RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-26 00:27:43 +00:00
Code Issues Activity Actions

Build: Lock down the /mod and /boot directories

Browse source 
Make these directories accessible to root only. Unprivileged users have
no need to look at the kernel binary or kernel modules.
This commit is contained in:
Andreas Kling 2020-01-04 11:12:59 +01:00
parent 2d244a70a1
commit 4398eec03c
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
Kernel/build-root-filesystem.sh
View file

@ -166,10 +166,14 @@ ln -s ProfileViewer mnt/bin/pv
echo "done"
mkdir -p mnt/boot/
chmod 700 mnt/boot/
cp kernel mnt/boot/
chmod 600 mnt/boot/kernel
mkdir -p mnt/mod/
chmod 700 mnt/mod/
cp TestModule.kernel.o mnt/mod/TestModule.o
chmod 600 mnt/mod/*.o
# Run local sync script, if it exists
if [ -f sync-local.sh ]; then