Commit Graph

39 Commits

Author SHA1 Message Date
2f276cdb10 set back to default group "root" rather than group "sudo" membership required to use su
since root login will be locked by default anyhow

Thanks to @madaidan for providing the rationale!

https://forums.whonix.org/t/restrict-root-access/7658/42
2019-07-15 08:44:28 -04:00
6d1e8ac9a4 description 2019-07-14 11:16:49 +00:00
ffb61f43ea fix, add 'group=sudo' and 'debug' for debugging
https://forums.whonix.org/t/restrict-root-access/7658
2019-07-14 11:11:59 +00:00
6af2d7facb copyright 2019-07-13 18:12:25 +00:00
75f0ca565d set -e 2019-07-13 18:12:04 +00:00
c389e13e1a use pre.bsh 2019-07-13 17:59:49 +00:00
e9eb38b5db formatting 2019-07-13 15:04:09 +00:00
cb668459e8 port umask from /etc/pam.d to /usr/share/pam-configs implementation
https://forums.whonix.org/t/change-default-umask/7416
2019-07-13 10:35:10 -04:00
69b97981f3 convert etc/pam.d/su.security-misc to usr/share/pam-configs/wheel
https://forums.whonix.org/t/restrict-root-access/7658/32
2019-07-13 12:33:51 +00:00
bea98474ba chmod +x usr/lib/security-misc/panic-on-oops 2019-07-11 07:07:21 +00:00
52c61011d4 Create panic-on-oops 2019-07-08 22:58:56 +00:00
a978fe1000 chmod +x usr/lib/security-misc/remove-system.map 2019-06-28 07:17:35 +00:00
9392c8deb2 Update remove-system.map 2019-06-26 15:03:54 +00:00
8ef0db17e6 Use a for loop to detect if System.map exists 2019-06-26 12:59:45 +00:00
382e336f69 Create remove-system.map 2019-06-25 19:20:27 +00:00
f9acd890a7 lintian 2019-06-09 10:24:24 +00:00
c040117fe4 lintian 2019-05-12 10:50:34 +00:00
6ba1fb70d2 port to debian buster 2019-04-05 14:06:00 -04:00
811dcee2cb fix lintian warning 2019-04-05 09:26:18 -04:00
5b3fc2f6b9 update copyright 2018-01-29 15:22:05 +00:00
c3b6a44e97 update copyright 2018-01-29 15:15:17 +00:00
ff28f5932c update copyright 2018-01-29 15:09:42 +00:00
f6bc188485 comment 2017-02-28 15:22:54 +01:00
18e23af784 cleanup 2017-02-27 23:59:37 +00:00
6195450eb2 No longer ignore duplicate apt sources in apt-get-wrapper.
No longer acceptable because these generate lots of noise in the terminal.
2017-02-27 23:57:04 +00:00
191918027c adjust apt-get-wrapper for Debian stretch's apt-get 2017-02-27 23:43:02 +00:00
2130b4c654 use python rather than unbuffer
because unbuffer eats exit code when process is killed
2017-02-27 23:16:32 +00:00
cc351165dc apt-get-wrapper:
- fix exit code handling
- code simplification
2017-02-27 19:36:38 +00:00
5653b7732a fix, show progress during apt-get-wrapper
fix, propagate signals to apt-get child process
2017-02-26 23:57:17 +00:00
49cde21078 Whonix 14 KDE plasma 5 fixes
https://phabricator.whonix.org/T633
2017-02-21 19:54:41 +00:00
5ba2a5b6ff disable previews in nautilus by default for better security
copied solution by @unman

https://github.com/QubesOS/qubes-issues/issues/1108

https://github.com/QubesOS/qubes-core-agent-linux/pull/39

https://phabricator.whonix.org/T500
2017-02-19 22:25:28 +00:00
bddbba84a6 "$@" 2017-02-14 17:30:31 +00:00
9b0d3e34fc add usr/lib/security-misc/apt-get-update-sanity-test
a CVE-2016-1252 sanity test script
2017-02-14 02:37:08 +00:00
90f175e117 double apt-get-update wrapper timeout from 120 to 240 seconds
since it takes a bit longer than 120 seconds for me on a fast connection
2017-02-08 14:26:26 +00:00
0cf6524f0f apt-get-update: implement SIGINIT trap; hide 'ps' output 2016-12-25 02:33:44 +00:00
c4089d8d40 update path to /usr/lib/security-misc/apt-get-wrapper 2016-12-25 01:36:04 +00:00
7b01fb9341 remove obsolete comments 2016-12-25 01:35:17 +00:00
8160cfe1d7 moved apt-get-update and apt-get-wrapper from whonixcheck to security-misc 2016-12-25 01:29:31 +00:00
d3ccf0eeaf initial commit 2015-12-15 02:00:24 +00:00