Commit Graph

228 Commits

Author SHA1 Message Date
40707e70db Redirect calls for pkexec to lxqt-sudo because pkexec is incompatible with hidepid.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860040

https://forums.whonix.org/t/cannot-use-pkexec/8129

Thanks to AnonymousUser for the bug report!
2019-10-21 05:46:49 -04:00
31b771ac2e bumped changelog version 2019-10-18 10:39:43 +00:00
957deac5cb fix lintian warning
W: security-misc: maintainer-script-should-not-parse-etc-passwd-or-group preinst:19
2019-10-18 10:38:25 +00:00
d301e7f365 description, fix lintian warning 2019-10-18 10:36:44 +00:00
ce6b64a9ba bumped changelog version 2019-10-18 08:55:07 +00:00
c9d75ef9ea abort installation if no user is part of group sudo
https://forums.whonix.org/t/is-security-misc-suitable-for-hardening-bridges-and-relays/8299/4

Thanks to minimal for the bug report!
2019-10-17 06:46:47 -04:00
8a42c5b023 Merge pull request #34 from madaidan/whitelist
Add a whitelist for /sys and /proc/cpuinfo
2019-10-17 09:59:12 +00:00
259b1f2c71 Update control 2019-10-16 19:21:24 +00:00
af607d5eb2 Create sysfs and cpuinfo groups 2019-10-15 21:02:03 +00:00
4b1b3b7d66 bumped changelog version 2019-10-14 10:23:01 +00:00
8b4f2befd4 comment out sack by default
https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109/8?u=patrick
2019-10-05 13:15:34 +00:00
02096f8d7c Revert "undo Disabling TCP SACK, DSACK, FACK"
This reverts commit 5fb4eb8e56.
2019-10-05 13:13:46 +00:00
62a0239207 bumped changelog version 2019-10-05 11:33:15 +00:00
5fb4eb8e56 undo Disabling TCP SACK, DSACK, FACK
https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109/5
2019-10-05 07:00:47 -04:00
213aef6eb9 bumped changelog version 2019-10-05 09:40:26 +00:00
ec5fcf813b Update control 2019-10-03 20:50:48 +00:00
ddc778b452 bumped changelog version 2019-09-16 13:34:11 +00:00
c2e444479c bumped changelog version 2019-09-15 14:08:13 +00:00
619550da23 description 2019-09-15 14:00:24 +00:00
b95b66e429 description 2019-09-15 13:56:37 +00:00
ae804a15e7 description 2019-09-15 13:21:02 +00:00
3d187dab99 bumped changelog version 2019-09-12 12:50:42 +00:00
f13a73e569 undo SysRq restrictions
https://forums.whonix.org/t/sysrq-magic-sysrq-key/8079
2019-09-10 12:35:42 -04:00
1f75a10650 bumped changelog version 2019-09-09 12:10:24 +00:00
9d875d7c31 bumped changelog version 2019-09-07 06:11:32 +00:00
8132052ce0 run update-grub from postinst so /etc/default/grub.d changes take effect 2019-09-07 05:44:23 +00:00
661bcd8603 allow loading unsigned modules due to issues
https://forums.whonix.org/t/allow-loading-signed-kernel-modules-by-default-disallow-kernel-module-loading-by-default/7880/23
2019-09-07 05:39:56 +00:00
9ee9309f54 bumped changelog version 2019-09-06 13:04:57 +00:00
ea0779e42a rm_conffile /etc/sudoers.d/umask-security-misc 2019-09-06 13:00:20 +00:00
3a9939dccb bumped changelog version 2019-09-06 11:47:40 +00:00
5960c1682a description 2019-09-06 11:46:22 +00:00
fccfacfdaf description 2019-09-06 11:45:54 +00:00
610d3488e9 bumped changelog version 2019-09-06 09:33:06 +00:00
0e20e33d16 description 2019-09-05 02:31:57 -04:00
0b3dcef13d description 2019-09-05 02:30:40 -04:00
f2e5883b4c description 2019-09-05 02:29:48 -04:00
a4913ae092 description 2019-09-05 02:28:43 -04:00
a2aeb401a2 bumped changelog version 2019-08-31 13:44:37 +00:00
3a5bdddf5c depend on adduser 2019-08-31 08:43:46 -04:00
8bbebf64cf bumped changelog version 2019-08-24 16:41:27 +00:00
0ae5c5ff14 remove umask changes since these are causing issues are are not needed anymore
thanks to home folder permission lockdown

https://forums.whonix.org/t/change-default-umask/7416/45
2019-08-24 12:14:22 -04:00
41c4682280 bumped changelog version 2019-08-23 16:57:12 +00:00
a74b983283 remove LLC - IEEE 802.2 from blacklist
since required by KVM

https://forums.whonix.org/t/whonix-desktop-installer-with-calamares-field-report/7350/107

https://forums.whonix.org/t/blacklist-uncommon-network-protocols/7391/22

https://github.com/Whonix/security-misc/pull/29
2019-08-19 12:46:59 +00:00
e15b560305 bumped changelog version 2019-08-17 10:54:08 +00:00
e535232728 description 2019-08-17 10:37:49 +00:00
7ffdd7c240 description 2019-08-17 10:37:42 +00:00
207399439f description 2019-08-17 10:37:36 +00:00
d4fb485e70 description 2019-08-17 10:35:31 +00:00
e0e25364e2 bumped changelog version 2019-08-17 09:57:48 +00:00
ed90d8b025 change default umask to 027
as per:

https://forums.whonix.org/t/change-default-umask/7416/47
2019-08-17 09:55:20 +00:00