Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-25 19:25:56 -05:00
Code Issues Packages Projects Releases Wiki Activity

fixed package description and package description linitan warnings

Browse Source
This commit is contained in:
Patrick Schleizer 2016-03-31 15:53:40 +00:00
parent d5e61eb4b1
commit 9d7ad9e97e
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 43 additions and 45 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

88
debian/control vendored
View File

@ -16,48 +16,46 @@ Architecture: all
Depends: ${misc:Depends} Depends: ${misc:Depends}
Replaces: tcp-timestamps-disable Replaces: tcp-timestamps-disable
Description: enhances misc security settings Description: enhances misc security settings
- deactivates previews in Dolphin The following settings are changed:
- deactivates previews in Nautilus .
- deactivates TCP timestamps deactivates previews in Dolphin;
- deactivates Netfilter's connection tracking helper deactivates previews in Nautilus;
. deactivates TCP timestamps;
Changes to the file browser only take effect for newly created user accounts. Not for deactivates Netfilter's connection tracking helper;
existing user accounts. This package is most useful to help Linux distribution .
maintainers setting divergent defaults. TCP time stamps (rfc 1323) allow for tracking clock
. information with millisecond resolution. This may or may not allow an
TCP time stamps (rfc 1323) allow for tracking clock attacker to learn information about the system clock at such
information with millisecond resolution. This may or may not allow an a resolution, depending on various issues such as network lag.
attacker to learn information about the system clock at such This information is available to anyone who monitors the network
a resolution, depending on various issues such as network lag. somewhere between the attacked system and the destination server.
This information is available to anyone who monitors the network It may allow an attacker to find out how long a given
somewhere between the attacked system and the destination server. system has been running, and to distinguish several
It may allow an attacker to find out how long a given systems running behind NAT and using the same IP address. It might
system has been running, and to distinguish several also allow to look for clocks that match an expected value to find the
systems running behind NAT and using the same IP address. It might public IP used by a user.
also allow to look for clocks that match an expected value to find the .
public IP used by a user. Hence, this package disables this feature by shipping the
. /etc/sysctl.d/tcp_timestamps.conf configuration file.
Hence, this package disables this feature by shipping the .
/etc/sysctl.d/tcp_timestamps.conf configuration file. Note that TCP time stamps normally have some usefulness. They are
. needed for:
Note that TCP time stamps normally have some usefulness. They are .
needed for: * the TCP protection against wrapped sequence numbers; however, to
. trigger a wrap, one needs to send roughly 2^32 packets in one
* the TCP protection against wrapped sequence numbers; however, to minute: as said in rfc 1700, "The current recommended default
trigger a wrap, one needs to send roughly 2^32 packets in one time to live (TTL) for the Internet Protocol (IP) [45,105] is 64".
minute: as said in rfc 1700, "The current recommended default So, this probably won't be a practical problem in the context
time to live (TTL) for the Internet Protocol (IP) [45,105] is 64". of Anonymity Distributions.
So, this probably won't be a practical problem in the context .
of Anonymity Distributions. * "Round-Trip Time Measurement", which is only useful when the user
. manages to saturate their connection. When using Anonymity Distributions,
* "Round-Trip Time Measurement", which is only useful when the user probably the limiting factor for transmission speed is rarely the capacity
manages to saturate their connection. When using Anonymity Distributions, of the user connection.
probably the limiting factor for transmission speed is rarely the capacity .
of the user connection. Netfilter's connection tracking helper module increases kernel attack
. surface by enabling superfluous functionality such as IRC parsing in
Netfilter's connection tracking helper module increases kernel attack the kernel (!)
surface by enabling superfluous functionality such as IRC parsing in .
the kernel (!) Hence, this package disables this feature by shipping the
. /etc/sysctl.d/nf_conntrack_helper.conf configuration file.
Hence, this package disables this feature by shipping the
/etc/sysctl.d/nf_conntrack_helper.conf configuration file.