2019-09-06 20:00:20 +07:00
|
|
|
## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
|
|
|
|
|
## See the file COPYING for copying conditions.
|
|
|
|
|
|
|
|
|
|
rm_conffile /etc/sudoers.d/umask-security-misc
|
2019-09-07 12:39:56 +07:00
|
|
|
|
|
|
|
|
## https://forums.whonix.org/t/allow-loading-signed-kernel-modules-by-default-disallow-kernel-module-loading-by-default/7880/23
|
|
|
|
|
rm_conffile /etc/default/grub.d/40_only_allow_signed_modules.cfg
|
2019-09-10 23:35:42 +07:00
|
|
|
|
|
|
|
|
## https://forums.whonix.org/t/sysrq-magic-sysrq-key/8079
|
|
|
|
|
rm_conffile /etc/sysctl.d/sysrq.conf
|
2019-12-21 18:58:01 +07:00
|
|
|
|
|
|
|
|
## https://github.com/Whonix/security-misc/pull/45
|
|
|
|
|
rm_conffile /etc/apparmor.d/usr.lib.security-misc.pam_tally2-info
|
|
|
|
|
rm_conffile /etc/apparmor.d/usr.lib.security-misc.permission-lockdown
|
2020-01-24 16:26:36 +07:00
|
|
|
|
|
|
|
|
rm_conffile /etc/sysctl.d/fs_protected.conf
|
|
|
|
|
rm_conffile /etc/sysctl.d/kptr_restrict.conf
|
|
|
|
|
rm_conffile /etc/sysctl.d/suid_dumpable.conf
|
|
|
|
|
rm_conffile /etc/sysctl.d/harden_bpf.conf
|
|
|
|
|
rm_conffile /etc/sysctl.d/ptrace_scope.conf
|
|
|
|
|
rm_conffile /etc/sysctl.d/tcp_timestamps.conf
|
|
|
|
|
rm_conffile /etc/sysctl.d/mmap_aslr.conf
|
|
|
|
|
rm_conffile /etc/sysctl.d/dmesg_restrict.conf
|
|
|
|
|
rm_conffile /etc/sysctl.d/coredumps.conf
|
|
|
|
|
rm_conffile /etc/sysctl.d/kexec.conf
|
|
|
|
|
rm_conffile /etc/sysctl.d/tcp_hardening.conf
|
|
|
|
|
rm_conffile /etc/sysctl.d/tcp_sack.conf
|
2020-01-24 16:30:36 +07:00
|
|
|
|
|
|
|
|
rm_conffile /etc/modprobe.d/uncommon-network-protocols.conf
|
|
|
|
|
rm_conffile /etc/modprobe.d/blacklist-bluetooth.conf
|
|
|
|
|
rm_conffile /etc/modprobe.d/vivid.conf
|
|
|
|
|
rm_conffile /etc/modprobe.d/blacklist-dma.conf
|
|
|
|
|
rm_conffile /etc/modprobe.d/msr.conf
|
|
|
|
|
rm_conffile /etc/modprobe.d/30_nf_conntrack_helper_disable.conf
|
