Others/redstar-tools
1
0
Fork 0
mirror of https://github.com/takeshixx/redstar-tools synced 2025-07-17 20:43:21 +00:00
Code Issues Releases Activity

Added SELinux instructions

Browse Source
This commit is contained in:
takeshix
2016-01-02 15:38:14 +01:00
parent 84eb97fa2b
commit b73d8dc7f9
1 changed files with 14 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
README.md
View File

@ -5,13 +5,21 @@ This repository includes several binaries from and tools for Red Star OS. These
## Disable malicious components ## Disable malicious components
1. Get root privileges via `/usr/sbin/rootsetting` 1. Get root privileges via `/usr/sbin/rootsetting`
2. Kill `securityd` 2. Disable SELinux
SELinux protects several files an directories (e.g. /var/log). It should be disabled in order to make changes to some parts of the system.
setenforce 0
In order to keep SELinux disabled after rebooting, append `selinux=0` to the kernel line in the GRUB config file (/boot/grub/grub.conf).
3. Kill `securityd`
Killing `securityd` will prevent the system from rebooting when editing/deleting various protected files. Killing `securityd` will prevent the system from rebooting when editing/deleting various protected files.
killall -9 securityd killall -9 securityd
3. Disable `rtscan` kernel module 4. Disable `rtscan` kernel module
Either via `resctl.py` (see `rtscan`) or via a Python shell as follows: Either via `resctl.py` (see `rtscan`) or via a Python shell as follows:
@ -25,20 +33,20 @@ This repository includes several binaries from and tools for Red Star OS. These
After disabling `rtscan` protected processes like `opprc` will become killable. After disabling `rtscan` protected processes like `opprc` will become killable.
4. Kill `scnprc` and `opprc` 5. Kill `scnprc` and `opprc`
killall scnprc killall scnprc
killall opprc killall opprc
5. Replace `/usr/lib/libos.so.0.0.0` 6. Replace `/usr/lib/libos.so.0.0.0`
See `libos` for further information. Replacing this file will prevent the system from rebooting via `securityd` after rebooting the system. It also will prevent reboot loops by `kdm` rendering the system unusable. See `libos` for further information. Replacing this file will prevent the system from rebooting via `securityd` after rebooting the system. It also will prevent reboot loops by `kdm` rendering the system unusable.
6. Delete `/usr/share/autostart/scnprc.desktop` 7. Delete `/usr/share/autostart/scnprc.desktop`
Deleting this file will prevent `kdeinit` from starting the framework after a system reboot. Deleting this file will prevent `kdeinit` from starting the framework after a system reboot.
7. Reboot the system 8. Reboot the system
## Disclaimer ## Disclaimer