|
|
bb84fca184
|
refactoring
|
2019-12-20 04:08:46 -05:00 |
|
|
|
f92b414195
|
refactoring
|
2019-12-20 04:06:28 -05:00 |
|
|
|
4c44871e9d
|
comment
|
2019-12-20 04:02:05 -05:00 |
|
|
|
6876a2eaa8
|
comment
|
2019-12-20 04:01:40 -05:00 |
|
|
|
35c4fce61b
|
fix "dpkg-statoverride: warning: stripping trailing /"
|
2019-12-20 03:54:46 -05:00 |
|
|
|
9bd9012ab1
|
refactoring
|
2019-12-20 03:46:50 -05:00 |
|
|
|
55933f8876
|
refactoring
|
2019-12-20 03:43:36 -05:00 |
|
|
|
9e493a9f48
|
refactoring
|
2019-12-20 03:42:09 -05:00 |
|
|
|
b92a690c16
|
refactoring
|
2019-12-20 03:40:47 -05:00 |
|
|
|
98535e3a2b
|
refactoring
|
2019-12-20 03:39:25 -05:00 |
|
|
|
ecbba2fd61
|
refactoring
|
2019-12-20 03:38:39 -05:00 |
|
|
|
20b8a407ac
|
refactoring
|
2019-12-20 03:25:17 -05:00 |
|
|
|
6cd9eb44fb
|
refactoring
|
2019-12-20 03:24:07 -05:00 |
|
|
|
706dba104d
|
code simplification
|
2019-12-20 03:19:12 -05:00 |
|
|
|
01dd567f8b
|
fix, if fso has exactly the mode we want (not 3 instead of 4 string length), not need to reset it
|
2019-12-20 03:16:43 -05:00 |
|
|
|
4f65b0fc1e
|
refactoring
|
2019-12-20 03:13:27 -05:00 |
|
|
|
bfee6b60cb
|
comment
|
2019-12-20 03:11:11 -05:00 |
|
|
|
d64cdc1247
|
refactoring
|
2019-12-20 03:04:41 -05:00 |
|
|
|
7c5c65a6c1
|
comment
|
2019-12-20 03:04:13 -05:00 |
|
|
|
b31d8cd3fc
|
fix
|
2019-12-20 03:03:40 -05:00 |
|
|
|
c626290673
|
refactoring
|
2019-12-20 03:02:26 -05:00 |
|
|
|
d5ff1d6f28
|
refactoring
|
2019-12-20 03:00:39 -05:00 |
|
|
|
640ca1d24d
|
skip symlinks
https://forums.whonix.org/t/kernel-hardening/7296/323?
|
2019-12-20 02:57:57 -05:00 |
|
|
|
cc8f795799
|
comment
|
2019-12-20 02:47:04 -05:00 |
|
|
|
4e5b222a08
|
comment
|
2019-12-20 02:43:33 -05:00 |
|
|
|
fa895ee11e
|
refactoring
|
2019-12-20 02:40:42 -05:00 |
|
|
|
2c163bf439
|
check string length of permission variable
https://forums.whonix.org/t/kernel-hardening/7296/322
|
2019-12-20 02:39:53 -05:00 |
|
|
|
a89befd902
|
code simplification
|
2019-12-20 02:20:54 -05:00 |
|
|
|
72812da63f
|
comment
|
2019-12-20 02:16:32 -05:00 |
|
|
|
39a41cc27b
|
refactoring
|
2019-12-20 02:14:45 -05:00 |
|
|
|
2ed6452590
|
downgrade to info
|
2019-12-20 02:12:43 -05:00 |
|
|
|
a5e55dfcfc
|
quotes
|
2019-12-20 02:11:39 -05:00 |
|
|
|
3187cee4fb
|
output
|
2019-12-20 02:10:13 -05:00 |
|
|
|
5160b4c781
|
disable xtrace
|
2019-12-20 02:08:05 -05:00 |
|
|
|
27bfe95d25
|
add echo wrapper
|
2019-12-20 02:07:49 -05:00 |
|
|
|
a6988f3fb8
|
output
|
2019-12-20 02:06:31 -05:00 |
|
|
|
1819577b88
|
fix
|
2019-12-20 02:04:34 -05:00 |
|
|
|
278c60c5a0
|
exit non-zero if some line cannot be parsed
therefore make systemd notice this
therefore allow the sysadmin to notice this
|
2019-12-20 02:01:36 -05:00 |
|
|
|
66bcba8313
|
improve character whitelisting
|
2019-12-20 01:58:35 -05:00 |
|
|
|
8f14e808a9
|
send error messages to stderr
|
2019-12-20 01:32:49 -05:00 |
|
|
|
d8c9fac2e5
|
output
|
2019-12-20 01:32:08 -05:00 |
|
|
|
f19abaf627
|
refactoring
|
2019-12-20 01:31:37 -05:00 |
|
|
|
3c2ca0257f
|
Support for removing SUID bits
|
2019-12-19 17:01:08 +00:00 |
|
|
|
4ca9fc5920
|
fix
|
2019-12-16 03:53:10 -05:00 |
|
|
|
f68efd53cf
|
remount /sys/kernel/security with nodev,nosuid[,noexec]
as suggested by @madaidan
http://forums.whonix.org/t/apparmor-for-complete-system-including-init-pid1-systemd-everything-full-system-mac-policy/8339/238
|
2019-12-16 03:52:09 -05:00 |
|
|
|
729fa26eca
|
use pam_acccess only for /etc/pam.d/login
remove "Allow members of group 'ssh' to login."
remove "+:ssh:ALL EXCEPT LOCAL"
|
2019-12-12 09:00:08 -05:00 |
|
|
|
b72eb30056
|
quotes
|
2019-12-09 02:32:05 -05:00 |
|
|
|
c258376b7e
|
use read (built-in) rather than awk (external)
|
2019-12-09 02:31:10 -05:00 |
|
|
|
02165201ab
|
read -r; refactoring
as per https://mywiki.wooledge.org/BashFAQ/001
|
2019-12-09 02:23:43 -05:00 |
|
|
|
7467252122
|
quotes
|
2019-12-09 02:22:16 -05:00 |
|
