Re: [yocto] [meta-hardening][PATCH] meta-hardening/binutils: harden installation permissions

2021-08-30 Thread Marta Rybczynska
(correcting the wrong list address) On Fri, Aug 27, 2021 at 6:07 AM akuster808 wrote: > Marta, > > On 8/24/21 11:05 PM, Marta Rybczynska wrote: > > Compilers and related utils are better restricted on production > platforms. > > Change permissions of all installed binutils tools to remove

[yocto] [meta-hardening][PATCH] meta-hardening/binutils: harden installation permissions

2021-08-25 Thread Marta Rybczynska
Compilers and related utils are better restricted on production platforms. Change permissions of all installed binutils tools to remove access from users outside of the root group. This also demonstrates how to restrict file permissions in a hardened distribution. Signed-off-by: Marta Rybczynska