Patrick Schleizer
1b6161c2dc
Merge remote-tracking branch 'ben-grande/fuzz'
2024-07-24 09:13:48 -04:00
Raja Grewal
88c88187f2
Re-enable (default) secure_redirects for ICMP redirect messages
2024-07-24 17:26:50 +10:00
Ben Grande
8be21b6eff
Handle newlines in file names
2024-07-23 19:36:12 +02:00
Ben Grande
aa99de68d3
Log output with defined levels
2024-07-23 18:50:16 +02:00
Ben Grande
06fbcdac1d
Prettify log messages
2024-07-23 09:55:02 +02:00
Ben Grande
7ee1ea2cc7
Unify functions that evaluate commands
2024-07-22 17:06:07 +02:00
Ben Grande
9c3566f524
Delimit file names with null terminator
2024-07-22 16:56:42 +02:00
Raja Grewal
a189956adc
Typo
2024-07-20 20:11:09 +10:00
Raja Grewal
c4965ed838
Disable legacy framebuffer drivers
...
These were all previously blacklisted for over 2 years.
2024-07-20 14:55:10 +10:00
Patrick Schleizer
9f53a0182b
undo io_uring related changes
...
as these should be done in a separate pull request (if apprpriate)
https://github.com/Kicksecure/security-misc/pull/244#issuecomment-2238889062
2024-07-19 07:20:59 -04:00
Raja Grewal
13cc1f0986
Clarify (future) disabling of io_uring
2024-07-18 12:25:00 +10:00
Raja Grewal
6d211faf59
Restrict unprivileged user namespaces
2024-07-18 11:04:54 +10:00
Raja Grewal
b04828f858
Disable the usage of ptrace() by all processes
2024-07-18 11:01:41 +10:00
Patrick Schleizer
a2e26f441b
spelling
2024-07-17 11:04:03 -04:00
Patrick Schleizer
c8be4ac83c
comment
2024-07-17 10:56:14 -04:00
Patrick Schleizer
24cd70a014
spelling
2024-07-17 10:55:12 -04:00
Patrick Schleizer
9a387f95e9
Merge remote-tracking branch 'raja/miscellaneous'
2024-07-17 10:32:26 -04:00
Raja Grewal
4afe257a42
minor
2024-07-18 00:14:13 +10:00
Raja Grewal
d0a59617f6
Add missing Copyright (C) statements
2024-07-18 00:13:30 +10:00
Raja Grewal
8f3896c3da
Upgrade hyperlinks to HTTPS
2024-07-17 23:44:37 +10:00
Raja Grewal
1087387b36
Remove obsolete #net.ipv4.tcp_fack=0
2024-07-17 23:35:25 +10:00
Patrick Schleizer
df80385289
Merge pull request #237 from raja-grewal/intel_pmt
...
Disable some Intel PMT kernel modules
2024-07-17 09:04:18 -04:00
Patrick Schleizer
0b873b765e
minor
2024-07-17 08:05:27 -04:00
Patrick Schleizer
070bb46a08
Merge remote-tracking branch 'raja/sysctl'
2024-07-17 08:02:45 -04:00
Patrick Schleizer
6d6e5473f2
minor
2024-07-17 08:00:24 -04:00
Patrick Schleizer
cf5f0edbb8
Merge remote-tracking branch 'raja/sysctl'
2024-07-17 07:59:35 -04:00
Raja Grewal
39fd125eb0
Provide explanation on the disabling of IPv6 Privacy Extensions
2024-07-17 21:44:44 +10:00
Raja Grewal
693b47e623
Clarify ICMP redirect acceptance and sending
2024-07-17 14:58:30 +10:00
Raja Grewal
824d9b82e5
Uncomment redundant disabling of TCP FACK`
2024-07-17 00:36:18 +10:00
Raja Grewal
d1119c38b6
Apply changes from code review
2024-07-17 00:31:23 +10:00
Patrick Schleizer
6e63fc8985
Merge remote-tracking branch 'ben-grande/fuzz'
2024-07-15 17:14:25 -04:00
Raja Grewal
61941da375
Create disabled-intelpmt-by-security-misc
2024-07-15 22:38:09 +10:00
