mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-07-30 14:49:49 +07:00
Code Issues Packages Projects Releases Wiki Activity
2,170 Commits 4 Branches 457 Tags
d0a59617f6b8a90fd5c758699e910af9d7496c98
Commit Graph

477 Commits

Author SHA1 Message Date
Raja Grewal
d0a59617f6 Add missing Copyright (C) statements 2024-07-18 00:13:30 +10:00
Raja Grewal
8f3896c3da Upgrade hyperlinks to HTTPS 2024-07-17 23:44:37 +10:00
Patrick Schleizer
df80385289 Merge pull request #237 from raja-grewal/intel_pmt 
Disable some Intel PMT kernel modules
 2024-07-17 09:04:18 -04:00
Patrick Schleizer
6157e328f4 no longer disable Intel ME related kernel modules 
https://github.com/Kicksecure/security-misc/issues/239
 2024-07-17 08:52:11 -04:00
Patrick Schleizer
a4ba6e485d Merge pull request #236 from raja-grewal/intel_me 
Disable more Intel ME kernel modules
 2024-07-17 08:46:27 -04:00
Patrick Schleizer
9a75135633 Merge pull request #238 from raja-grewal/uvcvideo_2 
Minor additions to `30_security-misc_disable.conf`
 2024-07-17 08:41:43 -04:00
Patrick Schleizer
d29a616142 minor 2024-07-17 08:39:20 -04:00
Patrick Schleizer
a2802f352f Merge remote-tracking branch 'raja/kargs' 2024-07-17 08:38:23 -04:00
Raja Grewal
a3408990ab Uncomment disabling of already disabled ATM modules 2024-07-17 15:03:39 +10:00
Raja Grewal
81a3715c7c Add info regarding the downsides of disabling SMT 2024-07-17 13:32:08 +10:00
Raja Grewal
abafb1945c Add Intel ME references 2024-07-17 13:26:03 +10:00
Raja Grewal
f317aaebab Disable two network modules 
These were previously blacklisted for two years in 61ef9bd59f.
 2024-07-17 01:09:02 +10:00
Raja Grewal
d69fe88091 Provide option to disable uvcvideo driver 2024-07-17 01:08:01 +10:00
Raja Grewal
49594ccb22 Partially revert f4d652fa7b 2024-07-17 00:49:25 +10:00
Patrick Schleizer
94df2e3d24 further discussion required 
https://github.com/Kicksecure/security-misc/pull/234#issuecomment-2228909249
 2024-07-15 12:29:52 -04:00
Raja Grewal
73f6d4b26f Fix transcription error 2024-07-16 01:03:41 +10:00
Raja Grewal
724435e56e Disable some Intel Platform Monitoring Technology Telemetry (PMT) modules 2024-07-15 22:38:43 +10:00
Raja Grewal
22ba7a7c39 Disable more Intel Management Engine (ME) modules 2024-07-15 22:21:20 +10:00
Raja Grewal
9300c208e2 Fix script 2024-07-15 21:36:25 +10:00
Raja Grewal
f2db11269e Fix script 2024-07-15 21:18:32 +10:00
Raja Grewal
fda3832eaf Replace bash file presented for disabling of miscellaneous modules 2024-07-15 21:08:45 +10:00
Raja Grewal
cb2fb95b81 Disable more miscellaneous drivers 2024-07-15 21:01:36 +10:00
Raja Grewal
96aa63267a Disable more Thunderbolt modules 2024-07-15 20:57:14 +10:00
Raja Grewal
51f7776bc8 Disable more network protocols/drivers 2024-07-15 20:56:12 +10:00
Raja Grewal
9e40ff0551 Disable more network file systems 2024-07-15 20:54:18 +10:00
Raja Grewal
82c5a93f7c Disable another GPS module 2024-07-15 20:53:07 +10:00
Raja Grewal
99b0ce7948 Disable more file systems 2024-07-15 20:47:56 +10:00
Raja Grewal
4476a477a7 Provide option to disable more Bluetooth modules 2024-07-15 20:47:07 +10:00
Raja Grewal
b2657bc61f Improve docs 2024-07-15 15:05:00 +10:00
Raja Grewal
c8385d82fb Clarify instructions for increasing log verbosity 2024-07-15 14:57:40 +10:00
Raja Grewal
d229e8b04d Fix link 2024-07-15 14:50:29 +10:00
Raja Grewal
f4d652fa7b Update presentation of quiet loglevel=0 2024-07-15 14:39:12 +10:00
Raja Grewal
48e1ac4163 Remove the optional slub_debug parameter since it is no longer recommended 2024-07-15 02:04:25 +10:00
Raja Grewal
99038c7a06 Add option to disable support for x86 processes and syscalls in the future 2024-07-15 02:02:01 +10:00
Raja Grewal
f550fbe07c Add option to disable the entire IPv6 stack functionality 2024-07-15 01:59:04 +10:00
Raja Grewal
a33d4cd099 Refactor existing kernel parameters for clarity 2024-07-15 01:56:25 +10:00
Raja Grewal
9f58266546 Move nf_conntrack_helper disabling into separate file 2024-07-13 23:32:01 +10:00
Raja Grewal
98580bb39a Update modprobe presentation 2024-07-13 23:29:52 +10:00
Raja Grewal
41a3bf92fb Sort 30_security-misc_disable.conf 2024-07-12 16:21:41 +10:00
Raja Grewal
b02230a783 Split modprobe into blacklisted and disabled configurations 2024-07-12 02:42:37 +10:00
Raja Grewal
fc792ff232 Alphabetically sort existing modprobe 2024-07-12 02:29:36 +10:00
Raja Grewal
fe20f3240e Refactor existing modprobe for clarity 2024-07-12 02:28:48 +10:00
Raja Grewal
275a4ffc11 Remove redundant disabled modules 2024-07-12 02:27:56 +10:00
Ashlen
e198447866 fix(etc): delete typo in /etc/apparmor.d tunables 
/etc/pam.d was present twice in a row ("/etc/pam.d//etc/pam.d") in this
file: /etc/apparmor.d/tunables/home.d/security-misc.
 2024-06-08 22:17:05 -06:00
Patrick Schleizer
e0cd9579d6 remove duplicate fsckobjects = true from /etc/gitconfig 2024-06-01 13:32:13 -04:00
Patrick Schleizer
4efa293f3b add /etc/gitconfig by default for better git security 
```
[core]
	symlinks = false

[transfer]
	fsckobjects = true
	fsckobjects = true
[fetch]
	fsckobjects = true
	fsckobjects = true
[receive]
	fsckobjects = true
	fsckobjects = true
```

+ additional suggestions as comments

fixes https://github.com/Kicksecure/security-misc/issues/225
 2024-05-28 07:51:06 -04:00
Raja Grewal
1bb843ec38 Update Copyright (C) to 2024 2024-05-11 13:18:36 +10:00
Patrick Schleizer
0f1119f326 Merge pull request #221 from raja-grewal/firewire 
Disable Firewire Module
 2024-05-10 06:45:57 -04:00
Patrick Schleizer
547757f451 Merge pull request #220 from raja-grewal/block_gps 
Block Several GPS-related Modules
 2024-05-10 06:45:34 -04:00
raja-grewal
677f75ae8e Disable firewire-net module 2024-05-09 02:34:02 +00:00