d336cb0a5296ae36a68 Mon Sep 17 00:00:00 2001 From: "Kelvin M. Klann" Date: Sat, 1 Oct 2022 11:23:56 -0300 Subject: disable-common.inc: blacklist sudo/doas paths in /etc Commands used to find the relevant paths in /etc: $ pacman -Qo /etc/* 2>/dev/null | grep sudo | LC_ALL=C sort /etc/pam.d/ is owned by sudo 1.9.14.p1-1 /etc/sudo.conf is owned by sudo 1.9.14.p1-1 /etc/sudo_logsrvd.conf is owned by sudo 1.9.14.p1-1 /etc/sudoers is owned by sudo 1.9.14.p1-1 /etc/sudoers.d/ is owned by sudo 1.9.14.p1-1 Environment: Artix Linux. Also, add missing paths sudo/doas to etc/ids.config and jailcheck. See also commit dbebd71db ("disable-common.inc: blacklist doas binary", 2022-10-05). Relates to #5385. Reported-by: Dieter Plaetinck --- src/jailcheck/main.c | 1 + 1 file changed, 1 insertion(+) (limited to 'src/jailcheck') diff --git a/src/jailcheck/main.c b/src/jailcheck/main.c index 27da309ea..93d334c7a 100644 --- a/src/jailcheck/main.c +++ b/src/jailcheck/main.c @@ -120,6 +120,7 @@ int main(int argc, char **argv) { // basic sysfiles sysfiles_setup("/etc/shadow"); sysfiles_setup("/etc/gshadow"); + sysfiles_setup("/usr/bin/doas"); sysfiles_setup("/usr/bin/mount"); sysfiles_setup("/usr/bin/su"); sysfiles_setup("/usr/bin/ksu"); -- cgit v1.2.3-54-g00ecf