Raja Grewal
a8bc1144c3
Updated wording of error files for disabled modules
2024-07-15 21:10:13 +10:00
Raja Grewal
fda3832eaf
Replace bash file presented for disabling of miscellaneous modules
2024-07-15 21:08:45 +10:00
Raja Grewal
c52b1a3fd2
Create disabled-miscellaneous-by-security-misc
2024-07-15 20:58:45 +10:00
Raja Grewal
1c2afc1f25
Update presentation of the kernel.printk sysctl
2024-07-15 15:01:48 +10:00
Raja Grewal
2b9e174c9d
Remove empty lines
2024-07-14 16:22:52 +10:00
Raja Grewal
dd1741c4a1
Some documentation additions and fixes
2024-07-14 13:40:53 +10:00
Raja Grewal
565597c9a2
Minor documentation changes and fixes
2024-07-14 01:21:24 +10:00
Raja Grewal
2de3a79599
Refactor existing sysctl for clarity
2024-07-13 22:41:40 +10:00
Raja Grewal
f31dc8aebc
Fix error in error script
2024-07-12 16:21:03 +10:00
Raja Grewal
b02230a783
Split modprobe into blacklisted and disabled configurations
2024-07-12 02:42:37 +10:00
Ben Grande
b7796a5334
Unify method to find SUID files
2024-07-11 11:04:22 +02:00
Raja Grewal
1bb843ec38
Update Copyright (C) to 2024
2024-05-11 13:18:36 +10:00
Patrick Schleizer
9b589bc311
comment
2024-05-10 06:49:34 -04:00
Patrick Schleizer
8d01fc2d35
chmod +x
2024-05-10 06:48:26 -04:00
Patrick Schleizer
547757f451
Merge pull request #220 from raja-grewal/block_gps
...
Block Several GPS-related Modules
2024-05-10 06:45:34 -04:00
raja-grewal
f3800a4e2b
Create disabled-gps-by-security-misc
2024-05-09 02:25:46 +00:00
raja-grewal
132b41ae73
Revert logging of martians
2024-05-09 02:16:50 +00:00
Patrick Schleizer
7dba3fb7be
no longer disable MSR by default
...
fixes https://github.com/Kicksecure/security-misc/issues/215
2024-04-01 02:56:27 -04:00
Patrick Schleizer
ecaa024f22
lower debugging
2024-03-18 11:01:56 -04:00
Patrick Schleizer
a5206bde33
proc-hidepid.service add gid=proc
...
This allows users that are a member of the `proc` group to be excluded from `hidepid` protections.
https://github.com/Kicksecure/security-misc/issues/208
2024-03-10 08:44:53 -04:00
Patrick Schleizer
6b76373395
fix panic-on-oops started every 10s in Qubes-Whonix
...
by changing from a /etc/profile.d etc. related mechanism to start to a systemd unit file based approach
Thanks to @marmarek for the bug report!
https://forums.whonix.org/t/panic-on-oops-started-every-10s/19450
2024-03-04 06:44:26 -05:00
Patrick Schleizer
808e72f24b
use long options
...
https://github.com/Kicksecure/security-misc/issues/172
2024-02-26 08:11:26 -05:00
Patrick Schleizer
2d1d1b246f
improve output
...
https://github.com/Kicksecure/security-misc/issues/172
2024-02-26 08:07:29 -05:00
Patrick Schleizer
d8f5376c4f
improve output
...
https://github.com/Kicksecure/security-misc/issues/172
2024-02-26 07:58:06 -05:00
Patrick Schleizer
cf84762a3a
improve output
...
https://github.com/Kicksecure/security-misc/issues/172
2024-02-26 07:52:41 -05:00
Patrick Schleizer
f2958bbfa5
comment
2024-02-26 07:49:30 -05:00
Patrick Schleizer
b23d167342
Merge pull request #204 from DanWin/sysfs-mount
...
