heierbtc/mynode
1
0
Fork 1
mirror of https://github.com/mynodebtc/mynode.git synced 2024-12-23 21:18:07 +00:00
Code Issues Projects Releases Wiki Activity

Mitigate PwnKit vulnerability by removing setuid bit from /usr/bin/pkexec (#622)

Browse Source 
https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034
This commit is contained in:
Miller 2022-01-26 21:50:37 -05:00 committed by GitHub
parent ffb7b58e21
commit e58bf35123
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rootfs/standard/usr/bin/mynode_post_upgrade.sh
View File

@ -47,6 +47,8 @@ if ! skip_base_upgrades ; then
# Migrate from version file to version+install combo
/usr/bin/mynode_migrate_version_files.sh
# PwnKit vulnerability mitigation
chmod 0755 /usr/bin/pkexec
# Stop and disable any old services
systemctl disable https || true