From 0e29af560fe8f05ffe70b23684351001b4de00b1 Mon Sep 17 00:00:00 2001 From: Tommy Date: Wed, 28 Feb 2024 10:47:05 -0700 Subject: [PATCH] ld_preload fix Signed-off-by: Tommy --- x86-QEMU-Docker.ign | 2 +- x86-QEMU-Docker.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/x86-QEMU-Docker.ign b/x86-QEMU-Docker.ign index 9bf0ba9..631111b 100644 --- a/x86-QEMU-Docker.ign +++ b/x86-QEMU-Docker.ign @@ -230,7 +230,7 @@ "name": "postinst.service" }, { - "contents": "[Unit]\nDescription=Initial System Setup Part 2\n# We run this after the packages have been overlayed\nAfter=network-online.target\nConditionPathExists=!/var/lib/%N.stamp\nConditionPathExists=/var/lib/postinst.stamp\n\n[Service]\nType=oneshot\nRemainAfterExit=yes\nExecStart=/usr/bin/echo 'libhardened_malloc.so' | tee /etc/ld.so.preload\nExecStart=/usr/bin/systemctl enable --now firewalld\nExecStart=/usr/bin/firewall-cmd --lockdown-on\nExecStart=/usr/bin/touch /var/lib/%N.stamp\nExecStart=/usr/bin/systemctl --no-block reboot\n\n[Install]\nWantedBy=multi-user.target\n", + "contents": "[Unit]\nDescription=Initial System Setup Part 2\n# We run this after the packages have been overlayed\nAfter=network-online.target\nConditionPathExists=!/var/lib/%N.stamp\nConditionPathExists=/var/lib/postinst.stamp\n\n[Service]\nType=oneshot\nRemainAfterExit=yes\nExecStart=/usr/bin/echo 'libhardened_malloc.so' \u003e /etc/ld.so.preload\nExecStart=/usr/bin/systemctl enable --now firewalld\nExecStart=/usr/bin/firewall-cmd --lockdown-on\nExecStart=/usr/bin/touch /var/lib/%N.stamp\nExecStart=/usr/bin/systemctl --no-block reboot\n\n[Install]\nWantedBy=multi-user.target\n", "enabled": true, "name": "postinst2.service" }, diff --git a/x86-QEMU-Docker.yml b/x86-QEMU-Docker.yml index e19af18..abc0b60 100644 --- a/x86-QEMU-Docker.yml +++ b/x86-QEMU-Docker.yml @@ -69,7 +69,7 @@ systemd: [Service] Type=oneshot RemainAfterExit=yes - ExecStart=/usr/bin/echo 'libhardened_malloc.so' | tee /etc/ld.so.preload + ExecStart=/usr/bin/echo 'libhardened_malloc.so' > /etc/ld.so.preload ExecStart=/usr/bin/systemctl enable --now firewalld ExecStart=/usr/bin/firewall-cmd --lockdown-on ExecStart=/usr/bin/touch /var/lib/%N.stamp