]> git.ipfire.org Git - people/stevee/pakfire.git/commit
Hardening: Declare content of /usr/lib/grub as firmware files master
authorStefan Schantl <stefan.schantl@ipfire.org>
Tue, 28 Mar 2023 08:55:21 +0000 (10:55 +0200)
committerMichael Tremer <michael.tremer@ipfire.org>
Tue, 28 Mar 2023 16:46:29 +0000 (16:46 +0000)
commit0e3f8ea032583ef8c3900e83678931429abc9e64
tree45dac305a2be6a9ad92d153cb3e23de16dab18b2
parent3ea19eac5d6343619988d7ee5e10358efb1ea2f7
Hardening: Declare content of /usr/lib/grub as firmware files

This folder contains the neccessary files, which are written to
the MBR, dealing with EFI, or loading additional required grub
modules unless the whole grub menu can be displayed or a selected
OS will start up.

Some of these files are 32bit ELF files or do not have SSP etc.

So I would suggest to mark them as firmware files and therefore
skip some of the hardening tests.

Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
src/libpakfire/file.c