Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-03 15:59:57 -05:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/master'

Browse Source
This commit is contained in:
Patrick Schleizer 2019-07-09 06:55:27 -04:00
commit 5fb500ac32
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
4 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
debian/control vendored
View File

@ -121,6 +121,9 @@ Description: enhances misc security settings
The default umask is changed to 006. This allows only the owner and group to The default umask is changed to 006. This allows only the owner and group to
read and write to newly created files. read and write to newly created files.
. .
The kernel now panics on oopses to prevent it from continuing running a
flawed process.
.
Su is restricted to only users within the root group which prevents users from Su is restricted to only users within the root group which prevents users from
using su to gain root access or switch user accounts. using su to gain root access or switch user accounts.
. .
@ -128,3 +131,4 @@ Description: enhances misc security settings
. .
The amount of hashing rounds used by shadow is bumped to 65536. This increases The amount of hashing rounds used by shadow is bumped to 65536. This increases
the security of hashed passwords. the security of hashed passwords.

8
etc/X11/Xsession.d/50panic_on_oops Normal file
View File

@ -0,0 +1,8 @@
#!/bin/sh
## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
## See the file COPYING for copying conditions.
if [ -x /usr/lib/security-misc/panic-on-oops ]; then
sudo --non-interactive /usr/lib/security-misc/panic-on-oops
fi

4
etc/sudoers.d/security-misc Normal file
View File

@ -0,0 +1,4 @@
## Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
## See the file COPYING for copying conditions.
user ALL=NOPASSWD: /usr/lib/security-misc/panic-on-oops

7
usr/lib/security-misc/panic-on-oops Normal file
View File

@ -0,0 +1,7 @@
#!/bin/bash
## Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
## See the file COPYING for copying conditions.
# Makes the kernel panic on oopses.
sysctl kernel.panic_on_oops=1