Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-11-25 12:16:22 -05:00
Code Issues Projects Releases Packages Wiki Activity

Lock down flatpak software management

Browse source
This commit is contained in:
Aaron Rainbolt 2025-10-31 15:23:12 -05:00
parent 948c96afe9
commit 8b766fc3ad
No known key found for this signature in database
GPG key ID: A709160D73C79109
4 changed files with 966 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
debian/security-misc-shared.displace vendored
View file

@ -4,3 +4,4 @@
/etc/securetty.security-misc
/etc/security/faillock.conf.security-misc
/etc/usbguard/usbguard-daemon.conf.security-misc
/usr/share/polkit-1/actions/org.freedesktop.Flatpak.policy.security-misc

6
debian/security-misc-shared.hide vendored Normal file
View file

@ -0,0 +1,6 @@
## Copyright (C) 2025 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## Allows users in the 'sudo' group to install Flatpak software without
## authorization. Breaks user/sysmaint separation, thus disabled.
/usr/share/polkit-1/rules.d/org.freedesktop.Flatpak.rules

1
debian/security-misc-shared.install vendored
View file

@ -127,6 +127,7 @@ usr/share/pam-configs/unix-faillock-security-misc#security-misc-shared => /usr/s
usr/share/pam-configs/console-lockdown-security-misc#security-misc-shared => /usr/share/pam-configs/console-lockdown-security-misc
usr/share/pam-configs/mkhomedir-security-misc#security-misc-shared => /usr/share/pam-configs/mkhomedir-security-misc
usr/share/pam-configs/pam-abort-on-locked-password-security-misc#security-misc-shared => /usr/share/pam-configs/pam-abort-on-locked-password-security-misc
usr/share/polkit-1/actions/org.freedesktop.Flatpak.policy.security-misc#security-misc-shared => /usr/share/polkit-1/actions/org.freedesktop.Flatpak.policy.security-misc
usr/share/lintian/overrides/security-misc-shared#security-misc-shared => /usr/share/lintian/overrides/security-misc-shared
usr/share/security-misc/lkrg/30-lkrg-virtualbox.conf#security-misc-shared => /usr/share/security-misc/lkrg/30-lkrg-virtualbox.conf
usr/share/security-misc/lkrg/lkrg-virtualbox#security-misc-shared => /usr/share/security-misc/lkrg/lkrg-virtualbox