Raja Grewal
|
9099ecce8a
|
Provide option to enable the kernel Electric-Fence
|
2024-08-03 00:12:50 +10:00 |
|
Raja Grewal
|
f6a16258a1
|
Add references to KSPP
|
2024-08-03 00:11:06 +10:00 |
|
Raja Grewal
|
e53d24fc48
|
Add missing GRUB command lines for disabled boot parameters
|
2024-08-03 00:09:42 +10:00 |
|
Patrick Schleizer
|
de6f3ea74a
|
bumped changelog version
|
2024-07-28 20:50:22 +00:00 |
|
Patrick Schleizer
|
d036094089
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-07-28 15:44:40 -04:00 |
|
Patrick Schleizer
|
0f86fbd8ce
|
Merge pull request #242 from raja-grewal/ptrace
Disable the usage of `ptrace()` by all processes
|
2024-07-28 15:43:54 -04:00 |
|
Raja Grewal
|
9cabaa1bd1
|
Typo
|
2024-07-28 22:04:30 +10:00 |
|
Raja Grewal
|
d2d024ebe9
|
Typo
|
2024-07-28 22:03:33 +10:00 |
|
Raja Grewal
|
9fbee9fc82
|
Clarify
|
2024-07-28 21:57:25 +10:00 |
|
Patrick Schleizer
|
e60ce50d30
|
bumped changelog version
|
2024-07-27 16:13:35 +00:00 |
|
Patrick Schleizer
|
e86b2e7f8f
|
output
|
2024-07-27 12:13:18 -04:00 |
|
Raja Grewal
|
1445457626
|
Show details regarding secure_redirects (again)
|
2024-07-27 14:00:30 +10:00 |
|
Raja Grewal
|
73979d4342
|
Link to ptrace() discussion
|
2024-07-27 13:28:59 +10:00 |
|
Raja Grewal
|
1c9f33f906
|
Revert "Disable the usage of ptrace() by all processes"
This reverts commit b04828f858 .
|
2024-07-27 13:24:08 +10:00 |
|
Patrick Schleizer
|
330cf14eab
|
bumped changelog version
|
2024-07-26 15:40:24 +00:00 |
|
Patrick Schleizer
|
62bb4bc626
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-07-26 11:10:25 -04:00 |
|
Patrick Schleizer
|
886f6095db
|
Merge pull request #250 from raja-grewal/Panik-Kalm
Add details on "oopes" and kernel panics
|
2024-07-26 11:08:30 -04:00 |
|
Patrick Schleizer
|
7969e86071
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-07-26 11:06:13 -04:00 |
|
Patrick Schleizer
|
0318f577ab
|
Merge pull request #246 from raja-grewal/cfi
Provide the option to change the default CFI implementation in the future
|
2024-07-26 11:04:29 -04:00 |
|
Patrick Schleizer
|
e2ae93a957
|
port to safe_echo
|
2024-07-26 10:30:45 -04:00 |
|
Patrick Schleizer
|
8ec23ed712
|
echo does not support end-of-options
|
2024-07-26 10:28:57 -04:00 |
|
Patrick Schleizer
|
6096ed1109
|
comment
|
2024-07-26 10:26:43 -04:00 |
|
Patrick Schleizer
|
ac41d1cfff
|
comment
|
2024-07-26 10:25:59 -04:00 |
|
Patrick Schleizer
|
3b033ceba2
|
shellcheck
|
2024-07-26 10:17:24 -04:00 |
|
Patrick Schleizer
|
04d9ca1ebe
|
use find with safe_echo_nonewline
|
2024-07-26 10:16:20 -04:00 |
|
raja-grewal
|
20454fb811
|
Merge branch 'Kicksecure:master' into blacklist_to_disable
|
2024-07-27 00:09:30 +10:00 |
|
Patrick Schleizer
|
6bbf176e3b
|
consider end-of-options for find
|
2024-07-26 09:33:45 -04:00 |
|
Patrick Schleizer
|
794f6a25fa
|
comment
|
2024-07-26 09:08:29 -04:00 |
|
Patrick Schleizer
|
7e0f1a8701
|
dpkg-statoverride can actually handle '--file-name'.
|
2024-07-26 09:08:04 -04:00 |
|
Patrick Schleizer
|
ee037c01a1
|
Skip file names starting with '--',
because this would be interpreted by dpkg-statoverride as an option.
|
2024-07-26 08:58:44 -04:00 |
|
Patrick Schleizer
|
82d401a7de
|
sanity test
|
2024-07-26 08:52:42 -04:00 |
|
Patrick Schleizer
|
0e661bc688
|
output
|
2024-07-26 08:49:14 -04:00 |
|
Patrick Schleizer
|
d144f68d1a
|
output
|
2024-07-26 08:46:08 -04:00 |
|
Patrick Schleizer
|
05504b9ab2
|
minor
|
2024-07-26 08:40:10 -04:00 |
|
Patrick Schleizer
|
d96c0633d4
|
more use of end of options
|
2024-07-26 08:39:11 -04:00 |
|
Patrick Schleizer
|
8e40c10c31
|
comment
|
2024-07-26 08:31:17 -04:00 |
|
Patrick Schleizer
|
f2c9c2f5d1
|
output
|
2024-07-26 08:26:16 -04:00 |
|
Patrick Schleizer
|
2b40ea75e9
|
cleanup
|
2024-07-26 08:24:23 -04:00 |
|
Patrick Schleizer
|
6f0551b944
|
refactoring
|
2024-07-26 08:23:54 -04:00 |
|
Patrick Schleizer
|
aac450f808
|
refactoring
|
2024-07-26 08:22:04 -04:00 |
|
Patrick Schleizer
|
30f46790a4
|
use end of options whenever possible
|
2024-07-26 08:21:21 -04:00 |
|
Patrick Schleizer
|
95722d6d79
|
use long option name
|
2024-07-26 08:13:33 -04:00 |
|
Patrick Schleizer
|
19f131c742
|
code simplification
https://github.com/Kicksecure/security-misc/pull/251
|
2024-07-26 08:07:08 -04:00 |
|
Patrick Schleizer
|
9694cf0cd1
|
output
|
2024-07-26 07:43:59 -04:00 |
|
Patrick Schleizer
|
bdfe764f9d
|
Merge remote-tracking branch 'ben-grande/stat-dedup'
|
2024-07-26 07:19:05 -04:00 |
|
Patrick Schleizer
|
9f135231cc
|
no longer disable Intel ME related kernel modules
because that might break firmware updates
This reverts commit 64f8b2eb58 .
https://github.com/Kicksecure/security-misc/issues/239
|
2024-07-26 06:43:14 -04:00 |
|
Patrick Schleizer
|
f616da7c06
|
bumped changelog version
|
2024-07-26 09:40:59 +00:00 |
|
Raja Grewal
|
4397de0138
|
Update description of cfi=kcfi kerenel parameter
|
2024-07-26 11:30:46 +10:00 |
|
Ben Grande
|
652a06c8e9
|
Only print SUID or SGID values when set
|
2024-07-25 12:37:21 +02:00 |
|
Ben Grande
|
3b8a3f9b83
|
Unduplicate stat call
|
2024-07-25 12:20:16 +02:00 |
|