|
|
0c5848494b
|
do not remount if already has intended mount options
|
2019-12-21 04:21:26 -05:00 |
|
|
|
203f4ad46e
|
refactoring
|
2019-12-21 04:17:10 -05:00 |
|
|
|
e7fd0dadb0
|
output
|
2019-12-21 04:09:35 -05:00 |
|
|
|
e6ea21c775
|
record existing modes in separate dpkg-statoverwrite databases
to have a history of what was modified and to allow to undo changes
|
2019-12-21 04:08:35 -05:00 |
|
|
|
89be5f2ecb
|
bumped changelog version
12.0-1
|
2019-12-21 02:05:39 -05:00 |
|
|
|
d220bb3bc4
|
suid /usr/lib/chromium/chrome-sandbox whitelist
|
2019-12-20 13:07:01 -05:00 |
|
|
|
77b3dd5d6b
|
comments
|
2019-12-20 13:02:33 -05:00 |
|
|
|
d7bd477e73
|
add "/usr/lib/xorg/Xorg.wrap whitelist"
until this is researched
https://manpages.debian.org/buster/xserver-xorg-legacy/Xorg.wrap.1.en.html
https://lwn.net/Articles/590315/
|
2019-12-20 12:59:27 -05:00 |
|
|
|
17e8605119
|
add matchwhitelist feature
add "/usr/lib/virtualbox/ matchwhitelist"
|
2019-12-20 12:57:24 -05:00 |
|
|
|
3fab387669
|
suid /usr/bin/firejail whitelist
There is a controversy about firejail but those who choose to install it
should be able to use it.
https://www.whonix.org/wiki/Dev/Firejail#Security
|
2019-12-20 12:50:35 -05:00 |
|
|
|
d3f16a5bf4
|
sgid /usr/lib/qubes/qfile-unpacker whitelist
|
2019-12-20 12:47:10 -05:00 |
|
|
|
508ec0c6fa
|
comment
|
2019-12-20 12:34:07 -05:00 |
|
|
|
1b569ea790
|
comment
|
2019-12-20 12:32:36 -05:00 |
|
|
|
f88ca25889
|
fix terminology, sguid -> sgid
Thanks to @madaidan for the bug report!
https://forums.whonix.org/t/permission-hardening/8655/21
|
2019-12-20 11:58:07 -05:00 |
|
|
|
1cd5fb6a00
|
bumped changelog version
11.9-1
|
2019-12-20 11:50:25 -05:00 |
|
|
|
ff0a26fb5d
|
comment
|
2019-12-20 11:49:19 -05:00 |
|
|
|
71496a33ab
|
skip folders are these are not suid / guid
|
2019-12-20 11:47:53 -05:00 |
|
|
|
9321ecff41
|
no more need to add/remove /
|
2019-12-20 11:43:53 -05:00 |
|
|
|
b95225b6a6
|
pipefail
|
2019-12-20 11:37:05 -05:00 |
|
|
|
cad6f328f4
|
minor
|
2019-12-20 11:34:44 -05:00 |
|
|
|
3265f9894d
|
output
|
2019-12-20 11:27:43 -05:00 |
|
|
|
28d12c3966
|
bumped changelog version
11.8-1
|
2019-12-20 11:09:22 -05:00 |
|
|
|
1615ebec58
|
output
|
2019-12-20 11:07:44 -05:00 |
|
|
|
1e11b775cf
|
output
|
2019-12-20 11:05:05 -05:00 |
|
|
|
731f802895
|
output
|
2019-12-20 11:04:12 -05:00 |
|
|
|
cd8efe5800
|
output
|
2019-12-20 11:03:22 -05:00 |
|
|
|
c0ddb76d74
|
bumped changelog version
11.7-1
|
2019-12-20 10:50:51 -05:00 |
|
|
|
b31abea0af
|
improve error handling
|
2019-12-20 10:49:31 -05:00 |
|
|
|
79cd3b86b6
|
comment
|
2019-12-20 10:47:23 -05:00 |
|
|
|
b3458cc6ee
|
fix checking existing entries to avoid needless calls to dpkg-statoverride
|
2019-12-20 10:45:59 -05:00 |
|
|
|
370f3c5e54
|
comment
|
2019-12-20 10:35:05 -05:00 |
|
|
|
133d09f298
|
output
|
2019-12-20 10:33:16 -05:00 |
|
|
|
1ffa8e197e
|
speed up setuid removal by using find with '-perm /u=s,g=s'
https://forums.whonix.org/t/permission-hardening/8655/19
|
2019-12-20 10:31:26 -05:00 |
|
|
|
4cfdf2c65b
|
fix, re-enforce nosuid even if changed on the disk
|
2019-12-20 10:21:27 -05:00 |
|
|
|
e36868e675
|
output
|
2019-12-20 10:02:46 -05:00 |
|
|
|
50b8f65490
|
add sanity test: count if we really processed all files
|
2019-12-20 09:59:28 -05:00 |
|
|
|
e28da89253
|
/bin/sudo whitelist / /bin/bwrap whitelist
|
2019-12-20 09:48:06 -05:00 |
|
|
|
55faa7b997
|
fix missing processing files bug
https://forums.whonix.org/t/permission-hardening/8655/16
|
2019-12-20 09:43:23 -05:00 |
|
|
|
fbe2479f48
|
count processed file system objects
to be able to verify if any were "forgotten"
|
2019-12-20 08:54:56 -05:00 |
|
|
|
195ea522f5
|
fix
|
2019-12-20 08:52:14 -05:00 |
|
|
|
6f8231be70
|
debugging
|
2019-12-20 08:51:55 -05:00 |
|
|
|
ed50f98010
|
output
|
2019-12-20 08:47:22 -05:00 |
|
|
|
089c40135f
|
bumped changelog version
11.6-1
|
2019-12-20 08:15:00 -05:00 |
|
|
|
6d30e3b4a2
|
do not remove suid from whitelisted binaries ever
https://forums.whonix.org/t/permission-hardening/8655/13
|
2019-12-20 08:13:23 -05:00 |
|
|
|
d5f1bd8dd2
|
fix mode sanity check
no longer use seq due to issue
https://forums.whonix.org/t/permission-hardening/8655/13
|
2019-12-20 08:02:30 -05:00 |
|
|
|
ddc0eec63d
|
bumped changelog version
11.5-1
|
2019-12-20 07:12:36 -05:00 |
|
|
|
65248a94ef
|
readme
|
2019-12-20 07:06:50 -05:00 |
|
|
|
8e112c3423
|
description
|
2019-12-20 06:53:24 -05:00 |
|
|
|
24ea70384b
|
description
|
2019-12-20 06:53:03 -05:00 |
|
|
|
0ae3e689b5
|
comment
|
2019-12-20 06:35:02 -05:00 |
|
