c7e9460b2a
output
2024-11-14 16:31:12 -05:00
7c06e22c7d
deleted /usr/bin/pkexec.security-misc
...
This was not used anymore for anything. In the past, we used to `config-package-dev` `replace` `/usr/bin/pkexec` with `/usr/bin/pkexec.security-misc` for the purpose of:
> Redirect calls for pkexec to lxqt-sudo because pkexec is incompatible with hidepid.
* https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860040
* https://forums.whonix.org/t/cannot-use-pkexec/8129
This was a worthwhile effort, interesting approach but ultimately a dead-end.
2024-11-11 05:43:25 -05:00
5bd0a277bf
fix permission-hardener issue "Removing capabilities failed. File: '/bin/ping'"
...
no longer user end-of-options marker (`--`) for `setcap`
since setcap does not support it
Fixes https://github.com/QubesOS/qubes-issues/issues/9569
https://forums.whonix.org/t/permission-hardener-error/20719
2024-11-10 06:29:17 -05:00
305467c652
Merge pull request #245 from raja-grewal/blacklist_to_disable
...
Update `/etc/modprobe.d/*`
2024-08-16 04:25:43 -04:00
a5373afc55
Details on disabled fbdev
kernel modules
2024-08-07 14:44:14 +10:00
e98dc8c4f8
Update notifications for disabled kernel modules
2024-08-07 14:14:47 +10:00
e2ae93a957
port to safe_echo
2024-07-26 10:30:45 -04:00
8ec23ed712
echo does not support end-of-options
2024-07-26 10:28:57 -04:00
6096ed1109
comment
2024-07-26 10:26:43 -04:00
ac41d1cfff
comment
2024-07-26 10:25:59 -04:00
3b033ceba2
shellcheck
2024-07-26 10:17:24 -04:00
04d9ca1ebe
use find
with safe_echo_nonewline
2024-07-26 10:16:20 -04:00
20454fb811
Merge branch 'Kicksecure:master' into blacklist_to_disable
2024-07-27 00:09:30 +10:00
6bbf176e3b
consider end-of-options for find
2024-07-26 09:33:45 -04:00
794f6a25fa
comment
2024-07-26 09:08:29 -04:00
7e0f1a8701
dpkg-statoverride can actually handle '--file-name'.
2024-07-26 09:08:04 -04:00
ee037c01a1
Skip file names starting with '--',
...
because this would be interpreted by dpkg-statoverride as an option.
2024-07-26 08:58:44 -04:00
82d401a7de
sanity test
2024-07-26 08:52:42 -04:00
0e661bc688
output
2024-07-26 08:49:14 -04:00
d144f68d1a
output
2024-07-26 08:46:08 -04:00
05504b9ab2
minor
2024-07-26 08:40:10 -04:00
d96c0633d4
more use of end of options
2024-07-26 08:39:11 -04:00
8e40c10c31
comment
2024-07-26 08:31:17 -04:00
f2c9c2f5d1
output
2024-07-26 08:26:16 -04:00
2b40ea75e9
cleanup
2024-07-26 08:24:23 -04:00
6f0551b944
refactoring
2024-07-26 08:23:54 -04:00
aac450f808
refactoring
2024-07-26 08:22:04 -04:00
30f46790a4
use end of options whenever possible
2024-07-26 08:21:21 -04:00
95722d6d79
use long option name
2024-07-26 08:13:33 -04:00
19f131c742
code simplification
...
https://github.com/Kicksecure/security-misc/pull/251
2024-07-26 08:07:08 -04:00
9694cf0cd1
output
2024-07-26 07:43:59 -04:00
652a06c8e9
Only print SUID or SGID values when set
2024-07-25 12:37:21 +02:00
3b8a3f9b83
Unduplicate stat call
2024-07-25 12:20:16 +02:00
9231f05891
todo
2024-07-24 13:31:49 -04:00
4cc1289e89
output
2024-07-24 13:30:30 -04:00
10c73b326f
fix delimiter parsing
2024-07-24 12:07:26 -04:00
a16dd8474b
sanity test
2024-07-24 11:50:30 -04:00
cc2b335ee6
cleanup
2024-07-24 11:48:32 -04:00
6cadc70a96
output
2024-07-24 11:47:52 -04:00
cda0d26af7
cannot use NULL inside a bash variable
...
use custom delimiter instead
2024-07-24 11:45:13 -04:00
4a5312b3a9
output
2024-07-24 11:27:51 -04:00
3bf1f26c0b
downgrade warning of non-existing folders to info
...
to avoid all users by default getting a warning for expected non-existing folders
2024-07-24 11:20:26 -04:00
151ca659a9
output
2024-07-24 11:19:15 -04:00
c9fd2ceb61
downgrade warning of non-existing files to info
...
to avoid all users by default getting a warning for expected non-existing files
2024-07-24 11:13:35 -04:00
721392901b
remove duplicate test
2024-07-24 11:12:39 -04:00
9712b5b4e3
output
2024-07-24 11:12:18 -04:00
00911df5c1
modify call of stat to use NUL delimiter
...
for more robust string parsing
2024-07-24 11:10:56 -04:00
d536683511
local clean_output_prefix clean_output
2024-07-24 11:03:28 -04:00
a6e517736b
local stat_output
2024-07-24 11:02:25 -04:00
ced02fb9e0
add sanity test for file_name output from stat
2024-07-24 11:01:24 -04:00