Make /sys hardening optional and allow access to /sys/fs to make polkit work
2024-02-26 07:46:02 -05:00
Patrick Schleizer
d13d1aa7ec
comments
2024-02-22 15:07:53 -05:00
Patrick Schleizer
c3dd178b19
output
2024-02-22 14:57:50 -05:00
Daniel Winzen
ef44ecea44
Add option to disabe /sys hardening
2024-02-22 17:27:46 +01:00
Daniel Winzen
3bc1765dbb
Allow access to /sys/fs for polkit
2024-02-22 17:27:45 +01:00
Patrick Schleizer
37a7abdf0c
ConditionKernelCommandLine=!remountsecure=0
2024-02-22 11:07:01 -05:00
Patrick Schleizer
c0924321b8
fix systemd unit ExecStart
2024-02-22 09:52:36 -05:00
Patrick Schleizer
6d7cf3c12a
output
2024-02-22 09:49:48 -05:00
Patrick Schleizer
f7831db197
do not exit non-zero if folder does not exist
2024-02-22 09:17:41 -05:00
Patrick Schleizer
5bdd7b8475
output
2024-02-22 09:14:52 -05:00
Patrick Schleizer
44a15cd97d
mount --make-private
...
https://github.com/Kicksecure/security-misc/issues/172
2024-02-22 09:13:56 -05:00
Patrick Schleizer
c0f98b05b6
comment
...
https://github.com/Kicksecure/security-misc/pull/202
2024-02-22 06:03:59 -05:00
Patrick Schleizer
1e1613aa93
allow /opt exec as usually optional binaries are placed there such as firefox
...
https://github.com/Kicksecure/security-misc/pull/202
2024-02-22 06:02:28 -05:00
Patrick Schleizer
7c7b4b24b4
fix home_noexec_maybe -> most_noexec_maybe
...
https://github.com/Kicksecure/security-misc/pull/202
2024-02-22 06:02:00 -05:00
Patrick Schleizer
38783faf60
add more bind mounts of mount options hardening
...
as suggested in https://github.com/Kicksecure/security-misc/pull/202
2024-02-22 05:58:53 -05:00
Patrick Schleizer
3048e0ac76
usrmerge
...
https://github.com/Kicksecure/security-misc/issues/190
2024-01-17 13:54:07 -05:00
Patrick Schleizer
0efee2f50f
usrmerge
...
fixes https://github.com/Kicksecure/security-misc/issues/190
2024-01-17 13:39:56 -05:00
Patrick Schleizer
3ba8fe586e
update permission-hardener.service
...
Which is now only an additional opt-in systemd unit,
because permission-hardener is run by default at security-misc
package installation time.
https://github.com/Kicksecure/security-misc/pull/181
2024-01-16 09:23:54 -05:00
Patrick Schleizer
862bf6b5ab
Merge remote-tracking branch 'ben-grande/clean'
2024-01-16 08:19:28 -05:00
Patrick Schleizer
1199871d7b
undo IPv6 privacy due to potential server issues
...
https://github.com/Kicksecure/security-misc/issues/184
2024-01-07 06:37:34 -05:00
Patrick Schleizer
128bb01b35
undo IPv6 privacy due to potential server issues
...
https://github.com/Kicksecure/security-misc/issues/184
2024-01-07 06:36:25 -05:00
Patrick Schleizer
86f91e3030
revert umask 027 by default
...
because broken because this also happens for root while it should not
https://github.com/Kicksecure/security-misc/issues/185
2024-01-06 09:11:54 -05:00
Patrick Schleizer
3f1304403f
disable MAC randomization in Network Manager (NM) because it breaks VirtualBox DHCP
...
https://github.com/Kicksecure/security-misc/issues/184
2024-01-06 08:15:31 -05:00
Raja Grewal
74afcc9c63
Clarify validity of disabling io_uring
2024-01-03 17:52:23 +11:00
Ben Grande
bc02c72018
Fix unbound variable
...
- Run messages preceded by INFO;
- Comment unknown unused variables;
- Remove unnecessary variables; and
- Deal with unbound variable due to subshell by writing to a file;
2024-01-02 17:08:45 +01:00
Ben Grande
abf72c2ee4
Rename file permission hardening script
...
Hardener as the script is the agent that is hardening the file
permissions.
2024-01-02 13:34:29 +01:00
Ben Grande
f138cf0f78
Refactor permission-hardener
...
