fix(ujust dns-selector): chmod 644 on the conf file#1072
Merged
RoyalOughtness merged 3 commits intosecureblue:livefrom May 26, 2025
Merged
fix(ujust dns-selector): chmod 644 on the conf file#1072RoyalOughtness merged 3 commits intosecureblue:livefrom
RoyalOughtness merged 3 commits intosecureblue:livefrom
Conversation
This makes the conf file readable by the audit script so it can check the DNS configuration. Signed-off-by: Daniel Hast <[email protected]>
RKNF404
reviewed
May 25, 2025
Collaborator
|
Would you mind extending this to to the policy file as well? |
HastD
force-pushed
the
resolved-conf-chmod
branch
from
3a9cdb3 to
5e2efa4
Compare
RKNF404
approved these changes
May 25, 2025
RoyalOughtness
approved these changes
May 26, 2025
HastD
added a commit
to HastD/secureblue
that referenced
this pull request
Jun 5, 2025
This is needed for the systemd-resolved conf file to be user-readable (in particular, readable by the audit script) if the directories don't already exist. PR secureblue#1072 fixed the file modes but not the directories. Signed-off-by: Daniel Hast <[email protected]>
RoyalOughtness
pushed a commit
that referenced
this pull request
Jun 5, 2025
This is needed for the systemd-resolved conf file to be user-readable (in particular, readable by the audit script) if the directories don't already exist. PR #1072 fixed the file modes but not the directories. Signed-off-by: Daniel Hast <[email protected]>
RoyalOughtness
pushed a commit
to RoyalOughtness/secureblue-dev
that referenced
this pull request
Aug 4, 2025
RoyalOughtness
pushed a commit
to RoyalOughtness/secureblue-dev
that referenced
this pull request
Aug 4, 2025
) This is needed for the systemd-resolved conf file to be user-readable (in particular, readable by the audit script) if the directories don't already exist. PR secureblue#1072 fixed the file modes but not the directories. Signed-off-by: Daniel Hast <[email protected]>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This makes the conf file readable by the audit script so it can check the DNS configuration.