On 4.4.2021 16.23, Andrew Savchenko wrote:
Hello Yves-Alexis,
Sunday, April 4, 2021, 7:35:46 PM, you wrote:
statoverride in hardening-runtime were added by Topi Miettinen so I'm adding
him in the loop for comments.
For the screensavers specifically, I have narrowed it down to /etc/pam.d only.
chmod'ing it to the default 0755 fixes the issue.
Very strange, I actually also have 0755. I think this line should be
removed.
There might be more dragons though as this is somewhat similar to openSUSE:
https://github.com/openSUSE/permissions/blob/master/profiles/permissions.paranoid
I didn't see any reference to pam.d here though.
-Topi
