Add nethunter.root template (#1445)
This app requires DAC_OVERRIDE, DAC_READ_SEARCH, SYS_PTRACE, SYS_ADMIN (for /data/local r/w) and SYS_CHROOT, SETGID (to run chroot and run it's processes) Devices with NetHunter installed is already considered compromised due to lack of security features(like SELinux), therefore users are advised not to store private data It's not really worth restricting more capabilities of the app.
This commit is contained in:
22
website/docs/public/templates/nethunter.root
Normal file
22
website/docs/public/templates/nethunter.root
Normal file
@@ -0,0 +1,22 @@
|
|||||||
|
{
|
||||||
|
"id":"nethunter.root",
|
||||||
|
"name":"Kali NetHunter",
|
||||||
|
"author":"cachiusa",
|
||||||
|
"description":"Required permissions for Kali NetHunter app to chroot",
|
||||||
|
"namespace":"INHERITED",
|
||||||
|
"uid":0,
|
||||||
|
"gid":0,
|
||||||
|
"groups":[
|
||||||
|
"ROOT"
|
||||||
|
],
|
||||||
|
"capabilities":[
|
||||||
|
"CAP_DAC_OVERRIDE",
|
||||||
|
"CAP_DAC_READ_SEARCH",
|
||||||
|
"CAP_SYS_CHROOT",
|
||||||
|
"CAP_SYS_PTRACE",
|
||||||
|
"CAP_SYS_ADMIN"
|
||||||
|
"CAP_SETGID",
|
||||||
|
],
|
||||||
|
"context":"u:r:su:s0",
|
||||||
|
"rules":[""]
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user