[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 37533b0deabab9f1e44ac8d710c9cd6f1e4570f7

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 37533b0deabab9f1e44ac8d710c9cd6f1e4570f7

[Arne Fitzenreiter]

[-- Attachment #1: Type: text/plain, Size: 2700 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  37533b0deabab9f1e44ac8d710c9cd6f1e4570f7 (commit)
       via  29a8992b7228771fb2cfc68679596598fb01105a (commit)
      from  6075720c481ee58367d06088c18739e26b768201 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 37533b0deabab9f1e44ac8d710c9cd6f1e4570f7
Author: Arne Fitzenreiter <arne_f(a)ipfire.org>
Date:   Mon Mar 30 17:09:34 2020 +0000

    core143: apply changed sysctl settings
    
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

commit 29a8992b7228771fb2cfc68679596598fb01105a
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Thu Jan 23 21:28:00 2020 +0000

    sysctl.conf: Turn on hard- and symlink protection
    
    Cc: Michael Tremer <michael.tremer(a)ipfire.org>
    Cc: Arne Fitzenreiter <arne_f(a)ipfire.org>
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
    Acked-by: Michael Tremer <michael.tremer(a)ipfire.org>
    Signed-off-by: Arne Fitzenreiter <arne_f(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 config/etc/sysctl.conf              | 4 ++++
 config/rootfiles/core/143/update.sh | 3 +++
 2 files changed, 7 insertions(+)

Difference in files:
diff --git a/config/etc/sysctl.conf b/config/etc/sysctl.conf
index d11e53c88..7e7ebee44 100644
--- a/config/etc/sysctl.conf
+++ b/config/etc/sysctl.conf
@@ -45,6 +45,10 @@ kernel.kptr_restrict = 2
 # Avoid kernel memory address exposures via dmesg.
 kernel.dmesg_restrict = 1
 
+# Turn on hard- and symlink protection
+fs.protected_symlinks = 1
+fs.protected_hardlinks = 1
+
 # Minimal preemption granularity for CPU-bound tasks:
 # (default: 1 msec#  (1 + ilog(ncpus)), units: nanoseconds)
 kernel.sched_min_granularity_ns = 10000000
diff --git a/config/rootfiles/core/143/update.sh b/config/rootfiles/core/143/update.sh
index bc28f7de7..51c4557bd 100644
--- a/config/rootfiles/core/143/update.sh
+++ b/config/rootfiles/core/143/update.sh
@@ -68,6 +68,9 @@ chown cron:cron /var/spool/cron
 # restart init after glibc replace
 telinit u
 
+# Apply changed sysctl settings
+/etc/init.d/sysctl start
+
 # Apply local configuration to sshd_config
 /usr/local/bin/sshctrl
 


hooks/post-receive
--
IPFire 2.x development tree