Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow default permission for user.cfg file in UEFI systems #10884

Merged
merged 2 commits into from
Jul 20, 2023
Merged

Allow default permission for user.cfg file in UEFI systems #10884

merged 2 commits into from
Jul 20, 2023

Commits on Jul 20, 2023

  1. Allow 0700 permission for UEFI files 

    This rule was asking 0600 permission for user.cfg file even in a UEFI
boot partition. However, UEFI usually uses a VFAT file system, which
makes the chmod command ineffective if the filesystem "umask" mount
option is set to "0077", as it is by default. If the permissions of
files in /boot/efi using VFAT file system need to be changed, the umask
value should be updated in fstab. In addition, CIS allows 0700
permission for /boot/efi and currently it is the only profile using
this rule. This PR makes 0700 permission accepted.
    @marcusburghardt
    marcusburghardt committed Jul 20, 2023
    Configuration menu
    Copy the full SHA
    ae1cee0 View commit details
    Browse the repository at this point in the history

  2. Include warning in uefi group regarding vfat file systems

    @marcusburghardt
    marcusburghardt committed Jul 20, 2023
    Configuration menu
    Copy the full SHA
    6245d67 View commit details
    Browse the repository at this point in the history