Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
  • Sign in / Register
  • HardenedBSD HardenedBSD
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 28
    • Issues 28
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
    • Requirements
  • Merge requests 4
    • Merge requests 4
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
    • Test Cases
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages & Registries
    • Packages & Registries
    • Package Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Code review
    • Insights
    • Issue
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • HardenedBSD
  • HardenedBSDHardenedBSD
  • Merge requests
  • !53

HBSD: Disable INCLUDE_CONFIG_FILE

  • Review changes

  • Download
  • Email patches
  • Plain diff
Merged Loic requested to merge loic/HardenedBSD:Disable-INCLUDE_CONFIG_FILE into hardened/current/master Jan 16, 2022
  • Overview 0
  • Commits 1
  • Changes 2
It is better to disable the INCLUDE_CONFIG_FILE option
so as not to include the kernel configuration file.
This allows to redure kernel infoleaks and thus to
complicate the life of the attacker which we have already
deprived of direct access to the kernel [1].

[1] commit 394e5e99 ("HBSD: prevent kernel reading by non-root users")

Signed-off-by: Loic <loic.f@hardenedbsd.org>
Reported-by: Shawn Webb <shawn.webb@hardenedbsd.org>
Issue: #47 
Assignee
Assign to
Reviewer
Request review from
Time tracking
Source branch: Disable-INCLUDE_CONFIG_FILE