From cb606e2233429e663f808f68b6df4e2cb12490f3 Mon Sep 17 00:00:00 2001 From: yueyuankun Date: Fri, 9 Jun 2023 17:28:45 +0800 Subject: [PATCH] add grub2 password for legacy (cherry picked from commit c3483fc79aade3dab9a3f8536645cd82ee1a6ef1) --- ...y-tool-add-grub2-password-for-legacy.patch | 25 +++++++++++++++++++ security-tool.spec | 9 ++++++- 2 files changed, 33 insertions(+), 1 deletion(-) create mode 100644 security-tool-add-grub2-password-for-legacy.patch diff --git a/security-tool-add-grub2-password-for-legacy.patch b/security-tool-add-grub2-password-for-legacy.patch new file mode 100644 index 0000000..0fac7ae --- /dev/null +++ b/security-tool-add-grub2-password-for-legacy.patch @@ -0,0 +1,25 @@ +From 28be480fbcfe18f008948642493cbba612c8c685 Mon Sep 17 00:00:00 2001 +From: yueyuankun +Date: Fri, 9 Jun 2023 17:17:17 +0800 +Subject: [PATCH] add grub2 password for legacy + +--- + security-tool.sh | 2 ++ + 1 file changed, 2 insertions(+) + +diff --git a/security-tool.sh b/security-tool.sh +index 0877081..5939f44 100644 +--- a/security-tool.sh ++++ b/security-tool.sh +@@ -948,6 +948,8 @@ function fn_harden_grub2() + echo -e "cat <> /etc/grub.d/00_header + if [ -d /boot/efi/EFI/openEuler -a -d /sys/firmware/efi ]; then + grub2-mkconfig -o /boot/efi/EFI/openEuler/grub.cfg ++ else ++ grub2-mkconfig -o /boot/grub2/grub.cfg + fi + } + # Function Name: fn_harden_sysctl +-- +2.33.0 + diff --git a/security-tool.spec b/security-tool.spec index 4894600..8f7f78d 100644 --- a/security-tool.spec +++ b/security-tool.spec @@ -2,7 +2,7 @@ Summary: openEuler Security Tool Name : security-tool Version: 2.0 -Release: 1.87 +Release: 1.88 Source0: https://gitee.com/openeuler/security-tool/repository/archive/v2.0.tar.gz License: MulanPSL-2.0 URL: https://gitee.com/openeuler/security-tool @@ -21,6 +21,7 @@ Patch3: fix-function-allow-rpm-q.patch Patch4: add-secure-hostKey-algorithms.patch Patch5: Do-not-hard-code-vendor-name-in-source-code.patch Patch6: sshd-delete-deprecated-option-RSAAuthentication-and-Rhost.patch +Patch7: security-tool-add-grub2-password-for-legacy.patch %description %{vendor} Security Tool @@ -126,6 +127,12 @@ fi %attr(0500,root,root) %{_sbindir}/security-tool.sh %changelog +* Fri Jun 09 2023 yueyuankun - 2.0-1.88 +- Type:bugfix +- ID:NA +- SUG:NA +- DESC:security-tool-add-grub2-password-for-legacy.patch + * Tue Jan 10 2023 renmingshuai - 2.0-1.87 - delete deprecated option RSAAuthentication and RhostsRSAAuthentication -- Gitee