Commit Graph

178 Commits

Author SHA1 Message Date
024a698249 Update control 2019-06-30 00:20:38 +00:00
230ef34db4 Create disable-coredumps.conf 2019-06-30 00:19:04 +00:00
1bf802f846 Create coredumps.conf 2019-06-30 00:16:50 +00:00
f040081a59 Prevent setuid processes from creating coredumps. 2019-06-30 00:13:52 +00:00
c6b669f1a5 Create disable-coredumps.conf 2019-06-30 00:11:13 +00:00
24b19c5976 bumped changelog version 3.8-1 2019-06-29 10:35:13 +00:00
befa03fea8 fix lintian warning 2019-06-29 10:34:48 +00:00
250919b821 Merge remote-tracking branch 'origin/master' 2019-06-29 06:06:02 -04:00
60e6dfcbff Merge pull request #15 from madaidan/patch-11
Update control
2019-06-29 10:05:34 +00:00
9e9c854d27 Update control 2019-06-28 11:34:35 +00:00
b26d861dff Update control 2019-06-28 11:33:48 +00:00
ecf5d80fdf bumped changelog version 3.7-1 2019-06-28 07:20:53 +00:00
36c2b1d283 fix lintian warning 2019-06-28 07:18:30 +00:00
a978fe1000 chmod +x usr/lib/security-misc/remove-system.map 2019-06-28 07:17:35 +00:00
fe69dc6173 bumped changelog version 3.6-1 2019-06-28 07:09:35 +00:00
6a6afc347a update files list 2019-06-28 03:02:49 -04:00
ccb89cfd55 Merge remote-tracking branch 'origin/master' 2019-06-28 03:00:21 -04:00
ab312235ba Merge pull request #14 from madaidan/patch-10
Add some hardening for other distributions
2019-06-28 06:59:16 +00:00
5e02100e34 Merge pull request #13 from madaidan/patch-9
Remove System.map and restrict the SysRq key.
2019-06-28 06:58:32 +00:00
7e12e16dc0 Merge pull request #11 from madaidan/patch-7
Protect against DMA attacks
2019-06-28 06:57:42 +00:00
3801a53a9e Update tcp_hardening.conf 2019-06-27 18:17:58 +00:00
c54125270b Create dmesg_restrict.conf 2019-06-27 18:15:57 +00:00
b809185008 Update remove-system-map.service 2019-06-27 16:09:52 +00:00
9392c8deb2 Update remove-system.map 2019-06-26 15:03:54 +00:00
8ef0db17e6 Use a for loop to detect if System.map exists 2019-06-26 12:59:45 +00:00
3116a56f13 Create remove-system-map.service 2019-06-25 19:25:32 +00:00
382e336f69 Create remove-system.map 2019-06-25 19:20:27 +00:00
01c839c815 Restrict what the SysRq key can do 2019-06-25 19:16:43 +00:00
0a0be1ad28 bumped changelog version 3.5-1 2019-06-23 19:57:42 +00:00
7806af1419 readme 2019-06-23 19:51:53 +00:00
4e32438d75 debian/control syntax fix 2019-06-23 19:47:05 +00:00
a098b18560 Merge remote-tracking branch 'origin/master' 2019-06-23 19:46:30 +00:00
90d676ec18 Merge pull request #12 from madaidan/patch-8
Update control
2019-06-23 19:45:31 +00:00
1a07d90ed2 Update control 2019-06-23 19:26:03 +00:00
2a6289980e syntax fix
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX mds=full,nosmt"

https://forums.whonix.org/t/kernel-hardening/7296/70
2019-06-23 18:46:52 +00:00
f1147318c0 Merge remote-tracking branch 'origin/master' 2019-06-23 18:45:41 +00:00
aec6da28e9 Merge pull request #10 from madaidan/patch-6
Enable more kernel hardening parameters
2019-06-23 18:45:24 +00:00
641407c8e9 Enable IOMMU 2019-06-23 18:38:50 +00:00
07c6362f1a Blacklist thunderbolt and firewire 2019-06-23 18:34:45 +00:00
2178fb37a8 Add more kernel hardening parameters 2019-06-23 17:54:34 +00:00
cd7346699c bumped changelog version 3.4-1 2019-06-23 12:22:13 +00:00
60334797d0 /etc/sysctl.d/tcp_sack.conf 2019-06-23 09:00:12 +00:00
d404624bac bumped changelog version 3.3-1 2019-06-23 08:38:01 +00:00
ae50d81342 Merge remote-tracking branch 'origin/master' 2019-06-23 03:59:58 -04:00
cd7172c00c Merge pull request #9 from madaidan/patch-5
Disables SACK.
2019-06-23 07:59:35 +00:00
807ac7d659 Create tcp_sack.conf 2019-06-22 16:08:30 +00:00
5269cfeef9 bumped changelog version 3.2-1 2019-06-21 05:40:04 +00:00
0a5b15ff45 Merge remote-tracking branch 'origin/master' 2019-06-21 04:05:50 +00:00
f9dc1b6322 Merge pull request #8 from marmarek/packaging
qubes-builder integration
2019-06-20 23:54:58 -04:00
2e81885f69 Add rpm packaging
QubesOS/qubes-issues#1885
2019-06-21 04:52:01 +02:00