Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-05 12:58:49 -04:00
Code Issues Projects Releases Packages Wiki Activity

Merge remote-tracking branch 'raja/miscellaneous'

Browse source
This commit is contained in:
Patrick Schleizer 2024-07-17 10:32:26 -04:00
commit 9a387f95e9
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
26 changed files with 69 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

6
COPYING
View file

@ -8,7 +8,7 @@ License: AGPL-3+
GNU AFFERO GENERAL PUBLIC LICENSE GNU AFFERO GENERAL PUBLIC LICENSE
Version 3, 19 November 2007 Version 3, 19 November 2007
. .
Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/> Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
Everyone is permitted to copy and distribute verbatim copies Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed. of this license document, but changing it is not allowed.
. .
@ -650,7 +650,7 @@ License: AGPL-3+
GNU Affero General Public License for more details. GNU Affero General Public License for more details.
. .
You should have received a copy of the GNU Affero General Public License You should have received a copy of the GNU Affero General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>. along with this program. If not, see <https://www.gnu.org/licenses/>.
. .
Also add information on how to contact you by electronic and paper mail. Also add information on how to contact you by electronic and paper mail.
. .
@ -665,4 +665,4 @@ License: AGPL-3+
You should also get your employer (if you work as a programmer) or school, You should also get your employer (if you work as a programmer) or school,
if any, to sign a "copyright disclaimer" for the program, if necessary. if any, to sign a "copyright disclaimer" for the program, if necessary.
For more information on this, and how to apply and follow the GNU AGPL, see For more information on this, and how to apply and follow the GNU AGPL, see
<http://www.gnu.org/licenses/>. <https://www.gnu.org/licenses/>.

6
debian/copyright vendored
View file

@ -8,7 +8,7 @@ License: AGPL-3+
GNU AFFERO GENERAL PUBLIC LICENSE GNU AFFERO GENERAL PUBLIC LICENSE
Version 3, 19 November 2007 Version 3, 19 November 2007
. .
Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/> Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
Everyone is permitted to copy and distribute verbatim copies Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed. of this license document, but changing it is not allowed.
. .
@ -650,7 +650,7 @@ License: AGPL-3+
GNU Affero General Public License for more details. GNU Affero General Public License for more details.
. .
You should have received a copy of the GNU Affero General Public License You should have received a copy of the GNU Affero General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>. along with this program. If not, see <https://www.gnu.org/licenses/>.
. .
Also add information on how to contact you by electronic and paper mail. Also add information on how to contact you by electronic and paper mail.
. .
@ -665,4 +665,4 @@ License: AGPL-3+
You should also get your employer (if you work as a programmer) or school, You should also get your employer (if you work as a programmer) or school,
if any, to sign a "copyright disclaimer" for the program, if necessary. if any, to sign a "copyright disclaimer" for the program, if necessary.
For more information on this, and how to apply and follow the GNU AGPL, see For more information on this, and how to apply and follow the GNU AGPL, see
<http://www.gnu.org/licenses/>. <https://www.gnu.org/licenses/>.

3
debian/security-misc.displace-extension vendored
View file

@ -1 +1,4 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
.security-misc .security-misc

3
debian/security-misc.gconf-defaults vendored
View file

@ -1,3 +1,6 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
/apps/nautilus/preview_sound never /apps/nautilus/preview_sound never
/apps/nautilus/show_icon_text never /apps/nautilus/show_icon_text never
/apps/nautilus/show-image-thumbnails never /apps/nautilus/show-image-thumbnails never

3
debian/security-misc.links vendored
View file

@ -1,2 +1,5 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
/etc/profile.d/30_security-misc.sh /etc/zprofile.d/30_security-misc.zsh /etc/profile.d/30_security-misc.sh /etc/zprofile.d/30_security-misc.zsh
/etc/profile.d/30_security-misc.sh /etc/X11/Xsession.d/30_security-misc /etc/profile.d/30_security-misc.sh /etc/X11/Xsession.d/30_security-misc

5
etc/bluetooth/30_security-misc.conf
View file

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[General] [General]
# How long to stay in pairable mode before going back to non-discoverable # How long to stay in pairable mode before going back to non-discoverable
# The value is in seconds. Default is 0. # The value is in seconds. Default is 0.
@ -16,7 +19,7 @@ MaxControllers=1
# How long to keep temporary devices around # How long to keep temporary devices around
# The value is in seconds. Default is 30. # The value is in seconds. Default is 30.
# 0 = disable timer, i.e. never keep temporary devices # 0 = disable timer, i.e. never keep temporary devices
TemporaryTimeout = 0 TemporaryTimeout = 0
[Policy] [Policy]
# AutoEnable defines option to enable all controllers when they are found. # AutoEnable defines option to enable all controllers when they are found.

3
etc/dkms/framework.conf.d/30_security-misc.conf
View file

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## This configuration file modifies the behavior of ## This configuration file modifies the behavior of
## DKMS (Dynamic Kernel Module Support) and is sourced ## DKMS (Dynamic Kernel Module Support) and is sourced
## in by DKMS every time it is run. ## in by DKMS every time it is run.

3
etc/dracut.conf.d/30-security-misc.conf
View file

@ -1,3 +1,6 @@
## Copyright (C) 2021 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
reproducible=yes reproducible=yes
## Debugging. ## Debugging.

