Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-14 19:29:13 -04:00
Code Issues Projects Releases Packages Wiki Activity

comments

Browse source
This commit is contained in:
Patrick Schleizer 2025-04-08 06:53:08 -04:00
parent 173606891a
commit 39f4f5b607
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
7 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
debian/security-misc.preinst vendored
View file

@ -47,7 +47,7 @@ user_groups_modifications() {
## an "empty" /etc/securetty. ## an "empty" /etc/securetty.
## In case a system administrator edits /etc/securetty, there is no need to ## In case a system administrator edits /etc/securetty, there is no need to
## block for this to be still blocked by console lockdown. See also: ## block for this to be still blocked by console lockdown. See also:
## https://www.whonix.org/wiki/Root#Root_Login ## https://www.kicksecure.com/wiki/Root#Root_Login
adduser root console adduser root console
} }

2
etc/hide-hardware-info.d/30_default.conf
View file

@ -11,5 +11,5 @@
#sysfs=0 #sysfs=0
## Disable selinux mode. ## Disable selinux mode.
## https://www.whonix.org/wiki/Security-misc#selinux ## https://www.kicksecure.com/wiki/Security-misc#selinux
#selinux=0 #selinux=0

2
etc/security/access-security-misc.conf
View file

@ -2,7 +2,7 @@
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## To enable root login, see: ## To enable root login, see:
## https://www.whonix.org/wiki/Root#Root_Login ## https://www.kicksecure.com/wiki/Root#Root_Login
## Console Lockdown ## Console Lockdown
## https://forums.whonix.org/t/etc-security-hardening/8592 ## https://forums.whonix.org/t/etc-security-hardening/8592

2
usr/lib/modules-load.d/30_security-misc.conf
View file

@ -1,7 +1,7 @@
## Copyright (C) 2019 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org> ## Copyright (C) 2019 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## https://www.whonix.org/wiki/Dev/Entropy ## https://www.kicksecure.com/wiki/Dev/Entropy
## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927972 ## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927972
## https://forums.whonix.org/t/jitterentropy-rngd/7204 ## https://forums.whonix.org/t/jitterentropy-rngd/7204
jitterentropy_rng jitterentropy_rng

2
usr/lib/permission-hardener.d/25_default_whitelist_firejail.conf
View file

@ -7,5 +7,5 @@
## There is a controversy about firejail but those who choose to install it ## There is a controversy about firejail but those who choose to install it
## should be able to use it. ## should be able to use it.
## https://www.whonix.org/wiki/Dev/Firejail#Security ## https://www.kicksecure.com/wiki/Dev/Firejail#Security
/usr/bin/firejail exactwhitelist /usr/bin/firejail exactwhitelist

2
usr/libexec/security-misc/pam-abort-on-locked-password
View file

@ -12,7 +12,7 @@ passwd_bin="$(type -P -- "passwd")"
if ! test -x "$passwd_bin" ; then if ! test -x "$passwd_bin" ; then
echo "\ echo "\
$0: ERROR: passwd_bin \"$passwd_bin\" is not executable. $0: ERROR: passwd_bin \"$passwd_bin\" is not executable.
See https://www.whonix.org/wiki/SUID_Disabler_and_Permission_Hardener#passwd" >&2 See https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener#passwd" >&2
## Identifiable exit codes in case stdout / stderr is not logged in journal. ## Identifiable exit codes in case stdout / stderr is not logged in journal.
exit 2 exit 2
fi fi

2
usr/libexec/security-misc/pam-info
View file

@ -116,7 +116,7 @@ fi
## ##
## https://askubuntu.com/questions/983183/how-lock-the-unlock-screen-after-wrong-password-attempts ## https://askubuntu.com/questions/983183/how-lock-the-unlock-screen-after-wrong-password-attempts
## ##
## https://www.whonix.org/pipermail/whonix-devel/2019-September/001439.html ## https://web.archive.org/web/20200919221439/https://www.whonix.org/pipermail/whonix-devel/2019-September/001439.html
## ##
## Checking exit code to avoid breaking when read-only disk boot but ## Checking exit code to avoid breaking when read-only disk boot but
## without ro-mode-init or grub-live being used. ## without ro-mode-init or grub-live being used.