picnoir
/
Systemd
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

analyze: tweak wording of description for ProtectSystem= (#11035)

This commit is contained in:
David Malcolm 2018-12-03 15:57:10 -05:00 committed by Lennart Poettering
parent a365325e04
commit 1e8817b327
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/analyze/analyze-security.c
View File

@ -254,13 +254,13 @@ static int assess_protect_system(
assert(ret_description);
badness = 10;
description = "Service has full access the OS file hierarchy";
description = "Service has full access to the OS file hierarchy";
r = parse_boolean(info->protect_system);
if (r < 0) {
if (streq_ptr(info->protect_system, "full")) {
badness = 3;
description = "Service has very limited write access to OS file hierarchy";
description = "Service has very limited write access to the OS file hierarchy";
} else if (streq_ptr(info->protect_system, "strict")) {
badness = 0;
description = "Service has strict read-only access to the OS file hierarchy";