feature: add schroot to suid/sgid whitelist

Signed-off-by: Dominik Richter <[email protected]>
dev-sec · Dec 1, 2014 · a9c6ef1 · a9c6ef1
1 parent 8b6a416
commit a9c6ef1
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/lockdown/serverspec/os_spec.rb b/lockdown/serverspec/os_spec.rb
@@ -99,6 +99,8 @@
       '/usr/kerberos/bin/ksu',
       # whitelist pam_caching
       '/usr/sbin/ccreds_validate',
+      # whitelist su-tools
+      '/usr/bin/schroot',
       # whitelist Xorg
       '/usr/bin/Xorg',                                              # xorg
       '/usr/bin/X',                                                 # xorg