mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-07-30 14:49:49 +07:00
Code Issues Packages Projects Releases Wiki Activity
2,209 Commits 4 Branches 457 Tags
a077ae54ea050af8828813b781738cba24e27624
Commit Graph

159 Commits

Author SHA1 Message Date
Patrick Schleizer
9f53a0182b undo io_uring related changes 
as these should be done in a separate pull request (if apprpriate)

https://github.com/Kicksecure/security-misc/pull/244#issuecomment-2238889062
 2024-07-19 07:20:59 -04:00
Raja Grewal
95286df502 Update README.md regarding secure ICMP redirects 2024-07-18 15:28:31 +10:00
Raja Grewal
13cc1f0986 Clarify (future) disabling of io_uring 2024-07-18 12:25:00 +10:00
Raja Grewal
9e6facda70 Update module disabling presentation 2024-07-18 12:21:37 +10:00
Raja Grewal
faa9181a6c Typos 2024-07-18 12:19:27 +10:00
Patrick Schleizer
5cec685cf9 spelling 2024-07-17 10:49:21 -04:00
Patrick Schleizer
821a416fe3 spelling 2024-07-17 10:43:16 -04:00
Patrick Schleizer
0da22c2031 minor 2024-07-17 09:07:31 -04:00
Patrick Schleizer
df80385289 Merge pull request #237 from raja-grewal/intel_pmt 
Disable some Intel PMT kernel modules
 2024-07-17 09:04:18 -04:00
Patrick Schleizer
afe3c25a49 update readme 
https://github.com/Kicksecure/security-misc/issues/239
 2024-07-17 08:58:00 -04:00
Patrick Schleizer
f7772fb85a minor 2024-07-17 08:57:35 -04:00
Patrick Schleizer
a2802f352f Merge remote-tracking branch 'raja/kargs' 2024-07-17 08:38:23 -04:00
Patrick Schleizer
070bb46a08 Merge remote-tracking branch 'raja/sysctl' 2024-07-17 08:02:45 -04:00
Patrick Schleizer
cf5f0edbb8 Merge remote-tracking branch 'raja/sysctl' 2024-07-17 07:59:35 -04:00
Raja Grewal
25fd532ce6 Update README.md relating to sysctl's 2024-07-17 21:56:40 +10:00
Raja Grewal
d1119c38b6 Apply changes from code review 2024-07-17 00:31:23 +10:00
Raja Grewal
724435e56e Disable some Intel Platform Monitoring Technology Telemetry (PMT) modules 2024-07-15 22:38:43 +10:00
Raja Grewal
8219a1e257 Update README.md relating to disabled miscellaneous modules 2024-07-15 21:02:10 +10:00
Raja Grewal
82c5a93f7c Disable another GPS module 2024-07-15 20:53:07 +10:00
Raja Grewal
b2657bc61f Improve docs 2024-07-15 15:05:00 +10:00
Raja Grewal
69c8e84927 Fix typos 2024-07-15 14:38:21 +10:00
Raja Grewal
48e1ac4163 Remove the optional slub_debug parameter since it is no longer recommended 2024-07-15 02:04:25 +10:00
Raja Grewal
99038c7a06 Add option to disable support for x86 processes and syscalls in the future 2024-07-15 02:02:01 +10:00
Raja Grewal
f550fbe07c Add option to disable the entire IPv6 stack functionality 2024-07-15 01:59:04 +10:00
Raja Grewal
a33d4cd099 Refactor existing kernel parameters for clarity 2024-07-15 01:56:25 +10:00
Raja Grewal
acd60e45d8 Add comment about enabling core dump files 2024-07-14 20:07:31 +10:00
Raja Grewal
5cf9afc215 Include optional sysctl's in README.md 2024-07-14 17:05:49 +10:00
Raja Grewal
9f58266546 Move nf_conntrack_helper disabling into separate file 2024-07-13 23:32:01 +10:00
Raja Grewal
8f2ec75f81 Clarify README.mmd relating to module disabling 2024-07-13 23:30:55 +10:00
Raja Grewal
2de3a79599 Refactor existing sysctl for clarity 2024-07-13 22:41:40 +10:00
Raja Grewal
5f10cc8bcf Update README.md relating to modprobe 2024-07-12 16:22:10 +10:00
Raja Grewal
b02230a783 Split modprobe into blacklisted and disabled configurations 2024-07-12 02:42:37 +10:00
Patrick Schleizer
c815304026 readme 2024-06-01 14:12:57 -04:00
raja-grewal
2f716050d1 Update README.md 2024-05-12 01:06:34 +00:00
Raja Grewal
dddac1dc40 Update README.md 2024-05-11 13:15:42 +10:00
Patrick Schleizer
0d78ecaee3 README 2024-01-16 09:26:21 -05:00
Patrick Schleizer
862bf6b5ab Merge remote-tracking branch 'ben-grande/clean' 2024-01-16 08:19:28 -05:00
Patrick Schleizer
df0f9d3267 README 2024-01-06 09:19:57 -05:00
Patrick Schleizer
86f91e3030 revert umask 027 by default 
because broken because this also happens for root while it should not

https://github.com/Kicksecure/security-misc/issues/185
 2024-01-06 09:11:54 -05:00
Ben Grande
abf72c2ee4 Rename file permission hardening script 
Hardener as the script is the agent that is hardening the file
permissions.
 2024-01-02 13:34:29 +01:00
Patrick Schleizer
f64a869bfd readme 2023-12-25 11:03:22 -05:00
Patrick Schleizer
0810c1ce3c fix bluetooth in readme 
fixes https://github.com/Kicksecure/security-misc/issues/180
 2023-12-25 09:10:31 -05:00
Patrick Schleizer
37b4ab15a8 readme 2023-12-25 09:04:10 -05:00
Patrick Schleizer
79f398d219 formatting 2023-12-25 08:45:20 -05:00
Patrick Schleizer
c90ada3c39 pandoc -f markdown -t markdown --wrap=auto --columns=80 README.md -o README.md 2023-12-25 08:37:23 -05:00
Patrick Schleizer
34bf297bd1 formatting 2023-12-25 08:32:34 -05:00
Patrick Schleizer
d5fc9f6201 improve bluetooth in readme 
as suggested by @monsieuremre

https://github.com/Kicksecure/security-misc/issues/180
 2023-12-25 08:26:03 -05:00
Patrick Schleizer
5a73817a95 move to /usr/lib/issue.d/20_security-misc.issue 
https://github.com/Kicksecure/security-misc/pull/167
 2023-12-04 11:38:49 -05:00
Patrick Schleizer
c4e21ca5f4 added development philosophy 
https://github.com/Kicksecure/security-misc/issues/154
 2023-12-04 10:58:16 -05:00
Patrick Schleizer
feab1432f9 clarify scope 
https://github.com/Kicksecure/security-misc/issues/154
 2023-12-04 10:48:27 -05:00