[06/20] Core Update 157: Delete orphaned DMA mail box creation binary as well

Message ID 0bd0080a-d095-5028-22fa-7d5436b9baf3@ipfire.org
State Accepted
Commit becfea1d380951c261529f6a2cb66dc17856a34d
Headers
Series Prevent "nobody" from escalating privileges by using writeable binaries as a vehicle |

Commit Message

Peter Müller May 17, 2021, 7:02 p.m. UTC
  Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 config/rootfiles/core/157/update.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)
  

Patch

diff --git a/config/rootfiles/core/157/update.sh b/config/rootfiles/core/157/update.sh
index 0f4c76346..8738a1e46 100644
--- a/config/rootfiles/core/157/update.sh
+++ b/config/rootfiles/core/157/update.sh
@@ -107,7 +107,9 @@  ldconfig
 chmod -s /usr/bin/gpg
 
 # Delete scrubbed files
-rm -f /usr/lib/openssh/ssh-keysign
+rm -f \
+	/usr/lib/dma-mbox-create \
+	/usr/lib/openssh/ssh-keysign
 
 # Start services
 /etc/init.d/sshd restart