Merge pull request #1433 from YunoHost/hidepid

security: Enable proc-hidepid by default
This commit is contained in:
Alexandre Aubin 2022-02-07 13:18:08 +01:00 committed by GitHub
commit 8769ab231d
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -154,12 +154,7 @@ EOF
cp yunohost-api.service ${pending_dir}/etc/systemd/system/yunohost-api.service
cp yunohost-firewall.service ${pending_dir}/etc/systemd/system/yunohost-firewall.service
cp yunoprompt.service ${pending_dir}/etc/systemd/system/yunoprompt.service
if [[ "$(yunohost settings get 'security.experimental.enabled')" == "True" ]]; then
cp proc-hidepid.service ${pending_dir}/etc/systemd/system/proc-hidepid.service
else
touch ${pending_dir}/etc/systemd/system/proc-hidepid.service
fi
cp proc-hidepid.service ${pending_dir}/etc/systemd/system/proc-hidepid.service
mkdir -p ${pending_dir}/etc/dpkg/origins/
cp dpkg-origins ${pending_dir}/etc/dpkg/origins/yunohost