mirror of
https://github.com/SoftEtherVPN/SoftEtherVPN.git
synced 2025-06-28 03:45:08 +03:00
11935cee5a
Install a mandatory access control for restricing SoftEther to network facilities only. This reduces the vulnerability surface of any softetherd exploit, which is an important because SoftEther currently runs as a fully privileged process.
11 lines
327 B
Makefile
Executable File
11 lines
327 B
Makefile
Executable File
#!/usr/bin/make -f
|
|
|
|
%:
|
|
dh $@ --with autoreconf
|
|
|
|
override_dh_install:
|
|
install -m 644 -D debian/softether.ufw debian/softether/etc/ufw/applications.d/softether
|
|
install -m 644 -D debian/apparmor/usr.sbin.softetherd debian/softether/etc/apparmor.d/usr.sbin.softetherd
|
|
dh_apparmor --profile-name=usr.sbin.softetherd
|
|
dh_install
|