[debbugs-tracker] bug#36701: closed ([PATCH] gnu: linux-libre: Restrict ‘dmesg’ to privileged users.)

[GNU bug Tracking System]

Your message dated Sat, 27 Jul 2019 01:19:29 +0200
with message-id <87k1c4gz9a.fsf@nckx>
and subject line Re: [bug#36701] [PATCH] gnu: linux-libre: Restrict ‘dmesg’ to 
privileged users.
has caused the debbugs.gnu.org bug report #36701,
regarding [PATCH] gnu: linux-libre: Restrict ‘dmesg’ to privileged users.
to be marked as done.

(If you believe you have received this mail in error, please contact
address@hidden.)


-- 
36701: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=36701
GNU Bug Tracking System
Contact address@hidden with problems
> --- Begin Message ---
>
>
>
> Subject: 
>
> [PATCH] gnu: linux-libre: Restrict ‘dmesg’ to privileged users.
>
>
>
>
> Date: 
>
> Wed, 17 Jul 2019 09:26:08 +0200
>
>
>
>
> * gnu/packages/linux.scm (%default-extra-linux-options):
> Set CONFIG_SECURITY_DMESG_RESTRICT.
> ---
>
> Re: https://lists.gnu.org/archive/html/guix-devel/2019-07/msg00258.html
>
> Patchy patch.
>
>  gnu/packages/linux.scm | 4 +++-
>  1 file changed, 3 insertions(+), 1 deletion(-)
>
> diff --git a/gnu/packages/linux.scm b/gnu/packages/linux.scm
> index 30192f195d..73c7083e7c 100644
> --- a/gnu/packages/linux.scm
> +++ b/gnu/packages/linux.scm
> @@ -273,7 +273,9 @@ for ARCH and optionally VARIANT, or #f if there is no such 
> configuration."
>      (search-auxiliary-file file)))
>  
>  (define %default-extra-linux-options
> -  `(;; Modules required for initrd:
> +  `(;; Some very mild hardening.
> +    ("CONFIG_SECURITY_DMESG_RESTRICT" . #t)
> +    ;; Modules required for initrd:
>      ("CONFIG_NET_9P" . m)
>      ("CONFIG_NET_9P_VIRTIO" . m)
>      ("CONFIG_VIRTIO_BLK" . m)
> -- 
> 2.22.0
>
>
>
>
> --- End Message ---

--- Begin Message --- Subject: Re: [bug#36701] [PATCH] gnu: linux-libre: Restrict ‘dmesg’ to privileged users. Date: Sat, 27 Jul 2019 01:19:29 +0200

Ludo',

Ludovic Courtès 写道：

Tobias Geerinckx-Rice <address@hidden> skribis:

* gnu/packages/linux.scm (%default-extra-linux-options):
Set CONFIG_SECURITY_DMESG_RESTRICT.

Go for it!

Pushed as 24446ce299943efe3dfded6c9dd0cf9421d8da04.

Thanks!

T G-R

signature.asc
Description: PGP signature

--- End Message ---