Fix security issue

2019-07-03 13:09:54 +00:00
parent 70f14a44ba
commit 34abde07b6
2 changed files with 12 additions and 0 deletions
@@ -1,3 +1,10 @@
+calamares-settings-debian (10.0.23-1) unstable; urgency=medium
+
+  * Fixes permissions for initramfs image (CVE-2019-13179)
+    (Closes: #931373)
+
+ -- Jonathan Carter <jcc@debian.org>  Wed, 03 Jul 2019 13:05:47 +0000
+
 calamares-settings-debian (10.0.20-1) unstable; urgency=medium

  * New upstream release
@@ -2,6 +2,11 @@

 CHROOT=$(mount | grep proc | grep calamares | awk '{print $3}' | sed -e "s#/proc##g")

+# Set secure permissions for the initramfs,
+# the initramfs is re-generated later in the installation process
+# so we only set the permissions without regenerating the initramfs now:
+echo "UMASK=0077" > /etc/initramfs-tools/conf.d/initramfs-permissions
+
 echo "Running bootloader-config..."

 if [ -d /sys/firmware/efi/efivars ]; then