Update control

This commit is contained in:
HulaHoopWhonix 2016-03-31 03:18:05 +00:00
parent c7d88571e4
commit 989f2f54e2

6
debian/control vendored
View File

@ -15,7 +15,7 @@ Package: security-misc
Architecture: all Architecture: all
Depends: ${misc:Depends} Depends: ${misc:Depends}
Description: enhances misc security settings Description: enhances misc security settings
- deactivates previews in Dolphin - deactivates previews in Dolphin
- deactivates previews in Nautilus - deactivates previews in Nautilus
- deactivates TCP timestamps - deactivates TCP timestamps
- deactivates Netfilter's connection tracking helper - deactivates Netfilter's connection tracking helper
@ -54,7 +54,9 @@ needed for:
probably the limiting factor for transmission speed is rarely the capacity probably the limiting factor for transmission speed is rarely the capacity
of the user connection. of the user connection.
. .
Netfilter's connection tracking helper module increases kernel attack surface by enabling superfluous functionality such as IRC parsing in the kernel (!) Netfilter's connection tracking helper module increases kernel attack
surface by enabling superfluous functionality such as IRC parsing in
the kernel (!)
. .
Hence, this package disables this feature by shipping the Hence, this package disables this feature by shipping the
/etc/sysctl.d/nf_conntrack_helper.conf configuration file. /etc/sysctl.d/nf_conntrack_helper.conf configuration file.