Commit Graph

135 Commits

Author SHA1 Message Date
566cda5e4b output 2024-10-21 05:47:38 -04:00
5991a23049 comment 2024-10-21 05:47:25 -04:00
690e8dd826 Avoid faillock lock/tally reset on reboot or timeout 2024-10-19 23:52:51 -05:00
b6433309fd use end-of-options 2024-10-18 12:45:02 -04:00
3101035a3f Enable panic_on_warn=1 2024-08-29 01:57:32 +10:00
32de5e7c49 Add details on oopses and warnings 2024-08-25 12:57:22 +10:00
e4909b5e28 Add details on kernel panics 2024-08-25 12:47:04 +10:00
ed3336694c Provide the option to immediately reboot on a kernel panics 2024-07-25 10:28:27 +10:00
d0a59617f6 Add missing Copyright (C) statements 2024-07-18 00:13:30 +10:00
8f3896c3da Upgrade hyperlinks to HTTPS 2024-07-17 23:44:37 +10:00
1bb843ec38 Update Copyright (C) to 2024 2024-05-11 13:18:36 +10:00
808e72f24b use long options
https://github.com/Kicksecure/security-misc/issues/172
2024-02-26 08:11:26 -05:00
2d1d1b246f improve output
https://github.com/Kicksecure/security-misc/issues/172
2024-02-26 08:07:29 -05:00
d8f5376c4f improve output
https://github.com/Kicksecure/security-misc/issues/172
2024-02-26 07:58:06 -05:00
cf84762a3a improve output
https://github.com/Kicksecure/security-misc/issues/172
2024-02-26 07:52:41 -05:00
f2958bbfa5 comment 2024-02-26 07:49:30 -05:00
ef44ecea44 Add option to disabe /sys hardening 2024-02-22 17:27:46 +01:00
3bc1765dbb Allow access to /sys/fs for polkit 2024-02-22 17:27:45 +01:00
ad010ef5b4 debugging 2023-11-05 17:52:44 -05:00
3130a39d8c set -e 2023-11-05 17:43:07 -05:00
36f3c30440 Merge pull request #148 from monsieuremre/module-loading-hardening
Harden the loading of new modules to the kernel after install
2023-11-05 17:41:56 -05:00
4a19fbae0b move permission-hardening to /usr/bin to make it more easily accessible 2023-11-05 15:13:01 -05:00
c75f80b29f lower verbosity of permission hardener
fixes https://github.com/Kicksecure/security-misc/issues/158
2023-11-05 15:09:29 -05:00
19eceaa810 more fix 2023-11-04 20:56:46 +00:00
d71ac03d96 comment 2023-11-03 10:36:15 -04:00
9f063584c1 disable-kernel-module-loading 2023-11-02 10:28:41 +00:00
a330a9fd75 refactor permission-lockdown 2023-10-26 19:20:21 -04:00
91c445244c actually we do it once indeed 2023-10-26 19:41:07 +00:00
88f396264c avoiding /etc/passwd 2023-10-26 19:35:59 +00:00
b5ba03247a readability 2023-10-26 19:31:25 +00:00
f487752ba1 not limiting ourselves. we do not do this not just once. 2023-10-26 19:30:58 +00:00
88cd5a905d strip unnecessary 2023-10-26 19:25:24 +00:00
d9f10c221a new permission-lockdown 2023-10-26 18:17:50 +00:00
ed11c68ac6 move remount-secure to /usr/bin/remount-secure to make it easier to manually run 2023-10-22 06:51:52 -04:00
6f4bf57ff2 remount-secure: add support for --force; output 2023-10-22 06:48:56 -04:00
6dec5cb1d6 debugging 2023-10-22 06:32:19 -04:00
bc768aa196 output 2023-10-22 06:31:57 -04:00
c069c73109 refactoring 2023-10-22 06:29:38 -04:00
abc3592734 remount-secure: stricter error handling 2023-10-22 06:23:48 -04:00
6ab400c9d9 mmap-rnd-bits: Fix typo in error message 2023-05-09 10:55:31 +00:00
0c10b3f038 output 2023-05-06 11:59:59 +00:00
5d4d04a2eb output 2023-05-06 11:54:00 +00:00
2d465c6249 refactoring 2023-05-06 11:51:25 +00:00
014a28ba07 comment 2023-05-05 15:04:21 +00:00
ec01c1a996 minor mmap-rnd-bits improvements 2023-05-05 15:02:31 +00:00
3dc406f138 minor 2023-05-05 15:01:22 +00:00
40e940ec58 minor mmap-rnd-bits improvements 2023-05-05 14:54:24 +00:00
f4fd0f9012 minor mmap-rnd-bits improvements 2023-05-05 14:53:07 +00:00
a8e4121bef minor mmap-rnd-bits improvements 2023-05-05 14:52:07 +00:00
9184e6bb92 fix 2023-05-05 14:51:19 +00:00