Commit Graph

  • 8a2d432ffe
    bumped changelog version 39.9-1 Patrick Schleizer 2024-10-03 07:22:23 +0000
  • 0e3ffa3f11
    no longer set kernel.unprivileged_userns_clone=0 Patrick Schleizer 2024-10-03 02:58:58 -0400
  • f401d94d5e
    expand documentation on kernel.unprivileged_userns_clone=0 sysctl Patrick Schleizer 2024-10-03 02:44:06 -0400
  • ac1378743c
    Consistent formatting raja-grewal 2024-09-30 16:56:18 +1000
  • eae38e72f3
    README.md: Show the current max_map_count raja-grewal 2024-09-26 13:10:36 +0000
  • f3b50a23c9
    Add reference on unprivileged_userns_restriction raja-grewal 2024-09-26 13:10:01 +0000
  • 39d063d494
    Add KSPP=no definition raja-grewal 2024-09-26 13:09:21 +0000
  • 5572eb897a
    bumped changelog version 39.8-1 Patrick Schleizer 2024-09-25 01:03:42 +0000
  • e04f9cd4c1
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-09-24 20:16:06 -0400
  • 65aa910503
    Merge pull request #272 from raja-grewal/text Patrick Schleizer 2024-09-24 20:15:03 -0400
  • 870ff88605
    Comment on Flatpak requiring unprivileged user namespaces raja-grewal 2024-09-25 10:01:45 +1000
  • 769767a96a
    Update mmap ASLR docs raja-grewal 2024-09-25 09:54:49 +1000
  • 18d426f521
    bumped changelog version 39.7-1 Patrick Schleizer 2024-09-14 02:56:09 +0000
  • 3280dbd5d5
    Fix VirtualBox audio device ICH AC97. Patrick Schleizer 2024-09-13 22:52:47 -0400
  • 1bc694fa12
    bumped changelog version 39.6-1 Patrick Schleizer 2024-09-08 17:41:30 +0000
  • 01908d505a
    readme Patrick Schleizer 2024-09-05 07:00:11 -0400
  • e914028be7
    add KSPP compliance status to readme based on comment by @raja-grewal Patrick Schleizer 2024-09-05 06:03:05 -0400
  • 40fb14c654
    bumped changelog version 39.5-1 Patrick Schleizer 2024-09-04 14:13:15 +0000
  • 5a255d4831
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-09-04 10:12:34 -0400
  • 563a898013
    Merge pull request #265 from raja-grewal/mmap_min_addr Patrick Schleizer 2024-09-04 10:11:48 -0400
  • d618f9f35b
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-09-04 10:07:50 -0400
  • 175945ec9a
    Merge pull request #268 from raja-grewal/panic_on_warn Patrick Schleizer 2024-09-04 10:05:47 -0400
  • b0a8544182
    Merge pull request #270 from raja-grewal/typo Patrick Schleizer 2024-09-04 10:04:45 -0400
  • 7393ba1591
    Typo raja-grewal 2024-09-04 23:23:24 +1000
  • 59374ce902
    bumped changelog version 39.4-1 Patrick Schleizer 2024-08-29 09:49:51 +0000
  • 7e2838ec07
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-08-29 05:06:07 -0400
  • 0762794ff6
    Merge pull request #269 from raja-grewal/tidy Patrick Schleizer 2024-08-29 04:46:26 -0400
  • 6294729c8e
    Follow-up on f70fe308a9 Raja Grewal 2024-08-29 15:34:24 +1000
  • 3101035a3f
    Enable panic_on_warn=1 Raja Grewal 2024-08-29 01:57:32 +1000
  • 9c918eb431
    bumped changelog version 39.3-1 Patrick Schleizer 2024-08-28 11:01:37 +0000
  • f70fe308a9
    no longer set sysctl fs.binfmt_misc.status=0 / no longer disallow registering interpreters for miscellaneous binary formats Patrick Schleizer 2024-08-28 06:49:50 -0400
  • 463aa58f28
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-08-28 06:42:49 -0400
  • 328840c933
