Commit graph

9 commits

Author SHA1 Message Date
Kelvin M. Klann
580283d74b disable-common.inc: blacklist sudo/doas paths in /etc
Commands used to find the relevant paths in /etc:

    $ pacman -Qo /etc/* 2>/dev/null | grep sudo | LC_ALL=C sort
    /etc/pam.d/ is owned by sudo 1.9.14.p1-1
    /etc/sudo.conf is owned by sudo 1.9.14.p1-1
    /etc/sudo_logsrvd.conf is owned by sudo 1.9.14.p1-1
    /etc/sudoers is owned by sudo 1.9.14.p1-1
    /etc/sudoers.d/ is owned by sudo 1.9.14.p1-1

Environment: Artix Linux.

Also, add missing paths sudo/doas to etc/ids.config and jailcheck.

See also commit dbebd71db ("disable-common.inc: blacklist doas binary",
2022-10-05).

Relates to #5385.

Reported-by: Dieter Plaetinck <dieter@plaetinck.be>
2023-07-14 08:08:47 -03:00
Kelvin M. Klann
dbebd71db1 disable-common.inc: blacklist doas binary
OpenDoas is an alternative to sudo.  It is an unofficial port of
OpenBSD's doas.  Details:

    $ LC_ALL=C pacman -Si galaxy/opendoas |
      grep -e '^Version' -e '^Description' -e '^URL'
    Version         : 6.8.2-1
    Description     : Run commands as super user or another user
    URL             : https://github.com/Duncaen/OpenDoas

Environment: Artix Linux.

Also, add /etc/doas.conf to etc/ids.config.
2022-10-05 08:06:47 -03:00
Kelvin M. Klann
03af910fdc disable-shell.inc: add global shell paths from ids.config
Since /etc/profile is present, add the other shell-related paths in /etc
that are listed on ids.config.

Suggestion by @rusty-snake[1].

Relates to #5167 #5170.

[1] https://github.com/netblue30/firejail/pull/5167#pullrequestreview-989621852
2022-06-02 00:28:10 -03:00
Kelvin M. Klann
2183171767 ids.config: sort global shell paths 2022-06-02 00:21:55 -03:00
Kelvin M. Klann
8fe1b93629 ids.config: add missing global shell paths
Add missing paths for bash, ksh and zsh.

Environment: Artix Linux
2022-05-30 22:36:32 -03:00
smitsohu
7cf7108e25 ids: add some more paths 2021-10-31 17:55:59 +01:00
glitsj16
4e373a8a7f
improved reordening for ids.config 2021-07-28 16:40:43 +00:00
glitsj16
6e0504feaa
reordering and fix for ids.config 2021-07-28 16:38:20 +00:00
netblue30
a627071b33 intrusion detection system 2021-07-28 08:30:24 -04:00