helium/meta-helium
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix hidepid

Browse Source
This commit is contained in:
Grzegorz Kowalski 2024-03-12 19:06:05 +01:00
parent 0e8678e51b
commit cb86500968
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
recipes-hardening/hidepid/hidepid/hidepid.sh
View File

@ -5,9 +5,7 @@
# additionaly harden /proc a little bit more # additionaly harden /proc a little bit more
PROCOPTS="rw,nosuid,nodev,noexec,relatime,hidepid=2" PROCOPTS="rw,nosuid,nodev,noexec,relatime,hidepid=2"
if mount -o remount,$PROCOPTS /proc; then if mount -o remount,$PROCOPTS /proc; then
success() success; echo " /proc remouted with $PROCOPTS"
echo " /proc remouted with $PROCOPTS"
else else
failure() failure; echo " /proc not remounted, hidepid not enabled"
echo "/proc not remounted, hidepid not enabled"
fi fi

8
recipes-hardening/hidepid/hidepid_1.0.bb
View File

@ -5,9 +5,11 @@ LIC_FILES_CHKSUM = "file://${COREBASE}/meta/files/common-licenses/MIT;md5=0835ad
SRC_URI = "file://hidepid.sh" SRC_URI = "file://hidepid.sh"
inherit allarch inherit allarch
DEPENDS = "update-rc.d-native"
INITSCRIPT_NAME = "hidepid"
INITSCRIPT_PARAMS = "start 10 S ."
inherit update-rc.d
do_install() { do_install() {
install -D -m 0755 ${WORKDIR}/hidepid.sh ${D}${sysconfdir}/init.d/hidepid.sh install -D -m 0755 ${WORKDIR}/hidepid.sh ${D}${sysconfdir}/init.d/hidepid
update-rc.d -r ${D} hidepid.sh start 10 S .
} }