diff options
| author | ikerexxe <ipedrosa@redhat.com> | 2020-06-15 09:52:11 +0200 |
|---|---|---|
| committer | Tomáš Mráz <7125407+t8m@users.noreply.github.com> | 2020-06-17 14:33:23 +0200 |
| commit | 395915dae1571e10e2766c999974de864655ea3a (patch) | |
| tree | 96cc77944050582442ed487af4987f4939e93cbf /modules/pam_unix | |
| parent | efd2a79c11982d0feebebbf740506c9555120b97 (diff) | |
| download | pam-395915dae1571e10e2766c999974de864655ea3a.tar.gz pam-395915dae1571e10e2766c999974de864655ea3a.tar.bz2 pam-395915dae1571e10e2766c999974de864655ea3a.zip | |
pam_faillock: change /run/faillock/$USER permissions to 0660
Nowadays, /run/faillock/$USER files have user:root ownership and 0600
permissions. This forces the process that writes to these files to have
CAP_DAC_OVERRIDE capabilites. Just by changing the permissions to 0660
the capability can be removed, which leads to a more secure system.
Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1661822
Diffstat (limited to 'modules/pam_unix')
0 files changed, 0 insertions, 0 deletions