- Organize comments from default configuration;
- Apply and undo changes from a single file controlled by parameters;
- Arrays should be evaluated as arrays and not normal variables;
- Quote variables;
- Brackets around variables;
- Standardize test cases to "test" command;
- Test against empty or non-empty variables with "-z" and "-n";
- Show a usage message when necessary;
- Require root to run the script with informative message;
- Permit the user to see the help message without running as root;
- Do not create root directories without passing root check;
- Use long options for "set" command;
2024-01-02 12:17:16 +01:00
Patrick Schleizer
8daf97ab01
Merge pull request #178 from raja-grewal/io_uring
...
Disable asynchronous I/O
2024-01-02 05:29:35 -05:00
Patrick Schleizer
5b36599c0c
/dev/, /dev/shm, /tmp
...
https://github.com/Kicksecure/security-misc/issues/157#issuecomment-1869073716
2023-12-29 14:57:38 -05:00
Patrick Schleizer
c86c83cef7
formatting
...
https://github.com/Kicksecure/security-misc/issues/157
2023-12-25 10:31:58 -05:00
Patrick Schleizer
971ff687b1
do not mount /dev/cdrom by default
...
https://github.com/Kicksecure/security-misc/issues/157
2023-12-25 10:30:35 -05:00
Patrick Schleizer
9fce67fcd9
remove superfluous, broken remount mount option
...
https://github.com/Kicksecure/security-misc/issues/157
2023-12-25 10:28:47 -05:00
Patrick Schleizer
40fd8cb608
no nofail mount option to avoid breaking the boot of a system
...
unit testing belongs elsewhere
https://github.com/Kicksecure/security-misc/issues/157
2023-12-25 09:51:09 -05:00
Patrick Schleizer
4aa645f29f
comment
...
https://github.com/Kicksecure/security-misc/issues/157
2023-12-25 09:46:33 -05:00
Patrick Schleizer
2b7aeedb4a
mount /dev/cdrom to /mnt/cdrom (instead of /mnt/cdrom0) and
...
nodev,nosuid,noexec
as per:
https://www.debian.org/doc/manuals/securing-debian-manual/ch04s10.en.html
https://github.com/Kicksecure/security-misc/issues/157
2023-12-25 09:44:51 -05:00
Patrick Schleizer
0d9e9780da
formatting
...
https://github.com/Kicksecure/security-misc/issues/157
2023-12-25 09:37:14 -05:00
Patrick Schleizer
00f9ab4394
/dev devtmpfs
...
https://github.com/Kicksecure/security-misc/issues/157
2023-12-25 09:36:05 -05:00
Patrick Schleizer
55709b3aa0
/tmp tmpfs
...
https://github.com/Kicksecure/security-misc/issues/157
2023-12-25 09:30:57 -05:00
Patrick Schleizer
b0dd967611
usrmerge
...
https://github.com/Kicksecure/security-misc/issues/157
2023-12-25 09:28:08 -05:00
Patrick Schleizer
269fada14a
combine bind lines
...
https://github.com/Kicksecure/security-misc/issues/157
2023-12-25 09:25:14 -05:00
Raja Grewal
f055fe5da2
Disable asynchronous I/O
...
io_uring creation is disabled for all processes. io_uring_setup always fails with -EPERM. Existing io_uring instances can still be used.
2023-12-15 08:33:36 +00:00
Patrick Schleizer
039de1dc9b
add hardened fstab /usr/share/doc/security-misc/fstab-vm
...
to the documentation folder as an example
not directly used by security-misc
will later be used by Kicksecure VM build process
https://github.com/Kicksecure/security-misc/issues/157
2023-12-12 11:50:11 -05:00
Patrick Schleizer
5a73817a95
move to /usr/lib/issue.d/20_security-misc.issue
...
https://github.com/Kicksecure/security-misc/pull/167
2023-12-04 11:38:49 -05:00
Patrick Schleizer
dc04040cb3
typo
2023-12-04 10:36:48 -05:00
Patrick Schleizer
2634dbff2b
shuffle
2023-12-04 10:36:21 -05:00
Patrick Schleizer
a1e00be0e0
update link
2023-11-06 16:58:23 -05:00
Patrick Schleizer
df5f3e8056
output
2023-11-06 16:36:22 -05:00
Patrick Schleizer
3bc831a1f7
lintian
2023-11-06 16:27:29 -05:00
Patrick Schleizer
ad010ef5b4
debugging
2023-11-05 17:52:44 -05:00
Patrick Schleizer
3130a39d8c
set -e
2023-11-05 17:43:07 -05:00
Patrick Schleizer
36f3c30440
Merge pull request #148 from monsieuremre/module-loading-hardening
...
