brl/citadel
1
0
Fork 2
Code Issues Pull Requests 2 Packages Projects Releases Wiki Activity

removed grsec sysctl

Browse Source
This commit is contained in:
Bruce Leidl 2019-04-06 16:14:23 -04:00
parent 633bdba60d
commit dc38e853b5
2 changed files with 0 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
meta-citadel/recipes-initrd/citadel-initramfs/citadel-initramfs.bb
View File

@ -13,7 +13,6 @@ SRC_URI = "\
file://citadel-rootfs-mount.service \ file://citadel-rootfs-mount.service \
file://citadel-rootfs-setup.service \ file://citadel-rootfs-setup.service \
file://citadel-install-rootfs-mount.service \ file://citadel-install-rootfs-mount.service \
file://99-grsec.conf \
" "
S = "${WORKDIR}" S = "${WORKDIR}"
@ -38,9 +37,6 @@ do_install() {
ln -s ../citadel-rootfs-setup.service ${D}${systemd_system_unitdir}/sysinit.target.wants/citadel-rootfs-setup.service ln -s ../citadel-rootfs-setup.service ${D}${systemd_system_unitdir}/sysinit.target.wants/citadel-rootfs-setup.service
ln -s ../citadel-install-rootfs-mount.service ${D}${systemd_system_unitdir}/sysinit.target.wants/citadel-install-rootfs-mount.service ln -s ../citadel-install-rootfs-mount.service ${D}${systemd_system_unitdir}/sysinit.target.wants/citadel-install-rootfs-mount.service
install -d ${D}${libdir}/sysctl.d/
install -m 0644 ${WORKDIR}/99-grsec.conf ${D}${libdir}/sysctl.d/
install -d ${D}${sysconfdir} install -d ${D}${sysconfdir}
install -m 644 ${WORKDIR}/initrd-release ${D}${sysconfdir} install -m 644 ${WORKDIR}/initrd-release ${D}${sysconfdir}
install -m 644 ${WORKDIR}/crypttab ${D}${sysconfdir} install -m 644 ${WORKDIR}/crypttab ${D}${sysconfdir}

9
meta-citadel/recipes-initrd/citadel-initramfs/files/99-grsec.conf
View File

@ -1,9 +0,0 @@
# disable some pax and grsecurity features so that debootstrap will work
# this should be removed later
kernel.grsecurity.chroot_caps = 0
kernel.grsecurity.chroot_deny_chmod = 0
kernel.grsecurity.chroot_deny_mknod = 0
kernel.grsecurity.chroot_deny_mount = 0
kernel.pax.softmode = 1