Merge pull request #24 from TelekomLabs/schroot

feature: add schroot to suid/sgid whitelist
dev-sec · Dec 2, 2014 · f001405 · f001405
2 parents 8b6a416 + a9c6ef1
commit f001405
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/lockdown/serverspec/os_spec.rb b/lockdown/serverspec/os_spec.rb
@@ -99,6 +99,8 @@
       '/usr/kerberos/bin/ksu',
       # whitelist pam_caching
       '/usr/sbin/ccreds_validate',
+      # whitelist su-tools
+      '/usr/bin/schroot',
       # whitelist Xorg
       '/usr/bin/Xorg',                                              # xorg
       '/usr/bin/X',                                                 # xorg