grub: Disable hardening for grub-script-check

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/config/rootfiles/core/97/update.sh b/config/rootfiles/core/97/update.sh
index 85131da83f25a4ccdb9cacd5be422c3a568b1c40..a9ee78e5b7bd086c3217fef8e7d6cab0a679b107 100644 (file)
--- a/config/rootfiles/core/97/update.sh
+++ b/config/rootfiles/core/97/update.sh
@@ -37,6 +37,9 @@ done
 # Extract files
 extract_files
 
+# Fix hardening flags in grub
+paxctl -mpexs /usr/bin/grub-script-check
+
 # Update Language cache
 # /usr/local/bin/update-lang-cache
 

diff --git a/lfs/grub b/lfs/grub
index 3e613a824f66a586993714977b8b34e7d389b6ae..ba744087cf6b2ebb96b335f5aab5ca2b08a93f85 100644 (file)
--- a/lfs/grub
+++ b/lfs/grub
@@ -101,6 +101,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
 
        # Disable hardening.
        paxctl -mpes /usr/sbin/grub-bios-setup /usr/sbin/grub-probe
+       paxctl -mpexs /usr/bin/grub-script-check
 
        # We don't need to install unifont just to generate a grub2 compatible
        # font archive for the graphical boot menu. The following command only