8bf5ff82be
Merge remote-tracking branch 'github-kicksecure/master'
2023-10-26 19:15:04 -04:00
1123d23114
remount-secure: disable debugging to save space in initrd
2023-10-26 18:45:07 -04:00
91c445244c
actually we do it once indeed
2023-10-26 19:41:07 +00:00
88f396264c
avoiding /etc/passwd
2023-10-26 19:35:59 +00:00
b5ba03247a
readability
2023-10-26 19:31:25 +00:00
f487752ba1
not limiting ourselves. we do not do this not just once.
2023-10-26 19:30:58 +00:00
88cd5a905d
strip unnecessary
2023-10-26 19:25:24 +00:00
d9f10c221a
new permission-lockdown
2023-10-26 18:17:50 +00:00
e5d989af5a
comment
2023-10-26 12:04:13 -04:00
6a22351d29
renamed: usr/lib/sysctl.d/30_security-misc.conf -> usr/lib/sysctl.d/990-security-misc.conf
2023-10-25 17:30:07 -04:00
b7c52800f4
renamed: etc/sysctl.d/30_security-misc.conf -> usr/lib/sysctl.d/30_security-misc.conf
...
renamed: etc/sysctl.d/30_security-misc_kexec-disable.conf -> usr/lib/sysctl.d/30_security-misc_kexec-disable.conf
renamed: etc/sysctl.d/30_silent-kernel-printk.conf -> usr/lib/sysctl.d/30_silent-kernel-printk.conf
2023-10-25 17:28:43 -04:00
f0857fd560
Fix double mount issue for /var/log and /var/tmp
...
Mounting var with bind and mounting a subdirectory causes /var/tmp and /var/log bind mounted twice each. can be checked with lsblk. When we bind mount var only after having mounted the subdirectories, everything is mounted only one.
2023-10-23 15:33:05 +00:00
d2e8a6dad3
debugging
2023-10-22 19:21:51 -04:00
e7aafd64d4
refactoring
2023-10-22 19:16:12 -04:00
d521662d04
comment
2023-10-22 16:49:36 -04:00
0e80acf38d
fix
2023-10-22 16:45:10 -04:00
5182d7502b
improve remount-secure
2023-10-22 16:08:21 -04:00
a88c0a3ad2
fix
2023-10-22 15:44:30 -04:00
a7629b98cf
fix
2023-10-22 15:40:49 -04:00
7112eac3be
output
2023-10-22 15:37:21 -04:00
f80b5fe376
fix
2023-10-22 15:36:16 -04:00
ce0babce21
comment
2023-10-22 15:35:03 -04:00
70cbe4daaa
fix
2023-10-22 15:33:11 -04:00
9b9e9ce1c0
fix
2023-10-22 15:27:01 -04:00
3731716a49
fix
2023-10-22 15:14:22 -04:00
eec87a0508
fix
2023-10-22 15:11:26 -04:00
f3286cf440
fix
2023-10-22 15:10:21 -04:00
eb90d38d8c
fix
2023-10-22 15:05:33 -04:00
7f03c2b137
fix
2023-10-22 14:45:45 -04:00
c85db586ca
improve
2023-10-22 14:44:58 -04:00
7c0ea4324a
fix
2023-10-22 14:39:52 -04:00
6198ae317c
fix
2023-10-22 14:29:02 -04:00
245fad0986
fix
2023-10-22 14:00:06 -04:00
619f1705e1
output
2023-10-22 13:58:55 -04:00
52fa7db087
output
2023-10-22 13:57:38 -04:00
8a592c2e37
fix remountsecure kernel parameter logic
2023-10-22 13:56:17 -04:00
e689f38ad0
todo
2023-10-22 13:31:44 -04:00
6675a2e931
fix
2023-10-22 13:30:50 -04:00
4288e10554
fix, rework remount-secure kernel parameters parsing
2023-10-22 13:25:31 -04:00
b0181af099
fix
2023-10-22 13:12:25 -04:00
28cb53341d
remount-secure dracut module: improve output
2023-10-22 13:11:44 -04:00
84ca0ac8a0
improve remount-secure
2023-10-22 12:54:25 -04:00
e7d30955e8
debugging
2023-10-22 11:28:08 -04:00
8eb4607a0e
improve
2023-10-22 11:12:54 -04:00
f1da0ce746
fix
2023-10-22 11:11:10 -04:00
26826e8398
fix
2023-10-22 11:06:34 -04:00
233fa4625b
output
2023-10-22 10:49:53 -04:00
3ebe8cf4de
refactoring
2023-10-22 10:41:42 -04:00
24d2e26397
no longer reproducible
2023-10-22 10:40:19 -04:00
fcba70df2e
refactoring
2023-10-22 10:38:48 -04:00
