cristiancmoises
/
zero
mirror of https://codeberg.org/anemofilia/zero
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

buer: privilege: Update network privileged programs to make use only of cap_net_raw=ep instead of setuid

impermanence
Luis Guilherme Coelho 2024-10-20 21:02:54 -03:00
parent 75e6ee37dc
commit ce785d832c
No known key found for this signature in database
GPG Key ID: 1F2E76ACE3F531C8
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
operating-systems/buer/privilege.scm
View File

@ -48,7 +48,7 @@
(define network (define network
(list (privileged-program (list (privileged-program
(program (file-append inetutils "/bin/ping")) (program (file-append inetutils "/bin/ping"))
(setuid? #t)) (capabilities "cap_net_raw=ep"))
(privileged-program (privileged-program
(program (file-append inetutils "/bin/ping6")) (program (file-append inetutils "/bin/ping6"))
(setuid? #t)))) (capabilities "cap_net_raw=ep"))))