    Merge pull request #264 from raja-grewal/kspp_compliance Patrick Schleizer 2024-08-28 06:38:57 -0400
  • 9e91c98cc9
    Add details on BPF hardening and split the sysctls Raja Grewal 2024-08-26 12:40:04 +1000
  • 2c356e8b0e
    Add KSPP notice definitions Raja Grewal 2024-08-26 11:34:12 +1000
  • 2841d789be
    README: Update Raja Grewal 2024-08-26 11:21:26 +1000
  • ac6602ac35
    Add detail on disabling user namespaces breaking UPower Raja Grewal 2024-08-26 11:19:20 +1000
  • 9dbd200be4
    Merge branch 'Kicksecure:master' into kspp_compliance raja-grewal 2024-08-26 11:08:21 +1000
  • cf824ddb24
    bumped changelog version 39.2-1 Patrick Schleizer 2024-08-25 15:34:55 +0000
  • 500568e322
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-08-25 11:01:58 -0400
  • 73900b59db
    Merge pull request #263 from raja-grewal/max_user_namespaces Patrick Schleizer 2024-08-25 11:00:51 -0400
  • 43d13b70f1
    Merge remote-tracking branch 'raja/syntax' Patrick Schleizer 2024-08-25 10:55:52 -0400
  • 835376418d
    Merge remote-tracking branch 'raja/mod' Patrick Schleizer 2024-08-25 10:48:25 -0400
  • ae85fd5b4c
    bumped changelog version 39.1-1 Patrick Schleizer 2024-08-25 14:33:40 +0000
  • 433b15f985
    README.md: Organise sysctls Raja Grewal 2024-08-21 12:51:51 +1000
  • af87a84b4f
    README.md: Organise kernel boot parameters Raja Grewal 2024-08-21 12:52:48 +1000
  • 32de5e7c49
    Add details on oopses and warnings Raja Grewal 2024-08-25 12:57:22 +1000
  • e4909b5e28
    Add details on kernel panics Raja Grewal 2024-08-25 12:47:04 +1000
  • 342caf82b2
    README.md: Organise kernel boot parameters Raja Grewal 2024-08-21 12:52:48 +1000
  • b87a18d405
    README.md: Organise sysctls Raja Grewal 2024-08-21 12:51:51 +1000
  • 18ed77ecc9
    Refactor modprobe.d to minimise potential future merge conflicts Raja Grewal 2024-08-21 12:50:14 +1000
  • 56b28e3826
    Typo Raja Grewal 2024-08-19 11:50:08 +1000
  • e61027a40e
    Set sysctl vm.mmap_min_addr=65536 Raja Grewal 2024-08-19 11:32:20 +1000
  • 94dab1b7c5
    Partial compliance with the KSPP on kernel panics Raja Grewal 2024-08-19 10:53:05 +1000
  • 683110e7f0
    Correction Raja Grewal 2024-08-19 01:34:14 +1000
  • 1f51d4eeb2
    Add details on user namespaces Raja Grewal 2024-08-18 13:53:11 +1000
  • 248e094b8e
    Include KSPP compliance notices Raja Grewal 2024-08-17 01:06:21 +1000
  • 759aee8150
    Provide option to disable user namespaces Raja Grewal 2024-08-16 22:54:57 +1000
  • fae586c3c5
    Patch bug in existing rp_filter sysctl Raja Grewal 2024-08-16 19:23:48 +1000
  • e962153f84
    bumped changelog version 39.0-1 Patrick Schleizer 2024-08-16 08:38:12 +0000
  • 40b12f5a2a
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-08-16 04:30:29 -0400
  • 305467c652
    Merge pull request #245 from raja-grewal/blacklist_to_disable Patrick Schleizer 2024-08-16 04:25:43 -0400
  • 12296c68dc
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-08-16 04:22:43 -0400
  • 036bcea4e6
    Merge pull request #262 from raja-grewal/docs Patrick Schleizer 2024-08-16 04:20:32 -0400
  • 81bf7a8f90
    Merge branch 'Kicksecure:master' into docs raja-grewal 2024-08-16 16:57:01 +1000
  • ef60c5b153
    Merge pull request #249 from raja-grewal/binfmt_misc Patrick Schleizer 2024-08-16 02:43:57 -0400