Harden the loading of new modules to the kernel after install
2023-11-05 17:41:56 -05:00
Patrick Schleizer
4219347f0a
fix permission-hardener config parsing issue
2023-11-05 16:43:44 -05:00
Patrick Schleizer
e72f79236b
refactoring
2023-11-05 16:41:41 -05:00
Patrick Schleizer
dea0d9a78a
fix permission-hardener config parsing issue
2023-11-05 16:40:49 -05:00
Patrick Schleizer
017ae18ad7
fix permission-hardener config parsing issue
2023-11-05 16:39:10 -05:00
Patrick Schleizer
65e3c14643
fix permission-hardener config parsing issue
2023-11-05 16:35:11 -05:00
Patrick Schleizer
d4494fd3c3
disable remount-secure dracut modules
...
pending new systemd based implementation
https://github.com/Kicksecure/security-misc/pull/152
2023-11-05 15:27:09 -05:00
Patrick Schleizer
4a19fbae0b
move permission-hardening to /usr/bin to make it more easily accessible
2023-11-05 15:13:01 -05:00
Patrick Schleizer
c75f80b29f
lower verbosity of permission hardener
...
fixes https://github.com/Kicksecure/security-misc/issues/158
2023-11-05 15:09:29 -05:00
Patrick Schleizer
55ba5d4832
renamed: usr/lib/NetworkManager/conf.d/99_ipv6-privacy.conf -> usr/lib/NetworkManager/conf.d/80_ipv6-privacy.conf
...
renamed: usr/lib/NetworkManager/conf.d/99_randomize-mac.conf -> usr/lib/NetworkManager/conf.d/80_randomize-mac.conf
renamed: usr/lib/systemd/networkd.conf.d/99_ipv6-privacy-extensions.conf -> usr/lib/systemd/networkd.conf.d/80_ipv6-privacy-extensions.conf
2023-11-05 14:51:31 -05:00
Patrick Schleizer
5a75bcfb19
Merge pull request #145 from monsieuremre/wifi-and-bluetooth
...
Wifi and Bluetooth Patch | Security and Privacy
2023-11-05 14:49:00 -05:00
Patrick Schleizer
d9b5d770cf
Merge pull request #150 from monsieuremre/sysreq
...
Disable SysRq by default
2023-11-05 14:31:26 -05:00
monsieuremre
19eceaa810
more fix
2023-11-04 20:56:46 +00:00
Patrick Schleizer
d71ac03d96
comment
2023-11-03 10:36:15 -04:00
Patrick Schleizer
b85d48eb83
do not change default umask for root
...
since this causes permission issues in `/etc/`
https://github.com/Kicksecure/security-misc/pull/151
2023-11-03 10:31:59 -04:00
Patrick Schleizer
07540db90d
Revert "Revert "set default umask to 027""
...
This reverts commit f8913ceb2e
2023-11-03 09:45:12 -04:00
Patrick Schleizer
f8913ceb2e
Revert "set default umask to 027"
...
This reverts commit cd216095eb
2023-11-03 09:43:44 -04:00
Patrick Schleizer
cd216095eb
set default umask to 027
...
using package libpam-umask
https://www.debian.org/doc/manuals/securing-debian-manual/ch04s11.en.html#id-1.5.14.19
https://github.com/Kicksecure/security-misc/pull/151
2023-11-03 09:12:24 -04:00
monsieuremre
ac224b270a
disable sysrq
2023-11-02 13:01:55 +00:00
monsieuremre
9f063584c1
disable-kernel-module-loading
2023-11-02 10:28:41 +00:00
monsieuremre
229032d691
Rename etc/systemd/networkd.conf.d/99_ipv6-privacy-extensions.conf to usr/lib/systemd/networkd.conf.d/99_ipv6-privacy-extensions.conf
2023-11-01 17:54:05 +00:00
monsieuremre
1049298e7b
Update and rename etc/NetworkManager/conf.d/99_randomize-mac.conf to usr/lib/NetworkManager/conf.d/99_randomize-mac.conf
2023-11-01 17:52:40 +00:00
monsieuremre
76e684cc0a
Update and rename etc/NetworkManager/conf.d/99_ipv6-privacy.conf to usr/lib/NetworkManager/conf.d/99_ipv6-privacy.conf
2023-11-01 17:51:27 +00:00
monsieuremre
c975c3c0ff
new lines 990-security-misc.conf
...
