Commit Graph

892 Commits

Author SHA1 Message Date
3e29761560 debug at the end 2019-07-31 03:17:06 -04:00
5cdb3edb32 usr/share/pam-configs/wheel -> usr/share/pam-configs/security-misc 2019-07-31 03:16:41 -04:00
3f9437f1ec Revert "set back to default group "root" rather than group "sudo" membership required to use su"
This reverts commit 2f276cdb10.
2019-07-17 14:25:19 -04:00
2f276cdb10 set back to default group "root" rather than group "sudo" membership required to use su
since root login will be locked by default anyhow

Thanks to @madaidan for providing the rationale!

https://forums.whonix.org/t/restrict-root-access/7658/42
2019-07-15 08:44:28 -04:00
6d1e8ac9a4 description 2019-07-14 11:16:49 +00:00
ffb61f43ea fix, add 'group=sudo' and 'debug' for debugging
https://forums.whonix.org/t/restrict-root-access/7658
2019-07-14 11:11:59 +00:00
6af2d7facb copyright 2019-07-13 18:12:25 +00:00
75f0ca565d set -e 2019-07-13 18:12:04 +00:00
c389e13e1a use pre.bsh 2019-07-13 17:59:49 +00:00
e9eb38b5db formatting 2019-07-13 15:04:09 +00:00
cb668459e8 port umask from /etc/pam.d to /usr/share/pam-configs implementation
https://forums.whonix.org/t/change-default-umask/7416
2019-07-13 10:35:10 -04:00
69b97981f3 convert etc/pam.d/su.security-misc to usr/share/pam-configs/wheel
https://forums.whonix.org/t/restrict-root-access/7658/32
2019-07-13 12:33:51 +00:00
bea98474ba chmod +x usr/lib/security-misc/panic-on-oops 2019-07-11 07:07:21 +00:00
52c61011d4 Create panic-on-oops 2019-07-08 22:58:56 +00:00
a978fe1000 chmod +x usr/lib/security-misc/remove-system.map 2019-06-28 07:17:35 +00:00
9392c8deb2 Update remove-system.map 2019-06-26 15:03:54 +00:00
8ef0db17e6 Use a for loop to detect if System.map exists 2019-06-26 12:59:45 +00:00
382e336f69 Create remove-system.map 2019-06-25 19:20:27 +00:00
f9acd890a7 lintian 2019-06-09 10:24:24 +00:00
c040117fe4 lintian 2019-05-12 10:50:34 +00:00
6ba1fb70d2 port to debian buster 2019-04-05 14:06:00 -04:00
811dcee2cb fix lintian warning 2019-04-05 09:26:18 -04:00
5b3fc2f6b9 update copyright 2018-01-29 15:22:05 +00:00
c3b6a44e97 update copyright 2018-01-29 15:15:17 +00:00
ff28f5932c update copyright 2018-01-29 15:09:42 +00:00
f6bc188485 comment 2017-02-28 15:22:54 +01:00
18e23af784 cleanup 2017-02-27 23:59:37 +00:00
6195450eb2 No longer ignore duplicate apt sources in apt-get-wrapper.
No longer acceptable because these generate lots of noise in the terminal.
2017-02-27 23:57:04 +00:00
191918027c adjust apt-get-wrapper for Debian stretch's apt-get 2017-02-27 23:43:02 +00:00
2130b4c654 use python rather than unbuffer
because unbuffer eats exit code when process is killed
2017-02-27 23:16:32 +00:00
cc351165dc apt-get-wrapper:
- fix exit code handling
- code simplification
2017-02-27 19:36:38 +00:00
5653b7732a fix, show progress during apt-get-wrapper
fix, propagate signals to apt-get child process
2017-02-26 23:57:17 +00:00
49cde21078 Whonix 14 KDE plasma 5 fixes
https://phabricator.whonix.org/T633
2017-02-21 19:54:41 +00:00
5ba2a5b6ff disable previews in nautilus by default for better security
copied solution by @unman

https://github.com/QubesOS/qubes-issues/issues/1108

https://github.com/QubesOS/qubes-core-agent-linux/pull/39

https://phabricator.whonix.org/T500
2017-02-19 22:25:28 +00:00
bddbba84a6 "$@" 2017-02-14 17:30:31 +00:00
9b0d3e34fc add usr/lib/security-misc/apt-get-update-sanity-test
a CVE-2016-1252 sanity test script
2017-02-14 02:37:08 +00:00
90f175e117 double apt-get-update wrapper timeout from 120 to 240 seconds
since it takes a bit longer than 120 seconds for me on a fast connection
2017-02-08 14:26:26 +00:00
0cf6524f0f apt-get-update: implement SIGINIT trap; hide 'ps' output 2016-12-25 02:33:44 +00:00
c4089d8d40 update path to /usr/lib/security-misc/apt-get-wrapper 2016-12-25 01:36:04 +00:00
7b01fb9341 remove obsolete comments 2016-12-25 01:35:17 +00:00
8160cfe1d7 moved apt-get-update and apt-get-wrapper from whonixcheck to security-misc 2016-12-25 01:29:31 +00:00
d3ccf0eeaf initial commit 2015-12-15 02:00:24 +00:00