  • cea8e75378
    Consistent formating Raja Grewal 2024-08-16 14:55:22 +1000
  • 84376d23fc
    Add details on ASLR and move to user space section Raja Grewal 2024-08-16 13:39:11 +1000
  • a132980023
    Update README.md Raja Grewal 2024-08-16 13:24:25 +1000
  • 9212a4e937
    Typos Raja Grewal 2024-08-16 13:12:07 +1000
  • 23a77d4973
    Simplify syntax of some network-related sysctl's Raja Grewal 2024-08-16 12:46:51 +1000
  • e3a3207a44
    Clarify DMA hardening Raja Grewal 2024-08-16 12:41:36 +1000
  • be9308e490
    Merge branch 'Kicksecure:master' into docs raja-grewal 2024-08-16 11:45:43 +1000
  • 4bc12b07b4
    bumped changelog version 38.9-1 Patrick Schleizer 2024-08-15 17:51:18 +0000
  • 9e61e37c17
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-08-15 13:47:33 -0400
  • dfd1c97168
    Merge pull request #248 from raja-grewal/secure_redirects Patrick Schleizer 2024-08-15 13:46:30 -0400
  • b552b92401
    Add references on fs.binfmt_misc.status Raja Grewal 2024-08-15 11:54:21 +1000
  • 326d82a9be
    Revert "Provide optional sysctl fs.binfmt_misc.status=0" Raja Grewal 2024-08-15 11:46:56 +1000
  • 73db68dbf9
    Add details on KFENCE Raja Grewal 2024-08-09 14:27:30 +1000
  • f8fa89b245
    Add details on tcp_timestamps Raja Grewal 2024-08-09 14:21:59 +1000
  • 3456f1c1d7
    Minor consistency update in README.md Raja Grewal 2024-08-09 13:39:25 +1000
  • 15c638acad
    Add reference on RDRAND Raja Grewal 2024-08-09 13:36:47 +1000
  • 077bc48a26
    Add reference on rp_filter Raja Grewal 2024-08-09 13:35:33 +1000
  • d8bcec881f
    Add some notices for future Debian 13 rebase Raja Grewal 2024-08-09 13:33:32 +1000
  • 0b0683499a
    Consistent line length formatting Raja Grewal 2024-08-09 13:30:39 +1000
  • e5a38fc856
    Typo Raja Grewal 2024-08-09 13:30:15 +1000
  • a5373afc55
    Details on disabled fbdev kernel modules Raja Grewal 2024-08-07 14:44:14 +1000
  • e98dc8c4f8
    Update notifications for disabled kernel modules Raja Grewal 2024-08-07 14:14:47 +1000
  • 50fa721fd5
    Update docs regarding Intel module disabling Raja Grewal 2024-08-07 14:01:49 +1000
  • ec3038c7bc
    Clarify secure_redirects Raja Grewal 2024-08-07 13:48:53 +1000
  • debd7a7b7a
    Provide optional sysctl fs.binfmt_misc.status=0 Raja Grewal 2024-08-07 13:33:44 +1000
  • 89e816dda6
    bumped changelog version 38.8-1 Patrick Schleizer 2024-08-06 14:01:39 +0000
  • 967f9e257b
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-08-06 09:57:56 -0400
  • a25aaf900a
    Merge pull request #260 from raja-grewal/vdso32 Patrick Schleizer 2024-08-06 09:55:20 -0400
  • 6bc039a430
    Merge pull request #259 from raja-grewal/kfence Patrick Schleizer 2024-08-06 09:52:56 -0400
  • ce60d5615f
    Merge pull request #258 from raja-grewal/legacy_tiocsti Patrick Schleizer 2024-08-06 09:48:08 -0400
  • b0278428a7
    Merge pull request #257 from raja-grewal/slab_debug Patrick Schleizer 2024-08-06 09:39:04 -0400
  • 8559079312
    Enable vdso32=0 Raja Grewal 2024-08-05 15:10:02 +1000
  • d102ec1997
    Enable kfence.sample_interval=100 Raja Grewal 2024-08-05 15:07:56 +1000
  • c0d140f221
    Enable dev.tty.legacy_tiocsti=0 Raja Grewal 2024-08-05 15:06:34 +1000