diff --git a/COPYING b/COPYING index 808999e..bf11138 100644 --- a/COPYING +++ b/COPYING @@ -8,7 +8,7 @@ License: AGPL-3+ GNU AFFERO GENERAL PUBLIC LICENSE Version 3, 19 November 2007 . - Copyright (C) 2007 Free Software Foundation, Inc. + Copyright (C) 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. . @@ -650,7 +650,7 @@ License: AGPL-3+ GNU Affero General Public License for more details. . You should have received a copy of the GNU Affero General Public License - along with this program. If not, see . + along with this program. If not, see . . Also add information on how to contact you by electronic and paper mail. . @@ -665,4 +665,4 @@ License: AGPL-3+ You should also get your employer (if you work as a programmer) or school, if any, to sign a "copyright disclaimer" for the program, if necessary. For more information on this, and how to apply and follow the GNU AGPL, see - . + . diff --git a/debian/copyright b/debian/copyright index 808999e..bf11138 100644 --- a/debian/copyright +++ b/debian/copyright @@ -8,7 +8,7 @@ License: AGPL-3+ GNU AFFERO GENERAL PUBLIC LICENSE Version 3, 19 November 2007 . - Copyright (C) 2007 Free Software Foundation, Inc. + Copyright (C) 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. . @@ -650,7 +650,7 @@ License: AGPL-3+ GNU Affero General Public License for more details. . You should have received a copy of the GNU Affero General Public License - along with this program. If not, see . + along with this program. If not, see . . Also add information on how to contact you by electronic and paper mail. . @@ -665,4 +665,4 @@ License: AGPL-3+ You should also get your employer (if you work as a programmer) or school, if any, to sign a "copyright disclaimer" for the program, if necessary. For more information on this, and how to apply and follow the GNU AGPL, see - . + . diff --git a/debian/security-misc.displace-extension b/debian/security-misc.displace-extension index 6ecb033..2959324 100644 --- a/debian/security-misc.displace-extension +++ b/debian/security-misc.displace-extension @@ -1 +1,4 @@ +## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + .security-misc diff --git a/debian/security-misc.gconf-defaults b/debian/security-misc.gconf-defaults index 26d57ff..ebfb7f3 100644 --- a/debian/security-misc.gconf-defaults +++ b/debian/security-misc.gconf-defaults @@ -1,3 +1,6 @@ +## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + /apps/nautilus/preview_sound never /apps/nautilus/show_icon_text never /apps/nautilus/show-image-thumbnails never diff --git a/debian/security-misc.links b/debian/security-misc.links index 308f070..467193f 100644 --- a/debian/security-misc.links +++ b/debian/security-misc.links @@ -1,2 +1,5 @@ +## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + /etc/profile.d/30_security-misc.sh /etc/zprofile.d/30_security-misc.zsh /etc/profile.d/30_security-misc.sh /etc/X11/Xsession.d/30_security-misc diff --git a/etc/bluetooth/30_security-misc.conf b/etc/bluetooth/30_security-misc.conf index d3410f2..8f45502 100644 --- a/etc/bluetooth/30_security-misc.conf +++ b/etc/bluetooth/30_security-misc.conf @@ -1,3 +1,6 @@ +## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + [General] # How long to stay in pairable mode before going back to non-discoverable # The value is in seconds. Default is 0. @@ -16,7 +19,7 @@ MaxControllers=1 # How long to keep temporary devices around # The value is in seconds. Default is 30. # 0 = disable timer, i.e. never keep temporary devices -TemporaryTimeout = 0 +TemporaryTimeout = 0 [Policy] # AutoEnable defines option to enable all controllers when they are found. diff --git a/etc/dkms/framework.conf.d/30_security-misc.conf b/etc/dkms/framework.conf.d/30_security-misc.conf index f9a643d..095e050 100644 --- a/etc/dkms/framework.conf.d/30_security-misc.conf +++ b/etc/dkms/framework.conf.d/30_security-misc.conf @@ -1,3 +1,6 @@ +## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + ## This configuration file modifies the behavior of ## DKMS (Dynamic Kernel Module Support) and is sourced ## in by