Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-04-01 13:58:09 -04:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'raja/miscellaneous'

Browse Source
This commit is contained in:
Patrick Schleizer 2024-07-17 10:32:26 -04:00
commit 9a387f95e9
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
26 changed files with 69 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
COPYING
View File

@ -8,7 +8,7 @@ License: AGPL-3+
GNU AFFERO GENERAL PUBLIC LICENSE
Version 3, 19 November 2007
.
Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed.
.
@ -650,7 +650,7 @@ License: AGPL-3+
GNU Affero General Public License for more details.
.
You should have received a copy of the GNU Affero General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
along with this program. If not, see <https://www.gnu.org/licenses/>.
.
Also add information on how to contact you by electronic and paper mail.
.
@ -665,4 +665,4 @@ License: AGPL-3+
You should also get your employer (if you work as a programmer) or school,
if any, to sign a "copyright disclaimer" for the program, if necessary.
For more information on this, and how to apply and follow the GNU AGPL, see
<http://www.gnu.org/licenses/>.
<https://www.gnu.org/licenses/>.

6
debian/copyright vendored
View File

@ -8,7 +8,7 @@ License: AGPL-3+
GNU AFFERO GENERAL PUBLIC LICENSE
Version 3, 19 November 2007
.
Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed.
.
@ -650,7 +650,7 @@ License: AGPL-3+
GNU Affero General Public License for more details.
.
You should have received a copy of the GNU Affero General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
along with this program. If not, see <https://www.gnu.org/licenses/>.
.
Also add information on how to contact you by electronic and paper mail.
.
@ -665,4 +665,4 @@ License: AGPL-3+
You should also get your employer (if you work as a programmer) or school,
if any, to sign a "copyright disclaimer" for the program, if necessary.
For more information on this, and how to apply and follow the GNU AGPL, see
<http://www.gnu.org/licenses/>.
<https://www.gnu.org/licenses/>.

3
debian/security-misc.displace-extension vendored
View File

@ -1 +1,4 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
.security-misc

3
debian/security-misc.gconf-defaults vendored
View File

@ -1,3 +1,6 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
/apps/nautilus/preview_sound never
/apps/nautilus/show_icon_text never
/apps/nautilus/show-image-thumbnails never

3
debian/security-misc.links vendored
View File

@ -1,2 +1,5 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
/etc/profile.d/30_security-misc.sh /etc/zprofile.d/30_security-misc.zsh
/etc/profile.d/30_security-misc.sh /etc/X11/Xsession.d/30_security-misc

5
etc/bluetooth/30_security-misc.conf
View File

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[General]
# How long to stay in pairable mode before going back to non-discoverable
# The value is in seconds. Default is 0.
@ -16,7 +19,7 @@ MaxControllers=1
# How long to keep temporary devices around
# The value is in seconds. Default is 30.
# 0 = disable timer, i.e. never keep temporary devices
TemporaryTimeout = 0
TemporaryTimeout = 0
[Policy]
# AutoEnable defines option to enable all controllers when they are found.

3
etc/dkms/framework.conf.d/30_security-misc.conf
View File

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## This configuration file modifies the behavior of
## DKMS (Dynamic Kernel Module Support) and is sourced
## in by DKMS every time it is run.

3
etc/dracut.conf.d/30-security-misc.conf
View File

@ -1,3 +1,6 @@
## Copyright (C) 2021 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
reproducible=yes
## Debugging.

3
etc/securetty.security-misc
View File

@ -1,2 +1,5 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
# /etc/securetty: list of terminals on which root is allowed to login.
# See securetty(5) and login(1).

3
etc/security/faillock.conf.security-misc
View File

@ -1,3 +1,6 @@
## Copyright (C) 2021 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
# Configuration for locking the user after multiple failed
# authentication attempts.
#

4
etc/skel/.gnupg/gpg.conf
View File

@ -282,13 +282,13 @@ display-charset utf-8
##################################################################
##################################################################
## BEGIN Some suggestions from Debian http://keyring.debian.org/creating-key.html
## BEGIN Some suggestions from Debian https://keyring.debian.org/creating-key.html
personal-digest-preferences SHA512
cert-digest-algo SHA512
default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed
## END Some suggestions from Debian http://keyring.debian.org/creating-key.html
## END Some suggestions from Debian https://keyring.debian.org/creating-key.html
##################################################################
##################################################################

3
etc/systemd/system/emergency.service.d/override.conf
View File

@ -1,3 +1,6 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802211
## https://salsa.debian.org/ah/user-setup/commit/bc5ca2de85ec27845d0b46059cb7cc02bae7b44d

3
etc/systemd/system/rescue.service.d/override.conf
View File

@ -1,3 +1,6 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802211
## https://salsa.debian.org/ah/user-setup/commit/bc5ca2de85ec27845d0b46059cb7cc02bae7b44d

2
usr/bin/pkexec.security-misc
View File

@ -34,7 +34,7 @@ switch_user=false
original_args="$@"
## Thanks to:
## http://mywiki.wooledge.org/BashFAQ/035
## https://mywiki.wooledge.org/BashFAQ/035
while :
do

2
usr/bin/remount-secure
View File

@ -70,7 +70,7 @@ init() {
parse_options() {
## Thanks to:
## http://mywiki.wooledge.org/BashFAQ/035
## https://mywiki.wooledge.org/BashFAQ/035
while :
do

3
usr/lib/NetworkManager/conf.d/80_ipv6-privacy.conf
View File

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions.
##
## https://datatracker.ietf.org/doc/html/rfc4941

3
usr/lib/NetworkManager/conf.d/80_randomize-mac.conf
View File

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions.
##
## https://datatracker.ietf.org/doc/html/rfc4941

3
usr/lib/systemd/coredump.conf.d/30_security-misc.conf
View File

@ -1,2 +1,5 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[Coredump]
Storage=none

3
usr/lib/systemd/networkd.conf.d/80_ipv6-privacy-extensions.conf
View File

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions.
##
## https://datatracker.ietf.org/doc/html/rfc4941

3
usr/lib/systemd/system/harden-module-loading.service
View File

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[Unit]
Description=Disable the loading of additional modules after systemd-modules-load.service
Documentation=https://github.com/Kicksecure/security-misc

3
usr/lib/systemd/system/sysinit-post.target
View File

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[Unit]
Description=sys-init.target by security-misc

3
usr/lib/systemd/system/user@.service.d/sysfs.conf
View File

@ -1,2 +1,5 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[Service]
SupplementaryGroups=sysfs

3
usr/libexec/security-misc/disable-kernel-module-loading
View File

@ -1,5 +1,8 @@
#!/bin/bash
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
set -x
set -e

2
usr/libexec/security-misc/virusforget
View File

@ -29,7 +29,7 @@ root_check() {
parse_cmd_options() {
## Thanks to:
## http://mywiki.wooledge.org/BashFAQ/035
## https://mywiki.wooledge.org/BashFAQ/035
while :
do

3
usr/share/glib-2.0/schemas/30_security-misc.gschema.override
View File

@ -1,2 +1,5 @@
## Copyright (C) 2017 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[org.gnome.nautilus.preferences]
show-image-thumbnails="never"

1
usr/share/security-misc/dolphinrc
View File

@ -3,4 +3,3 @@
[PreviewSettings]
Plugins=