picnoir/Systemd
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

analyze: tweak wording of description for ProtectSystem= (#11035)

Browse source
This commit is contained in:
David Malcolm 2018-12-03 15:57:10 -05:00 committed by Lennart Poettering
parent a365325e04
commit 1e8817b327
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/analyze/analyze-security.c
View file

@ -254,13 +254,13 @@ static int assess_protect_system(
assert(ret_description); assert(ret_description);
badness = 10; badness = 10;
description = "Service has full access the OS file hierarchy"; description = "Service has full access to the OS file hierarchy";
r = parse_boolean(info->protect_system); r = parse_boolean(info->protect_system);
if (r < 0) { if (r < 0) {
if (streq_ptr(info->protect_system, "full")) { if (streq_ptr(info->protect_system, "full")) {
badness = 3; badness = 3;
description = "Service has very limited write access to OS file hierarchy"; description = "Service has very limited write access to the OS file hierarchy";
} else if (streq_ptr(info->protect_system, "strict")) { } else if (streq_ptr(info->protect_system, "strict")) {
badness = 0; badness = 0;
description = "Service has strict read-only access to the OS file hierarchy"; description = "Service has strict read-only access to the OS file hierarchy";