added new recommended hardening settings with comments
2023-10-27 11:07:53 +00:00
Patrick Schleizer
a330a9fd75
refactor permission-lockdown
2023-10-26 19:20:21 -04:00
Patrick Schleizer
8bf5ff82be
Merge remote-tracking branch 'github-kicksecure/master'
2023-10-26 19:15:04 -04:00
Patrick Schleizer
1123d23114
remount-secure: disable debugging to save space in initrd
2023-10-26 18:45:07 -04:00
monsieuremre
91c445244c
actually we do it once indeed
2023-10-26 19:41:07 +00:00
monsieuremre
88f396264c
avoiding /etc/passwd
2023-10-26 19:35:59 +00:00
monsieuremre
b5ba03247a
readability
2023-10-26 19:31:25 +00:00
monsieuremre
f487752ba1
not limiting ourselves. we do not do this not just once.
2023-10-26 19:30:58 +00:00
monsieuremre
88cd5a905d
strip unnecessary
2023-10-26 19:25:24 +00:00
monsieuremre
d9f10c221a
new permission-lockdown
2023-10-26 18:17:50 +00:00
Patrick Schleizer
e5d989af5a
comment
2023-10-26 12:04:13 -04:00
Patrick Schleizer
6a22351d29
renamed: usr/lib/sysctl.d/30_security-misc.conf -> usr/lib/sysctl.d/990-security-misc.conf
2023-10-25 17:30:07 -04:00
Patrick Schleizer
b7c52800f4
renamed: etc/sysctl.d/30_security-misc.conf -> usr/lib/sysctl.d/30_security-misc.conf
...
renamed: etc/sysctl.d/30_security-misc_kexec-disable.conf -> usr/lib/sysctl.d/30_security-misc_kexec-disable.conf
renamed: etc/sysctl.d/30_silent-kernel-printk.conf -> usr/lib/sysctl.d/30_silent-kernel-printk.conf
2023-10-25 17:28:43 -04:00
monsieuremre
f0857fd560
Fix double mount issue for /var/log and /var/tmp
...
Mounting var with bind and mounting a subdirectory causes /var/tmp and /var/log bind mounted twice each. can be checked with lsblk. When we bind mount var only after having mounted the subdirectories, everything is mounted only one.
2023-10-23 15:33:05 +00:00
Patrick Schleizer
d2e8a6dad3
debugging
2023-10-22 19:21:51 -04:00
Patrick Schleizer
e7aafd64d4
refactoring
2023-10-22 19:16:12 -04:00
Patrick Schleizer
d521662d04
comment
2023-10-22 16:49:36 -04:00
Patrick Schleizer
0e80acf38d
fix
2023-10-22 16:45:10 -04:00
Patrick Schleizer
5182d7502b
improve remount-secure
2023-10-22 16:08:21 -04:00
Patrick Schleizer
a88c0a3ad2
fix
2023-10-22 15:44:30 -04:00
Patrick Schleizer
a7629b98cf
fix
2023-10-22 15:40:49 -04:00
Patrick Schleizer
7112eac3be
output
2023-10-22 15:37:21 -04:00
Patrick Schleizer
f80b5fe376
fix
2023-10-22 15:36:16 -04:00
Patrick Schleizer
ce0babce21
comment
2023-10-22 15:35:03 -04:00
Patrick Schleizer
70cbe4daaa
fix
2023-10-22 15:33:11 -04:00
Patrick Schleizer
9b9e9ce1c0
fix
2023-10-22 15:27:01 -04:00
Patrick Schleizer
3731716a49
fix
2023-10-22 15:14:22 -04:00
Patrick Schleizer
eec87a0508
fix
2023-10-22 15:11:26 -04:00
Patrick Schleizer
f3286cf440
fix
2023-10-22 15:10:21 -04:00
Patrick Schleizer
eb90d38d8c
fix
2023-10-22 15:05:33 -04:00
Patrick Schleizer
7f03c2b137
fix
