a330a9fd75
refactor permission-lockdown
2023-10-26 19:20:21 -04:00
8bf5ff82be
Merge remote-tracking branch 'github-kicksecure/master'
2023-10-26 19:15:04 -04:00
92a6ecc40a
Merge pull request #141 from monsieuremre/patch-4
...
New permission-lockdown
2023-10-26 19:13:34 -04:00
1123d23114
remount-secure: disable debugging to save space in initrd
2023-10-26 18:45:07 -04:00
91c445244c
actually we do it once indeed
2023-10-26 19:41:07 +00:00
88f396264c
avoiding /etc/passwd
2023-10-26 19:35:59 +00:00
b5ba03247a
readability
2023-10-26 19:31:25 +00:00
f487752ba1
not limiting ourselves. we do not do this not just once.
2023-10-26 19:30:58 +00:00
88cd5a905d
strip unnecessary
2023-10-26 19:25:24 +00:00
d9f10c221a
new permission-lockdown
2023-10-26 18:17:50 +00:00
ca9603af17
bumped changelog version
2023-10-26 12:23:48 -04:00
5f4222c1c3
enable SUID Disabler and Permission Hardener by default
...
https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener
https://forums.whonix.org/t/suid-disabler-and-permission-hardener/7706
2023-10-26 12:20:48 -04:00
e5d989af5a
comment
2023-10-26 12:04:13 -04:00
8557e0963e
bumped changelog version
2023-10-25 17:55:37 -04:00
b7e2d49f5f
comment
2023-10-25 17:41:05 -04:00
5d71217e59
Merge remote-tracking branch 'github-kicksecure/master'
2023-10-25 17:40:13 -04:00
6a22351d29
renamed: usr/lib/sysctl.d/30_security-misc.conf -> usr/lib/sysctl.d/990-security-misc.conf
2023-10-25 17:30:07 -04:00
b7c52800f4
renamed: etc/sysctl.d/30_security-misc.conf -> usr/lib/sysctl.d/30_security-misc.conf
...
renamed: etc/sysctl.d/30_security-misc_kexec-disable.conf -> usr/lib/sysctl.d/30_security-misc_kexec-disable.conf
renamed: etc/sysctl.d/30_silent-kernel-printk.conf -> usr/lib/sysctl.d/30_silent-kernel-printk.conf
2023-10-25 17:28:43 -04:00
a2f811aff0
Merge pull request #135 from monsieuremre/kernel-fix
...
Kernel hardening fix
2023-10-25 17:26:46 -04:00
ee6716e178
security-misc.maintscript
2023-10-24 20:43:10 +00:00
3317332cb4
bumped changelog version
2023-10-24 05:51:11 -04:00
42c802cd1e
Merge remote-tracking branch 'github-kicksecure/master'
2023-10-24 05:30:15 -04:00
5320c11f3f
Merge pull request #134 from monsieuremre/patch-1
...
Fix double mount issue for /var/log and /var/tmp
2023-10-24 05:22:33 -04:00
1f489719ef
rename
2023-10-23 16:38:58 +00:00
9dda6f69a7
more rename
2023-10-23 16:38:40 +00:00
89381fe7ab
rename
2023-10-23 16:38:23 +00:00
f0857fd560
Fix double mount issue for /var/log and /var/tmp
...
Mounting var with bind and mounting a subdirectory causes /var/tmp and /var/log bind mounted twice each. can be checked with lsblk. When we bind mount var only after having mounted the subdirectories, everything is mounted only one.
2023-10-23 15:33:05 +00:00
f3b40f12cb
bumped changelog version
2023-10-22 19:23:22 -04:00
d2e8a6dad3
debugging
2023-10-22 19:21:51 -04:00
e7aafd64d4
refactoring
2023-10-22 19:16:12 -04:00
ee15f749bb
bumped changelog version
2023-10-22 16:54:58 -04:00
d521662d04
comment
2023-10-22 16:49:36 -04:00
0e80acf38d
fix
2023-10-22 16:45:10 -04:00
a1c3b87fce
bumped changelog version
2023-10-22 16:29:08 -04:00
f6d1346e2b
fix
2023-10-22 16:22:08 -04:00
9a649ddd09
bumped changelog version
2023-10-22 16:16:40 -04:00
11382881b5
comments
2023-10-22 16:12:26 -04:00
5182d7502b
improve remount-secure
2023-10-22 16:08:21 -04:00
555d83792d
bumped changelog version
2023-10-22 15:44:47 -04:00
a88c0a3ad2
fix
2023-10-22 15:44:30 -04:00
316282952f
bumped changelog version
2023-10-22 15:40:59 -04:00
a7629b98cf
fix
2023-10-22 15:40:49 -04:00
7112eac3be
output
2023-10-22 15:37:21 -04:00
f80b5fe376
fix
2023-10-22 15:36:16 -04:00
ce0babce21
comment
2023-10-22 15:35:03 -04:00
fa0804b7ae
bumped changelog version
2023-10-22 15:33:21 -04:00
70cbe4daaa
fix
2023-10-22 15:33:11 -04:00
36f2acb93f
bumped changelog version
2023-10-22 15:28:04 -04:00
9b9e9ce1c0
fix
2023-10-22 15:27:01 -04:00
3731716a49
fix
2023-10-22 15:14:22 -04:00