DKMS every time it is run. diff --git a/etc/dracut.conf.d/30-security-misc.conf b/etc/dracut.conf.d/30-security-misc.conf index 90c7698..4e24799 100644 --- a/etc/dracut.conf.d/30-security-misc.conf +++ b/etc/dracut.conf.d/30-security-misc.conf @@ -1,3 +1,6 @@ +## Copyright (C) 2021 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + reproducible=yes ## Debugging. diff --git a/etc/securetty.security-misc b/etc/securetty.security-misc index ca0d81b..e32ca29 100644 --- a/etc/securetty.security-misc +++ b/etc/securetty.security-misc @@ -1,2 +1,5 @@ +## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + # /etc/securetty: list of terminals on which root is allowed to login. # See securetty(5) and login(1). diff --git a/etc/security/faillock.conf.security-misc b/etc/security/faillock.conf.security-misc index bb81754..d52c196 100644 --- a/etc/security/faillock.conf.security-misc +++ b/etc/security/faillock.conf.security-misc @@ -1,3 +1,6 @@ +## Copyright (C) 2021 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + # Configuration for locking the user after multiple failed # authentication attempts. # diff --git a/etc/skel/.gnupg/gpg.conf b/etc/skel/.gnupg/gpg.conf index f8004fe..f0ed5a4 100644 --- a/etc/skel/.gnupg/gpg.conf +++ b/etc/skel/.gnupg/gpg.conf @@ -282,13 +282,13 @@ display-charset utf-8 ################################################################## ################################################################## -## BEGIN Some suggestions from Debian http://keyring.debian.org/creating-key.html +## BEGIN Some suggestions from Debian https://keyring.debian.org/creating-key.html personal-digest-preferences SHA512 cert-digest-algo SHA512 default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed -## END Some suggestions from Debian http://keyring.debian.org/creating-key.html +## END Some suggestions from Debian https://keyring.debian.org/creating-key.html ################################################################## ################################################################## diff --git a/etc/systemd/system/emergency.service.d/override.conf b/etc/systemd/system/emergency.service.d/override.conf index b24186a..a7d4469 100644 --- a/etc/systemd/system/emergency.service.d/override.conf +++ b/etc/systemd/system/emergency.service.d/override.conf @@ -1,3 +1,6 @@ +## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + ## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802211 ## https://salsa.debian.org/ah/user-setup/commit/bc5ca2de85ec27845d0b46059cb7cc02bae7b44d diff --git a/etc/systemd/system/rescue.service.d/override.conf b/etc/systemd/system/rescue.service.d/override.conf index b24186a..a7d4469 100644 --- a/etc/systemd/system/rescue.service.d/override.conf +++ b/etc/systemd/system/rescue.service.d/override.conf @@ -1,3 +1,6 @@ +## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + ## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802211 ## https://salsa.debian.org/ah/user-setup/commit/bc5ca2de85ec27845d0b46059cb7cc02bae7b44d diff --git a/usr/bin/pkexec.security-misc b/usr/bin/pkexec.security-misc index be8fddd..3739391 100755 --- a/usr/bin/pkexec.security-misc +++ b/usr/bin/pkexec.security-misc @@ -34,7 +34,7 @@ switch_user=false original_args="$@" ## Thanks to: -## http://mywiki.wooledge.org/BashFAQ/035 +## https://mywiki.wooledge.org/BashFAQ/035 while : do diff --git a/usr/bin/remount-secure b/usr/bin/remount-secure index 92e3aa8..14da1fe 100755 --- a/usr/bin/remount-secure +++ b/usr/bin/remount-secure @@ -70,7 +70,7 @@ init() { parse_options() { ## Thanks to: - ## http://mywiki.wooledge.org/BashFAQ/035 + ## https://mywiki.wooledge.org/BashFAQ/035 while : do diff --git a/usr/lib/NetworkManager/conf.d/80_ipv6-privacy.conf b/usr/lib/NetworkManager/conf.d/80_ipv6-privacy.conf index 0605c37..246eaf2 100644 --- a/usr/lib/NetworkManager/conf.d/80_ipv6-privacy.conf +++ b/usr/lib/NetworkManager/conf.d/80_ipv6-privacy.conf @@ -1,3 +1,6 @@ +## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + ## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions. ## ## https://datatracker.ietf.org/doc/html/rfc4941 