Commit Graph

1423 Commits

Author SHA1 Message Date
a72bbb1883 Corrected kerenl module disabling 2022-07-13 23:42:13 +10:00
24d6a93eac bumped changelog version 25.3-1 2022-07-13 08:28:34 -04:00
8f31e5d1d1 Merge remote-tracking branch 'github-kicksecure/master' 2022-07-13 07:26:58 -04:00
c410890a8a Merge pull request #110 from raja-grewal/master
Incorporated Ubuntu’s kernel module blacklists and more verbose errors
2022-07-13 07:24:12 -04:00
fe0cc10890 Updated README.md 2022-07-12 17:18:47 +10:00
48089e5ba4 More verbose kernel module blocking error logs 2022-07-12 17:02:12 +10:00
40ec791774 Updated comments 2022-07-12 16:58:16 +10:00
ef1ef9917d Blacklist automatic loading of CD-ROM modules 2022-07-10 04:53:25 +10:00
61ef9bd59f Incorporated Ubuntu’s kernel module blacklists 2022-07-10 04:52:00 +10:00
6aa9a9472f bumped changelog version 25.2-1 2022-07-09 11:42:24 -04:00
3b844eaab2 output 2022-07-09 11:42:11 -04:00
73d2c9d921 output 2022-07-09 11:40:15 -04:00
adfdac6dea output 2022-07-09 11:40:01 -04:00
1df2cfd1ad comment 2022-07-09 11:38:37 -04:00
fede41e6e0 fix 2022-07-09 11:38:04 -04:00
52c46e4706 Merge remote-tracking branch 'github-kicksecure/master' 2022-07-09 11:37:41 -04:00
dc41a58102 Merge pull request #108 from Krish-sysadmin/master
Continue for loop if unable to change one directory's permission
2022-07-09 11:37:57 -04:00
1b8500cc22 bumped changelog version 25.1-1 2022-07-07 17:41:13 -04:00
277749f27b genmkfile debinstfile 2022-07-07 15:49:08 -04:00
eb8535fe87 renamed: usr/bin/disabled-by-security-misc -> bin/disabled-by-security-misc 2022-07-07 15:48:39 -04:00
26b2c9727f not blacklist CD-ROM / DVD yet
https://forums.whonix.org/t/blacklist-more-kernel-modules-to-reduce-attack-surface/7989/31
2022-07-07 15:39:40 -04:00
d5c1650341 shuffle 2022-07-07 15:28:09 -04:00
ca19d78d48 shuffle 2022-07-07 15:27:15 -04:00
d018bdaf73 Merge remote-tracking branch 'raja-gerwal/master' 2022-07-07 15:26:08 -04:00
780dc8eec9 replace /bin/false -> /bin/disabled-by-security-misc 2022-07-08 04:11:25 +10:00
fa2e30f512 Updated descriptions of disabled modules 2022-07-08 03:04:37 +10:00
da389d6682 Revert "replace /bin/false -> /bin/true"
This reverts commit f0511635a9.
2022-07-08 02:12:04 +10:00
28381e81d4 Update README.md 2022-07-07 09:28:30 +00:00
f0511635a9 replace /bin/false -> /bin/true 2022-07-07 09:27:53 +00:00
18d67dbc53 Blacklist more modules 2022-07-07 09:26:55 +00:00
1b287a6430 bumped changelog version 25.0-1 2022-07-05 11:16:33 -04:00
92ff868ece readme 2022-07-05 11:05:36 -04:00
b8ba608535 readme 2022-07-05 10:57:28 -04:00
949edf3e17 readme 2022-07-05 10:48:58 -04:00
1c0e071948 comments 2022-07-05 10:45:55 -04:00
5d47f5f74c comments 2022-07-05 10:45:09 -04:00
435c689cf9 comments 2022-07-05 10:44:28 -04:00
c20d588d78 comments 2022-07-05 10:42:37 -04:00
8f03ce049a readme 2022-07-05 10:41:55 -04:00
b342ce930e add /etc/default/grub.d/40_cold_boot_attack_defense.cfg 2022-07-05 10:28:22 -04:00
e5f8004a94 Update hide-hardware-info 2022-07-05 03:37:40 +02:00
69af8be7b8 drop_caches before and after sdmem 2022-07-02 19:10:55 -04:00
67bdd58bf2 sync 2022-07-02 19:07:06 -04:00
01b82bf0f0 bumped changelog version 24.9-1 2022-07-02 18:30:06 -04:00
973f117aa6 wipe RAM at shutdown: Ensure any remaining disk cache is erased by Linux' memory poisoning
by running:
`echo 3 > /proc/sys/vm/drop_caches`

Inspired by Tails:
https://gitlab.tails.boum.org/tails/tails/-/blob/master/config/chroot_local-includes/usr/local/lib/initramfs-pre-shutdown-hook
2022-07-02 18:12:36 -04:00
e783ddc71e bumped changelog version 24.8-1 2022-07-02 17:37:16 -04:00
95187bd357 fix 2022-07-02 17:21:33 -04:00
3bd87d019f bumped changelog version 24.7-1 2022-07-02 16:03:52 -04:00
148a050468 fix 2022-07-02 16:03:45 -04:00
82e7863d5b improvement 2022-07-02 16:02:28 -04:00