Commit Graph

87 Commits

Author SHA1 Message Date
45ce0ff74d debugging 2023-10-22 10:16:43 -04:00
292a5c3a8a fix 2023-10-22 10:11:31 -04:00
181a642479 root check 2023-10-22 10:01:38 -04:00
84fd41931c /var/run -> /run 2023-10-22 09:44:17 -04:00
c409e3221e implement remount-secure 2023-10-22 09:36:03 -04:00
167683ce76 code simplification 2023-10-22 08:50:57 -04:00
f0ee470ecd comment 2023-10-22 07:51:05 -04:00
e257f2a380 remount-secure:
no longer use /usr/libexec/helper-scripts/pre.bsh as not simple with dracut
2023-10-22 07:50:14 -04:00
ed11c68ac6 move remount-secure to /usr/bin/remount-secure to make it easier to manually run 2023-10-22 06:51:52 -04:00
7a4212dd76 Update copyright 2023-03-30 17:08:47 +11:00
6d7a782624 fix 2022-11-24 07:21:46 -05:00
39b35ef9ac fix 2022-11-24 06:49:15 -05:00
d05c101721 debugging 2022-11-24 06:31:24 -05:00
36454c2dbf debugging 2022-11-24 06:25:47 -05:00
e06b173a1b debugging 2022-11-24 06:24:14 -05:00
497b5b4544 fix 2022-11-24 06:14:04 -05:00
e5255a630a pam-info: support non-root environments (such as during graphical display manager login and xscreensaver) 2022-11-22 05:57:30 -05:00
eb8535fe87 renamed: usr/bin/disabled-by-security-misc -> bin/disabled-by-security-misc 2022-07-07 15:48:39 -04:00
780dc8eec9 replace /bin/false -> /bin/disabled-by-security-misc 2022-07-08 04:11:25 +10:00
2d37e3a1af copyright 2022-05-20 14:46:38 -04:00
50bdd097df move /usr/lib/security-misc to /usr/libexec/security-misc as per lintian FHS 2021-08-03 12:56:31 -04:00
a67007f4b7 copyright 2021-03-17 09:45:21 -04:00
2ceea8d1fe update copyright year 2020-04-01 08:49:59 -04:00
649ec5dfa1 pkexec wrapper: fix gdebi / synaptic
but at cost of checking for passwordless sudo /etc/suders /etc/sudoers.d
exceptions.

http://forums.whonix.org/t/cannot-use-pkexec/8129/53
2020-02-29 04:59:56 -05:00
80159545a5 fix xfce4-power-manager xfpm-power-backlight-helper pkexec lxsudo popup
https://forums.whonix.org/t/xfce4-power-manager-xfpm-power-backlight-helper-pkexec-lxsudo-popup/8764

do show lxqt-sudo password prompt if there is a sudoers exceptoin

improved pkexec wrapper logging
2020-01-15 02:42:10 -05:00
d90ca4b1ad refactoring 2020-01-14 15:12:13 -05:00
082f04f2d4 add logging to pkexec wrapper 2020-01-14 15:04:58 -05:00
6dd6530fa5 remove hardening-enable
please invent package security-paranoid instead

https://forums.whonix.org/t/security-hardening-tool-usr-bin-hardening-enable-by-security-misc/8609
2019-12-20 05:32:26 -05:00
ac96708b24 improve usr/bin/hardening-enable 2019-12-08 04:01:11 -05:00
1dbca1ea2d add usr/bin/hardening-enable 2019-12-08 02:27:09 -05:00
bce5274a15 quotes fix 2019-10-22 09:22:29 -04:00
e20b9e2133 better solution when using pkexec with --user: wrap sudo --user with lxqt-sudo 2019-10-22 09:08:18 -04:00
d4e02de43a set SUDO_ASKPASS for pkexec wrapper when using sudo --askpass 2019-10-22 09:04:44 -04:00
1a65a91039 long rather than short option 2019-10-22 08:56:05 -04:00
b55913637b silence output by mount/grep 2019-10-22 08:54:48 -04:00
a1154170c9 Call original pkexec in case there are no arguments. 2019-10-22 08:54:17 -04:00
40707e70db Redirect calls for pkexec to lxqt-sudo because pkexec is incompatible with hidepid.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860040

https://forums.whonix.org/t/cannot-use-pkexec/8129

Thanks to AnonymousUser for the bug report!
2019-10-21 05:46:49 -04:00