diff --git a/usr/lib/NetworkManager/conf.d/80_randomize-mac.conf b/usr/lib/NetworkManager/conf.d/80_randomize-mac.conf index 04d0312..dfeda10 100644 --- a/usr/lib/NetworkManager/conf.d/80_randomize-mac.conf +++ b/usr/lib/NetworkManager/conf.d/80_randomize-mac.conf @@ -1,3 +1,6 @@ +## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + ## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions. ## ## https://datatracker.ietf.org/doc/html/rfc4941 diff --git a/usr/lib/systemd/coredump.conf.d/30_security-misc.conf b/usr/lib/systemd/coredump.conf.d/30_security-misc.conf index 519f838..2cb1b1a 100644 --- a/usr/lib/systemd/coredump.conf.d/30_security-misc.conf +++ b/usr/lib/systemd/coredump.conf.d/30_security-misc.conf @@ -1,2 +1,5 @@ +## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + [Coredump] Storage=none diff --git a/usr/lib/systemd/networkd.conf.d/80_ipv6-privacy-extensions.conf b/usr/lib/systemd/networkd.conf.d/80_ipv6-privacy-extensions.conf index e53c635..5959004 100644 --- a/usr/lib/systemd/networkd.conf.d/80_ipv6-privacy-extensions.conf +++ b/usr/lib/systemd/networkd.conf.d/80_ipv6-privacy-extensions.conf @@ -1,3 +1,6 @@ +## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + ## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions. ## ## https://datatracker.ietf.org/doc/html/rfc4941 diff --git a/usr/lib/systemd/system/harden-module-loading.service b/usr/lib/systemd/system/harden-module-loading.service index ed2392c..3394623 100644 --- a/usr/lib/systemd/system/harden-module-loading.service +++ b/usr/lib/systemd/system/harden-module-loading.service @@ -1,3 +1,6 @@ +## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + [Unit] Description=Disable the loading of additional modules after systemd-modules-load.service Documentation=https://github.com/Kicksecure/security-misc diff --git a/usr/lib/systemd/system/sysinit-post.target b/usr/lib/systemd/system/sysinit-post.target index faeb6f9..336133b 100644 --- a/usr/lib/systemd/system/sysinit-post.target +++ b/usr/lib/systemd/system/sysinit-post.target @@ -1,3 +1,6 @@ +## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + [Unit] Description=sys-init.target by security-misc diff --git a/usr/lib/systemd/system/user@.service.d/sysfs.conf b/usr/lib/systemd/system/user@.service.d/sysfs.conf index e0cf3a7..2c27ce5 100644 --- a/usr/lib/systemd/system/user@.service.d/sysfs.conf +++ b/usr/lib/systemd/system/user@.service.d/sysfs.conf @@ -1,2 +1,5 @@ +## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + [Service] SupplementaryGroups=sysfs diff --git a/usr/libexec/security-misc/disable-kernel-module-loading b/usr/libexec/security-misc/disable-kernel-module-loading index e2174ac..1916cc0 100644 --- a/usr/libexec/security-misc/disable-kernel-module-loading +++ b/usr/libexec/security-misc/disable-kernel-module-loading @@ -1,5 +1,8 @@ #!/bin/bash +## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + set -x set -e diff --git a/usr/libexec/security-misc/virusforget b/usr/libexec/security-misc/virusforget index 5a2c5d7..62b6823 100755 --- a/usr/libexec/security-misc/virusforget +++ b/usr/libexec/security-misc/virusforget @@ -29,7 +29,7 @@ root_check() { parse_cmd_options() { ## Thanks to: - ## http://mywiki.wooledge.org/BashFAQ/035 + ## https://mywiki.wooledge.org/BashFAQ/035 while : do diff --git a/usr/share/glib-2.0/schemas/30_security-misc.gschema.override b/usr/share/glib-2.0/schemas/30_security-misc.gschema.override index 2ee9098..92b5348 100644 --- a/usr/share/glib-2.0/schemas/30_security-misc.gschema.override +++ b/usr/share/glib-2.0/schemas/30_security-misc.gschema.override @@ -1,2 +1,5 @@ +## Copyright (C) 2017 - 2024 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + [org.gnome.nautilus.preferences] show-image-thumbnails="never" diff --git a/usr/share/security-misc/dolphinrc b/usr/share/security-misc/dolphinrc index 682401d..00e7768 100644 --- a/usr/share/security-misc/dolphinrc +++ b/usr/share/security-misc/dolphinrc @@ -3,4 +3,3 @@ [PreviewSettings] Plugins= -