Merge branch 'master' into patch-16

This commit is contained in:
Patrick Schleizer 2019-07-09 10:54:24 +00:00 committed by GitHub
commit 0f15303eb4
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 107 additions and 0 deletions

11
debian/control vendored
View file

@ -25,6 +25,8 @@ Description: enhances misc security settings
deactivates Netfilter's connection tracking helper;
implements some kernel hardening;
prevents DMA attacks;
restricts access to the root account;
increases the amount of hashing rounds used by shadow;
.
TCP time stamps (RFC 1323) allow for tracking clock
information with millisecond resolution. This may or may not allow an
@ -121,3 +123,12 @@ Description: enhances misc security settings
.
The kernel now panics on oopses to prevent it from continuing running a
flawed process.
.
Su is restricted to only users within the root group which prevents users from
using su to gain root access or switch user accounts.
.
Logging into the root account from a terminal is prevented.
.
The amount of hashing rounds used by shadow is bumped to 65536. This increases
the security of hashed passwords.