diff --git a/debian/control b/debian/control index 63c0f64..2444db6 100644 --- a/debian/control +++ b/debian/control @@ -79,9 +79,9 @@ Description: enhances misc security settings . * Coredumps are disabled as they may contain important information such as encryption keys or passwords. - /etc/security/limits.d/disable-coredumps.conf + /etc/security/limits.d/30_security-misc.conf /etc/sysctl.d/security-misc.conf - /lib/systemd/coredump.conf.d/disable-coredumps.conf + /lib/systemd/coredump.conf.d/30_security-misc.conf . * The thunderbolt and firewire kernel modules are blacklisted as they can be used for DMA (Direct Memory Access) attacks. diff --git a/debian/security-misc.maintscript b/debian/security-misc.maintscript index a2aa848..32ea40a 100644 --- a/debian/security-misc.maintscript +++ b/debian/security-misc.maintscript @@ -32,3 +32,6 @@ rm_conffile /etc/modprobe.d/vivid.conf rm_conffile /etc/modprobe.d/blacklist-dma.conf rm_conffile /etc/modprobe.d/msr.conf rm_conffile /etc/modprobe.d/30_nf_conntrack_helper_disable.conf + +## renamed to /etc/security/limits.d/30_security-misc.conf +rm_conffile /etc/security/limits.d/disable-coredumps.conf diff --git a/etc/security/limits.d/disable-coredumps.conf b/etc/security/limits.d/30_security-misc.conf similarity index 100% rename from etc/security/limits.d/disable-coredumps.conf rename to etc/security/limits.d/30_security-misc.conf diff --git a/lib/systemd/coredump.conf.d/disable-coredumps.conf b/lib/systemd/coredump.conf.d/30_security-misc.conf similarity index 100% rename from lib/systemd/coredump.conf.d/disable-coredumps.conf rename to lib/systemd/coredump.conf.d/30_security-misc.conf