mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-04-14 06:32:56 -04:00
comments
This commit is contained in:
parent
173606891a
commit
39f4f5b607
2
debian/security-misc.preinst
vendored
2
debian/security-misc.preinst
vendored
@ -47,7 +47,7 @@ user_groups_modifications() {
|
||||
## an "empty" /etc/securetty.
|
||||
## In case a system administrator edits /etc/securetty, there is no need to
|
||||
## block for this to be still blocked by console lockdown. See also:
|
||||
## https://www.whonix.org/wiki/Root#Root_Login
|
||||
## https://www.kicksecure.com/wiki/Root#Root_Login
|
||||
adduser root console
|
||||
}
|
||||
|
||||
|
@ -11,5 +11,5 @@
|
||||
#sysfs=0
|
||||
|
||||
## Disable selinux mode.
|
||||
## https://www.whonix.org/wiki/Security-misc#selinux
|
||||
## https://www.kicksecure.com/wiki/Security-misc#selinux
|
||||
#selinux=0
|
||||
|
@ -2,7 +2,7 @@
|
||||
## See the file COPYING for copying conditions.
|
||||
|
||||
## To enable root login, see:
|
||||
## https://www.whonix.org/wiki/Root#Root_Login
|
||||
## https://www.kicksecure.com/wiki/Root#Root_Login
|
||||
|
||||
## Console Lockdown
|
||||
## https://forums.whonix.org/t/etc-security-hardening/8592
|
||||
|
@ -1,7 +1,7 @@
|
||||
## Copyright (C) 2019 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org>
|
||||
## See the file COPYING for copying conditions.
|
||||
|
||||
## https://www.whonix.org/wiki/Dev/Entropy
|
||||
## https://www.kicksecure.com/wiki/Dev/Entropy
|
||||
## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927972
|
||||
## https://forums.whonix.org/t/jitterentropy-rngd/7204
|
||||
jitterentropy_rng
|
||||
|
@ -7,5 +7,5 @@
|
||||
|
||||
## There is a controversy about firejail but those who choose to install it
|
||||
## should be able to use it.
|
||||
## https://www.whonix.org/wiki/Dev/Firejail#Security
|
||||
## https://www.kicksecure.com/wiki/Dev/Firejail#Security
|
||||
/usr/bin/firejail exactwhitelist
|
||||
|
@ -12,7 +12,7 @@ passwd_bin="$(type -P -- "passwd")"
|
||||
if ! test -x "$passwd_bin" ; then
|
||||
echo "\
|
||||
$0: ERROR: passwd_bin \"$passwd_bin\" is not executable.
|
||||
See https://www.whonix.org/wiki/SUID_Disabler_and_Permission_Hardener#passwd" >&2
|
||||
See https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener#passwd" >&2
|
||||
## Identifiable exit codes in case stdout / stderr is not logged in journal.
|
||||
exit 2
|
||||
fi
|
||||
|
@ -116,7 +116,7 @@ fi
|
||||
##
|
||||
## https://askubuntu.com/questions/983183/how-lock-the-unlock-screen-after-wrong-password-attempts
|
||||
##
|
||||
## https://www.whonix.org/pipermail/whonix-devel/2019-September/001439.html
|
||||
## https://web.archive.org/web/20200919221439/https://www.whonix.org/pipermail/whonix-devel/2019-September/001439.html
|
||||
##
|
||||
## Checking exit code to avoid breaking when read-only disk boot but
|
||||
## without ro-mode-init or grub-live being used.
|
||||
|
Loading…
x
Reference in New Issue
Block a user