2023-10-22 14:45:45 -04:00
Patrick Schleizer
c85db586ca
improve
2023-10-22 14:44:58 -04:00
Patrick Schleizer
7c0ea4324a
fix
2023-10-22 14:39:52 -04:00
Patrick Schleizer
6198ae317c
fix
2023-10-22 14:29:02 -04:00
Patrick Schleizer
245fad0986
fix
2023-10-22 14:00:06 -04:00
Patrick Schleizer
619f1705e1
output
2023-10-22 13:58:55 -04:00
Patrick Schleizer
52fa7db087
output
2023-10-22 13:57:38 -04:00
Patrick Schleizer
8a592c2e37
fix remountsecure kernel parameter logic
2023-10-22 13:56:17 -04:00
Patrick Schleizer
e689f38ad0
todo
2023-10-22 13:31:44 -04:00
Patrick Schleizer
6675a2e931
fix
2023-10-22 13:30:50 -04:00
Patrick Schleizer
4288e10554
fix, rework remount-secure kernel parameters parsing
2023-10-22 13:25:31 -04:00
Patrick Schleizer
b0181af099
fix
2023-10-22 13:12:25 -04:00
Patrick Schleizer
28cb53341d
remount-secure dracut module: improve output
2023-10-22 13:11:44 -04:00
Patrick Schleizer
84ca0ac8a0
improve remount-secure
2023-10-22 12:54:25 -04:00
Patrick Schleizer
e7d30955e8
debugging
2023-10-22 11:28:08 -04:00
Patrick Schleizer
8eb4607a0e
improve
2023-10-22 11:12:54 -04:00
Patrick Schleizer
f1da0ce746
fix
2023-10-22 11:11:10 -04:00
Patrick Schleizer
26826e8398
fix
2023-10-22 11:06:34 -04:00
Patrick Schleizer
233fa4625b
output
2023-10-22 10:49:53 -04:00
Patrick Schleizer
3ebe8cf4de
refactoring
2023-10-22 10:41:42 -04:00
Patrick Schleizer
24d2e26397
no longer reproducible
2023-10-22 10:40:19 -04:00
Patrick Schleizer
fcba70df2e
refactoring
2023-10-22 10:38:48 -04:00
Patrick Schleizer
a05bd3dd0e
/home last because most likely to fail
2023-10-22 10:37:02 -04:00
Patrick Schleizer
41077c94fb
improve remount-secure
2023-10-22 10:32:24 -04:00
Patrick Schleizer
ef69e512bd
refactoring
2023-10-22 10:25:57 -04:00
Patrick Schleizer
d5cb7ecec9
use findmnt
2023-10-22 10:22:21 -04:00
Patrick Schleizer
45ce0ff74d
debugging
2023-10-22 10:16:43 -04:00
Patrick Schleizer
b81a991731
fix
2023-10-22 10:15:11 -04:00
Patrick Schleizer
292a5c3a8a
fix
2023-10-22 10:11:31 -04:00
Patrick Schleizer
bb57b1a289
fix
2023-10-22 10:10:51 -04:00
Patrick Schleizer
181a642479
root check
2023-10-22 10:01:38 -04:00
Patrick Schleizer
84fd41931c
/var/run -> /run
2023-10-22 09:44:17 -04:00
Patrick Schleizer
33d97a2560
improve output of remount-secure dracut module
2023-10-22 09:39:54 -04:00
Patrick Schleizer
c409e3221e
implement remount-secure
2023-10-22 09:36:03 -04:00
Patrick Schleizer
90f2b5e11c
code simplification
2023-10-22 08:51:37 -04:00
Patrick Schleizer
167683ce76
code simplification
2023-10-22 08:50:57 -04:00
Patrick Schleizer
e065f85c88
add remount-secure dracut module
2023-10-22 08:10:48 -04:00
Patrick Schleizer
f0ee470ecd
comment
2023-10-22 07:51:05 -04:00
Patrick Schleizer
e257f2a380
remount-secure:
...
no longer use /usr/libexec/helper-scripts/pre.bsh as not simple with dracut
2023-10-22 07:50:14 -04:00