3
etc/securetty.security-misc
View file

@ -1,2 +1,5 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
# /etc/securetty: list of terminals on which root is allowed to login. # /etc/securetty: list of terminals on which root is allowed to login.
# See securetty(5) and login(1). # See securetty(5) and login(1).

3
etc/security/faillock.conf.security-misc
View file

@ -1,3 +1,6 @@
## Copyright (C) 2021 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
# Configuration for locking the user after multiple failed # Configuration for locking the user after multiple failed
# authentication attempts. # authentication attempts.
# #

4
etc/skel/.gnupg/gpg.conf
View file

@ -282,13 +282,13 @@ display-charset utf-8
################################################################## ##################################################################
################################################################## ##################################################################
## BEGIN Some suggestions from Debian http://keyring.debian.org/creating-key.html ## BEGIN Some suggestions from Debian https://keyring.debian.org/creating-key.html
personal-digest-preferences SHA512 personal-digest-preferences SHA512
cert-digest-algo SHA512 cert-digest-algo SHA512
default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed
## END Some suggestions from Debian http://keyring.debian.org/creating-key.html ## END Some suggestions from Debian https://keyring.debian.org/creating-key.html
################################################################## ##################################################################
################################################################## ##################################################################

3
etc/systemd/system/emergency.service.d/override.conf
View file

@ -1,3 +1,6 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802211 ## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802211
## https://salsa.debian.org/ah/user-setup/commit/bc5ca2de85ec27845d0b46059cb7cc02bae7b44d ## https://salsa.debian.org/ah/user-setup/commit/bc5ca2de85ec27845d0b46059cb7cc02bae7b44d

3
etc/systemd/system/rescue.service.d/override.conf
View file

@ -1,3 +1,6 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802211 ## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=802211
## https://salsa.debian.org/ah/user-setup/commit/bc5ca2de85ec27845d0b46059cb7cc02bae7b44d ## https://salsa.debian.org/ah/user-setup/commit/bc5ca2de85ec27845d0b46059cb7cc02bae7b44d

2
usr/bin/pkexec.security-misc
View file

@ -34,7 +34,7 @@ switch_user=false
original_args="$@" original_args="$@"
## Thanks to: ## Thanks to:
## http://mywiki.wooledge.org/BashFAQ/035 ## https://mywiki.wooledge.org/BashFAQ/035
while : while :
do do

2
usr/bin/remount-secure
View file

@ -70,7 +70,7 @@ init() {
parse_options() { parse_options() {
## Thanks to: ## Thanks to:
## http://mywiki.wooledge.org/BashFAQ/035 ## https://mywiki.wooledge.org/BashFAQ/035
while : while :
do do

3
usr/lib/NetworkManager/conf.d/80_ipv6-privacy.conf
View file

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions. ## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions.
## ##
## https://datatracker.ietf.org/doc/html/rfc4941 ## https://datatracker.ietf.org/doc/html/rfc4941

3
usr/lib/NetworkManager/conf.d/80_randomize-mac.conf
View file

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions. ## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions.
## ##
## https://datatracker.ietf.org/doc/html/rfc4941 ## https://datatracker.ietf.org/doc/html/rfc4941

3
usr/lib/systemd/coredump.conf.d/30_security-misc.conf
View file

@ -1,2 +1,5 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[Coredump] [Coredump]
Storage=none Storage=none

3
usr/lib/systemd/networkd.conf.d/80_ipv6-privacy-extensions.conf
View file

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions. ## MAC randomisation breaks root server and VirtualBox DHCP likely due to IPv6 Privacy Extensions.
## ##
## https://datatracker.ietf.org/doc/html/rfc4941 ## https://datatracker.ietf.org/doc/html/rfc4941

3
usr/lib/systemd/system/harden-module-loading.service
View file

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[Unit] [Unit]
Description=Disable the loading of additional modules after systemd-modules-load.service Description=Disable the loading of additional modules after systemd-modules-load.service
Documentation=https://github.com/Kicksecure/security-misc Documentation=https://github.com/Kicksecure/security-misc

3
usr/lib/systemd/system/sysinit-post.target
View file

@ -1,3 +1,6 @@
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[Unit] [Unit]
Description=sys-init.target by security-misc Description=sys-init.target by security-misc

3
usr/lib/systemd/system/user@.service.d/sysfs.conf
View file

@ -1,2 +1,5 @@
## Copyright (C) 2019 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[Service] [Service]
SupplementaryGroups=sysfs SupplementaryGroups=sysfs

3
usr/libexec/security-misc/disable-kernel-module-loading
View file

@ -1,5 +1,8 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2023 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
set -x set -x
set -e set -e

2
usr/libexec/security-misc/virusforget
View file

@ -29,7 +29,7 @@ root_check() {
parse_cmd_options() { parse_cmd_options() {
## Thanks to: ## Thanks to:
## http://mywiki.wooledge.org/BashFAQ/035 ## https://mywiki.wooledge.org/BashFAQ/035
while : while :
do do

3
usr/share/glib-2.0/schemas/30_security-misc.gschema.override
View file

@ -1,2 +1,5 @@
## Copyright (C) 2017 - 2024 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
[org.gnome.nautilus.preferences] [org.gnome.nautilus.preferences]
show-image-thumbnails="never" show-image-thumbnails="never"

1
usr/share/security-misc/dolphinrc
View file

@ -3,4 +3,3 @@
[PreviewSettings] [PreviewSettings]
Plugins= Plugins=