This commit is contained in:
Patrick Schleizer 2025-04-08 06:53:08 -04:00
parent 173606891a
commit 39f4f5b607
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
7 changed files with 7 additions and 7 deletions

View File

@ -47,7 +47,7 @@ user_groups_modifications() {
## an "empty" /etc/securetty.
## In case a system administrator edits /etc/securetty, there is no need to
## block for this to be still blocked by console lockdown. See also:
## https://www.whonix.org/wiki/Root#Root_Login
## https://www.kicksecure.com/wiki/Root#Root_Login
adduser root console
}

View File

@ -11,5 +11,5 @@
#sysfs=0
## Disable selinux mode.
## https://www.whonix.org/wiki/Security-misc#selinux
## https://www.kicksecure.com/wiki/Security-misc#selinux
#selinux=0

View File

@ -2,7 +2,7 @@
## See the file COPYING for copying conditions.
## To enable root login, see:
## https://www.whonix.org/wiki/Root#Root_Login
## https://www.kicksecure.com/wiki/Root#Root_Login
## Console Lockdown
## https://forums.whonix.org/t/etc-security-hardening/8592

View File

@ -1,7 +1,7 @@
## Copyright (C) 2019 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## https://www.whonix.org/wiki/Dev/Entropy
## https://www.kicksecure.com/wiki/Dev/Entropy
## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927972
## https://forums.whonix.org/t/jitterentropy-rngd/7204
jitterentropy_rng

View File

@ -7,5 +7,5 @@
## There is a controversy about firejail but those who choose to install it
## should be able to use it.
## https://www.whonix.org/wiki/Dev/Firejail#Security
## https://www.kicksecure.com/wiki/Dev/Firejail#Security
/usr/bin/firejail exactwhitelist

View File

@ -12,7 +12,7 @@ passwd_bin="$(type -P -- "passwd")"
if ! test -x "$passwd_bin" ; then
echo "\
$0: ERROR: passwd_bin \"$passwd_bin\" is not executable.
See https://www.whonix.org/wiki/SUID_Disabler_and_Permission_Hardener#passwd" >&2
See https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener#passwd" >&2
## Identifiable exit codes in case stdout / stderr is not logged in journal.
exit 2
fi

View File

@ -116,7 +116,7 @@ fi
##
## https://askubuntu.com/questions/983183/how-lock-the-unlock-screen-after-wrong-password-attempts
##
## https://www.whonix.org/pipermail/whonix-devel/2019-September/001439.html
## https://web.archive.org/web/20200919221439/https://www.whonix.org/pipermail/whonix-devel/2019-September/001439.html
##
## Checking exit code to avoid breaking when read-only disk boot but
## without ro-mode-init or grub-live being used.