• Korean: 이 페이지는 아직 한글로 번역되지 않았습니다.

os-disablebins.plugin.bash

disable system binaries for security.

group:postos | runtype:manual | deps: - | port: -

Usage

os-disablebins install|uninstall|download|disable|configgen|configapply|check|run
$ os-disablebins install - install binary restrictions
$ os-disablebins uninstall - uninstall binary restrictions
$ os-disablebins download - download package files to pkg dir
$ os-disablebins disable - disable binary restrictions plugin
$ os-disablebins configgen - generate binary restriction configuration files
$ os-disablebins configapply - apply binary restriction configuration files
$ os-disablebins check - check binary restrictions plugin status
$ os-disablebins run - run binary restrictions
$ os-disablebins help - show this help message

Description

This tool helps disable potentially dangerous system binaries for enhanced security hardening.

Jangbi Configs

/opt/jangbi/.config

RUN_OS_DISABLEBINS=1 # enable binary restrictions
DISABLEBINS_MODE="replace" # mode: disable|replace

Check if running

bash command

$ ls -la /usr/bin/nc /usr/bin/netcat
-rwxr-xr-x 1 root root 123 Jan 01 12:00 /usr/bin/nc
-rwxr-xr-x 1 root root 456 Jan 01 12:00 /usr/bin/netcat

Current Configuration

Current configuration is stored in /etc/disablebins/. it is generated by os-disablebins configgen command on install. You can edit it manually and not run install or configapply commands to keep current configurations.

/etc/disablebins/config