[git.ipfire.org] IPFire 2.x development tree branch, next, updated. b75b6382ab1a3a71bb434932623a396b106d6925

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. b75b6382ab1a3a71bb434932623a396b106d6925

[git]

[-- Attachment #1: Type: text/plain, Size: 2016 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  b75b6382ab1a3a71bb434932623a396b106d6925 (commit)
      from  1d9be34e2a617efa19135b646914fb1ef507a8b9 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit b75b6382ab1a3a71bb434932623a396b106d6925
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date:   Sun Jan 10 19:35:42 2016 +0000

    grub: Disable hardening for grub-script-check
    
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/rootfiles/core/97/update.sh | 3 +++
 lfs/grub                           | 1 +
 2 files changed, 4 insertions(+)

Difference in files:
diff --git a/config/rootfiles/core/97/update.sh b/config/rootfiles/core/97/update.sh
index 85131da..a9ee78e 100644
--- a/config/rootfiles/core/97/update.sh
+++ b/config/rootfiles/core/97/update.sh
@@ -37,6 +37,9 @@ done
 # Extract files
 extract_files
 
+# Fix hardening flags in grub
+paxctl -mpexs /usr/bin/grub-script-check
+
 # Update Language cache
 # /usr/local/bin/update-lang-cache
 
diff --git a/lfs/grub b/lfs/grub
index 3e613a8..ba74408 100644
--- a/lfs/grub
+++ b/lfs/grub
@@ -101,6 +101,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 
 	# Disable hardening.
 	paxctl -mpes /usr/sbin/grub-bios-setup /usr/sbin/grub-probe
+	paxctl -mpexs /usr/bin/grub-script-check
 
 	# We don't need to install unifont just to generate a grub2 compatible
 	# font archive for the graphical boot menu. The following command only


hooks/post-receive
--
IPFire 2.x development tree