|
|
43d13b70f1
|
Merge remote-tracking branch 'raja/syntax'
|
2024-08-25 10:55:52 -04:00 |
|
|
|
fae586c3c5
|
Patch bug in existing rp_filter sysctl
|
2024-08-16 19:23:48 +10:00 |
|
|
|
81bf7a8f90
|
Merge branch 'Kicksecure:master' into docs
|
2024-08-16 16:57:01 +10:00 |
|
|
|
ef60c5b153
|
Merge pull request #249 from raja-grewal/binfmt_misc
Disallow registering interpreters for miscellaneous binary formats
|
2024-08-16 02:43:57 -04:00 |
|
|
|
cea8e75378
|
Consistent formating
|
2024-08-16 14:55:22 +10:00 |
|
|
|
84376d23fc
|
Add details on ASLR and move to user space section
|
2024-08-16 13:39:11 +10:00 |
|
|
|
9212a4e937
|
Typos
|
2024-08-16 13:12:07 +10:00 |
|
|
|
23a77d4973
|
Simplify syntax of some network-related sysctl's
|
2024-08-16 12:46:51 +10:00 |
|
|
|
be9308e490
|
Merge branch 'Kicksecure:master' into docs
|
2024-08-16 11:45:43 +10:00 |
|
|
|
dfd1c97168
|
Merge pull request #248 from raja-grewal/secure_redirects
Re-enable (default) `secure_redirects` for ICMP redirect messages
|
2024-08-15 13:46:30 -04:00 |
|
|
|
b552b92401
|
Add references on fs.binfmt_misc.status
|
2024-08-15 11:54:21 +10:00 |
|
|
|
326d82a9be
|
Revert "Provide optional sysctl fs.binfmt_misc.status=0"
This reverts commit debd7a7b7a.
|
2024-08-15 11:46:56 +10:00 |
|
|
|
f8fa89b245
|
Add details on tcp_timestamps
|
2024-08-09 14:21:59 +10:00 |
|
|
|
077bc48a26
|
Add reference on rp_filter
|
2024-08-09 13:35:33 +10:00 |
|
|
|
d8bcec881f
|
Add some notices for future Debian 13 rebase
|
2024-08-09 13:33:32 +10:00 |
|
|
|
ec3038c7bc
|
Clarify secure_redirects
|
2024-08-07 13:48:53 +10:00 |
|
|
|
debd7a7b7a
|
Provide optional sysctl fs.binfmt_misc.status=0
|
2024-08-07 13:33:44 +10:00 |
|
|
|
c0d140f221
|
Enable dev.tty.legacy_tiocsti=0
|
2024-08-05 15:06:34 +10:00 |
|
|
|
4f7f820160
|
Add reference
|
2024-08-05 14:16:33 +10:00 |
|
|
|
725118c575
|
Merge pull request #243 from raja-grewal/namespaces
Restrict unprivileged user namespaces
|
2024-08-04 16:19:52 -04:00 |
|
|
|
ca2179bb6a
|
Provide the option to disable legacy TIOCSTI operation
|
2024-08-03 00:25:49 +10:00 |
|
|
|
f6a16258a1
|
Add references to KSPP
|
2024-08-03 00:11:06 +10:00 |
|
|
|
0f86fbd8ce
|
Merge pull request #242 from raja-grewal/ptrace
Disable the usage of `ptrace()` by all processes
|
2024-07-28 15:43:54 -04:00 |
|
|
|
9cabaa1bd1
|
Typo
|
2024-07-28 22:04:30 +10:00 |
|
|
|
d2d024ebe9
|
Typo
|
2024-07-28 22:03:33 +10:00 |
|
|
|
9fbee9fc82
|
Clarify
|
2024-07-28 21:57:25 +10:00 |
|
|
|
1445457626
|
Show details regarding secure_redirects (again)
|
2024-07-27 14:00:30 +10:00 |
|
|
|
73979d4342
|
Link to ptrace() discussion
|
2024-07-27 13:28:59 +10:00 |
|
|
|
1c9f33f906
|
Revert "Disable the usage of ptrace() by all processes"
This reverts commit b04828f858.
|
2024-07-27 13:24:08 +10:00 |
|
|
|
ed3336694c
|
Provide the option to immediately reboot on a kernel panics
|
2024-07-25 10:28:27 +10:00 |
|
|
|
3926b91dcf
|
Add documentation on sysctl kernel.panic_on_oops=1
|
2024-07-25 10:26:23 +10:00 |
|
|
|
f699eb02a2
|
Set sysctl fs.binfmt_misc.status=0
|
2024-07-25 10:11:33 +10:00 |
|
|
|
88c88187f2
|
Re-enable (default) secure_redirects for ICMP redirect messages
|
2024-07-24 17:26:50 +10:00 |
|
|
|
9f53a0182b
|
undo io_uring related changes
as these should be done in a separate pull request (if apprpriate)
https://github.com/Kicksecure/security-misc/pull/244#issuecomment-2238889062
|
2024-07-19 07:20:59 -04:00 |
|
|
|
13cc1f0986
|
Clarify (future) disabling of io_uring
|
2024-07-18 12:25:00 +10:00 |
|
|
|
6d211faf59
|
Restrict unprivileged user namespaces
|
2024-07-18 11:04:54 +10:00 |
|
|
|
b04828f858
|
Disable the usage of ptrace() by all processes
|
2024-07-18 11:01:41 +10:00 |
|
|
|
a2e26f441b
|
spelling
|
2024-07-17 11:04:03 -04:00 |
|
|
|
c8be4ac83c
|
comment
|
2024-07-17 10:56:14 -04:00 |
|
|
|
24cd70a014
|
spelling
|
2024-07-17 10:55:12 -04:00 |
|
|
|
9a387f95e9
|
Merge remote-tracking branch 'raja/miscellaneous'
|
2024-07-17 10:32:26 -04:00 |
|
|
|
d0a59617f6
|
Add missing Copyright (C) statements
|
2024-07-18 00:13:30 +10:00 |
|
|
|
1087387b36
|
Remove obsolete #net.ipv4.tcp_fack=0
|
2024-07-17 23:35:25 +10:00 |
|
|
|
0b873b765e
|
minor
|
2024-07-17 08:05:27 -04:00 |
|
|
|
070bb46a08
|
Merge remote-tracking branch 'raja/sysctl'
|
2024-07-17 08:02:45 -04:00 |
|
|
|
6d6e5473f2
|
minor
|
2024-07-17 08:00:24 -04:00 |
|
|
|
39fd125eb0
|
Provide explanation on the disabling of IPv6 Privacy Extensions
|
2024-07-17 21:44:44 +10:00 |
|
|
|
693b47e623
|
Clarify ICMP redirect acceptance and sending
|
2024-07-17 14:58:30 +10:00 |
|
|
|
824d9b82e5
|
Uncomment redundant disabling of TCP FACK`
|
2024-07-17 00:36:18 +10:00 |
|
|
|
d1119c38b6
|
Apply changes from code review
|
2024-07-17 00:31:23 +10:00 |
|
