Commit Graph

124 Commits

Author SHA1 Message Date
808e72f24b use long options
https://github.com/Kicksecure/security-misc/issues/172
2024-02-26 08:11:26 -05:00
2d1d1b246f improve output
https://github.com/Kicksecure/security-misc/issues/172
2024-02-26 08:07:29 -05:00
d8f5376c4f improve output
https://github.com/Kicksecure/security-misc/issues/172
2024-02-26 07:58:06 -05:00
cf84762a3a improve output
https://github.com/Kicksecure/security-misc/issues/172
2024-02-26 07:52:41 -05:00
f2958bbfa5 comment 2024-02-26 07:49:30 -05:00
ef44ecea44 Add option to disabe /sys hardening 2024-02-22 17:27:46 +01:00
3bc1765dbb Allow access to /sys/fs for polkit 2024-02-22 17:27:45 +01:00
ad010ef5b4 debugging 2023-11-05 17:52:44 -05:00
3130a39d8c set -e 2023-11-05 17:43:07 -05:00
36f3c30440 Merge pull request #148 from monsieuremre/module-loading-hardening
Harden the loading of new modules to the kernel after install
2023-11-05 17:41:56 -05:00
4a19fbae0b move permission-hardening to /usr/bin to make it more easily accessible 2023-11-05 15:13:01 -05:00
c75f80b29f lower verbosity of permission hardener
fixes https://github.com/Kicksecure/security-misc/issues/158
2023-11-05 15:09:29 -05:00
19eceaa810 more fix 2023-11-04 20:56:46 +00:00
d71ac03d96 comment 2023-11-03 10:36:15 -04:00
9f063584c1 disable-kernel-module-loading 2023-11-02 10:28:41 +00:00
a330a9fd75 refactor permission-lockdown 2023-10-26 19:20:21 -04:00
91c445244c actually we do it once indeed 2023-10-26 19:41:07 +00:00
88f396264c avoiding /etc/passwd 2023-10-26 19:35:59 +00:00
b5ba03247a readability 2023-10-26 19:31:25 +00:00
f487752ba1 not limiting ourselves. we do not do this not just once. 2023-10-26 19:30:58 +00:00
88cd5a905d strip unnecessary 2023-10-26 19:25:24 +00:00
d9f10c221a new permission-lockdown 2023-10-26 18:17:50 +00:00
ed11c68ac6 move remount-secure to /usr/bin/remount-secure to make it easier to manually run 2023-10-22 06:51:52 -04:00
6f4bf57ff2 remount-secure: add support for --force; output 2023-10-22 06:48:56 -04:00
6dec5cb1d6 debugging 2023-10-22 06:32:19 -04:00
bc768aa196 output 2023-10-22 06:31:57 -04:00
c069c73109 refactoring 2023-10-22 06:29:38 -04:00
abc3592734 remount-secure: stricter error handling 2023-10-22 06:23:48 -04:00
6ab400c9d9 mmap-rnd-bits: Fix typo in error message 2023-05-09 10:55:31 +00:00
0c10b3f038 output 2023-05-06 11:59:59 +00:00
5d4d04a2eb output 2023-05-06 11:54:00 +00:00
2d465c6249 refactoring 2023-05-06 11:51:25 +00:00
014a28ba07 comment 2023-05-05 15:04:21 +00:00
ec01c1a996 minor mmap-rnd-bits improvements 2023-05-05 15:02:31 +00:00
3dc406f138 minor 2023-05-05 15:01:22 +00:00
40e940ec58 minor mmap-rnd-bits improvements 2023-05-05 14:54:24 +00:00
f4fd0f9012 minor mmap-rnd-bits improvements 2023-05-05 14:53:07 +00:00
a8e4121bef minor mmap-rnd-bits improvements 2023-05-05 14:52:07 +00:00
9184e6bb92 fix 2023-05-05 14:51:19 +00:00
89168ef40c minor mmap-rnd-bits improvements 2023-05-05 14:49:56 +00:00
d6d79e96c9 minor mmap-rnd-bits improvements 2023-05-05 14:44:29 +00:00
48a68ba237 mmap-rnd-bits: Handle unwritable /etc/sysctl.d/ 2023-04-24 23:07:40 +00:00
434cfb427f mmap-rnd-bits: Check that configs are valid integers 2023-04-24 23:07:40 +00:00
76ca8a27f9 mmap-rnd-bits: Handle missing kernel config file 2023-04-24 23:07:40 +00:00
61f63255ac vm.mmap_rnd_bits: Fix ppc64le
Probably fixes a bunch of other non-x86_64 arches too.
2023-04-24 23:07:39 +00:00
7a4212dd76 Update copyright 2023-03-30 17:08:47 +11:00
7bda2ad3e8 move ram-wipe scripts to dedicated ram-wipe package 2023-01-24 06:34:17 -05:00
f3b84e15be refactoring 2023-01-08 07:16:18 -05:00
96d6ca7ae0 improve kernel and initrd file detection 2023-01-08 07:09:09 -05:00
8367b27a0d output 2023-01-08 07:08:18 -05:00