From: Michael Tremer <michael.tremer@ipfire.org>
Date: Sun, 10 Jan 2016 19:35:42 +0000 (+0000)
Subject: grub: Disable hardening for grub-script-check
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b75b6382ab1a3a71bb434932623a396b106d6925;p=people%2Fms%2Fipfire-2.x.git

grub: Disable hardening for grub-script-check

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/config/rootfiles/core/97/update.sh b/config/rootfiles/core/97/update.sh
index 85131da83f..a9ee78e5b7 100644
--- a/config/rootfiles/core/97/update.sh
+++ b/config/rootfiles/core/97/update.sh
@@ -37,6 +37,9 @@ done
 # Extract files
 extract_files
 
+# Fix hardening flags in grub
+paxctl -mpexs /usr/bin/grub-script-check
+
 # Update Language cache
 # /usr/local/bin/update-lang-cache
 
diff --git a/lfs/grub b/lfs/grub
index 3e613a824f..ba744087cf 100644
--- a/lfs/grub
+++ b/lfs/grub
@@ -101,6 +101,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 
 	# Disable hardening.
 	paxctl -mpes /usr/sbin/grub-bios-setup /usr/sbin/grub-probe
+	paxctl -mpexs /usr/bin/grub-script-check
 
 	# We don't need to install unifont just to generate a grub2 compatible
 	# font archive for the graphical boot menu. The following command only