openwrt/package/base-files/files/etc
Hauke Mehrtens 7d4be068da
base-files: Mount debugfs and pstore with nosuid,nodev,noexec
These permissions are not needed. Systemd also mounts these file systems
without these permissions on other Linux distributions.

Dropping these permissions should make the system more secure.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Link: https://github.com/openwrt/openwrt/pull/16960
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit b88d51898d)
Link: https://github.com/openwrt/openwrt/pull/17097
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2024-11-28 18:47:23 +00:00
..
board.d treewide: remove execute bit and shebang from board.d files 2021-03-06 11:30:06 +01:00
hotplug.d base-files: configure LED when added 2024-10-03 23:05:24 +01:00
init.d base-files: Mount debugfs and pstore with nosuid,nodev,noexec 2024-11-28 18:47:23 +00:00
iproute2 base-files: install missing /etc/iproute2/ematch_map 2018-12-19 07:33:35 +01:00
rc.button base-files: add reboot only button handler 2019-05-30 11:55:49 +02:00
sysctl.d base-files: enable BPF JIT kallsyms by default 2023-06-02 20:53:49 +02:00
uci-defaults base-files: improve default root-passwd script 2024-11-13 07:54:40 +01:00
banner merge: release/banner: drop release name and update banner 2017-12-08 19:41:18 +01:00
banner.failsafe base-files: fix links in banner.failsafe 2018-06-18 07:10:15 +02:00
device_info base-files: add URL option for OEM manufacturer info 2015-10-05 10:28:53 +00:00
diag.sh base-files: diag: restore default trigger for 'boot' LED 2020-02-24 23:27:50 +01:00
ethers base-files: create /etc/ethers by default 2018-08-21 15:55:00 +02:00
fstab base-files: remove fstab symlink 2016-06-17 04:13:07 +02:00
group base-files/hotplug: fix dedicated group for tty devices 2019-04-04 17:09:40 +02:00
hosts base-files: add /etc/hosts entries for ::1, ff02::1 and ff02::2 2015-09-02 11:54:03 +00:00
inittab image / basefiles: make console password configurable 2016-04-18 21:53:07 +02:00
openwrt_release merge: properly remove %n / %N references 2017-12-09 16:01:14 +01:00
openwrt_version build: adjust version number handling 2016-12-02 16:02:02 +01:00
os-release base-files: Add standard os-release file 2016-06-24 13:52:53 +02:00
passwd base-files: prime root password with "x" to notify programs that there is a shadow record, fix /bin/login.sh password detection accordingly. Solves broken key based dropbear login with empty password after r28935. 2011-11-14 19:02:01 +00:00
preinit preinit: use only the image config options 2016-08-10 03:04:08 +02:00
profile base-files: replace fgrep with grep -F 2022-02-06 23:09:15 +01:00
protocols base-files: add DCCP to /etc/protocols 2015-11-15 22:09:13 +00:00
rc.common base-files: add wrapper for procd service list command 2022-03-19 16:13:58 +01:00
rc.local base-files: introduce a ready-to-use /etc/rc.local to let users run custom commands on init without creating custom init scripts 2009-09-11 21:35:03 +00:00
services base-files: /etc/services: add missing 'rpcbind' alias 2018-09-10 10:44:03 +02:00
shadow base-file: remove password aging feature form /etc/shadow 2022-02-24 18:10:30 +01:00
shells
shinit procd: move service command to procd 2022-03-19 16:13:58 +01:00
sysctl.conf base-files: /etc/sysctl.conf: clarity in comment 2024-10-03 17:29:02 +02:00
sysupgrade.conf base-files: - add sysupgrade support for keepfile hints * introduces /lib/upgrade/keep.d/ for per-package keepfile lists * introduces /etc/sysupgrade.conf for user defined keepfile hints - prime /lib/upgrade/keep.d/base-files-essential to keep sysupgrade usable for images without opkg - change sysupgrade to build the keepfile list from /lib/upgrade/keep.d/, /etc/sysupgrade.conf and opkg list-changed-conffiles 2010-10-05 19:24:12 +00:00