LadybirdBrowser/ladybird
1
1
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2024-09-20 09:49:15 +03:00
Code Issues Packages Projects Releases Wiki Activity

Build: Lock down the /mod and /boot directories

Browse Source 
Make these directories accessible to root only. Unprivileged users have
no need to look at the kernel binary or kernel modules.
This commit is contained in:
Andreas Kling 2020-01-04 11:12:59 +01:00
parent 2d244a70a1
commit 4398eec03c
Notes: sideshowbarker 2024-07-19 10:23:09 +09:00 
Author: https://github.com/awesomekling
Commit: https://github.com/SerenityOS/serenity/commit/4398eec03ce
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Kernel/build-root-filesystem.sh
View File

@ -166,10 +166,14 @@ ln -s ProfileViewer mnt/bin/pv
echo "done"
mkdir -p mnt/boot/
chmod 700 mnt/boot/
cp kernel mnt/boot/
chmod 600 mnt/boot/kernel
mkdir -p mnt/mod/
chmod 700 mnt/mod/
cp TestModule.kernel.o mnt/mod/TestModule.o
chmod 600 mnt/mod/*.o
# Run local sync script, if it exists
if [ -f sync-local.sh ]; then