Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-23 14:49:47 -05:00
Code Issues Packages Projects Releases Wiki Activity

copyright

Browse Source
This commit is contained in:
Patrick Schleizer 2021-03-17 09:45:21 -04:00
parent 0c4a7207e4
commit a67007f4b7
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
77 changed files with 286 additions and 286 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
COPYING
View File

@ -1,7 +1,7 @@
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Files: * Files: *
Copyright: 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> Copyright: 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
License: GPL-3+-with-additional-terms-1 License: GPL-3+-with-additional-terms-1
This program is free software: you can redistribute it and/or modify This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by

418
debian/changelog vendored
View File

File diff suppressed because it is too large Load Diff

4
debian/control vendored
View File

@ -1,10 +1,10 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
Source: security-misc Source: security-misc
Section: misc Section: misc
Priority: optional Priority: optional
Maintainer: Patrick Schleizer <adrelanos@riseup.net> Maintainer: Patrick Schleizer <adrelanos@whonix.org>
Build-Depends: debhelper (>= 12), config-package-dev, dh-apparmor Build-Depends: debhelper (>= 12), config-package-dev, dh-apparmor
Homepage: https://github.com/Whonix/security-misc Homepage: https://github.com/Whonix/security-misc
Vcs-Browser: https://github.com/Whonix/security-misc Vcs-Browser: https://github.com/Whonix/security-misc

2
debian/copyright vendored
View File

@ -1,7 +1,7 @@
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Files: * Files: *
Copyright: 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> Copyright: 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
License: GPL-3+-with-additional-terms-1 License: GPL-3+-with-additional-terms-1
This program is free software: you can redistribute it and/or modify This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by it under the terms of the GNU General Public License as published by

2
debian/rules vendored
View File

@ -1,6 +1,6 @@
#!/usr/bin/make -f #!/usr/bin/make -f
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
#export DH_VERBOSE=1 #export DH_VERBOSE=1

2
debian/security-misc.displace vendored
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
/etc/securetty.security-misc /etc/securetty.security-misc

2
debian/security-misc.install vendored
View File

@ -1,4 +1,4 @@
## Copyright (C) 2020 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2020 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## This file was generated using genmkfile 'make debinstfile'. ## This file was generated using genmkfile 'make debinstfile'.

2
debian/security-misc.maintscript vendored
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
rm_conffile /etc/sudoers.d/umask-security-misc rm_conffile /etc/sudoers.d/umask-security-misc

2
debian/security-misc.postinst vendored
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
if [ -f /usr/lib/helper-scripts/pre.bsh ]; then if [ -f /usr/lib/helper-scripts/pre.bsh ]; then

2
debian/security-misc.postrm vendored
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
if [ -f /usr/lib/helper-scripts/pre.bsh ]; then if [ -f /usr/lib/helper-scripts/pre.bsh ]; then

2
debian/security-misc.preinst vendored
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
if [ -f /usr/lib/helper-scripts/pre.bsh ]; then if [ -f /usr/lib/helper-scripts/pre.bsh ]; then

2
debian/security-misc.prerm vendored
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
if [ -f /usr/lib/helper-scripts/pre.bsh ]; then if [ -f /usr/lib/helper-scripts/pre.bsh ]; then

2
debian/security-misc.triggers vendored
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
#### meta start #### meta start

2
debian/security-misc.undisplace vendored
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
/etc/login.defs.security-misc /etc/login.defs.security-misc

2
debian/watch vendored
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
version=4 version=4

2
etc/X11/Xsession.d/50panic_on_oops
View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
if [ -x /usr/lib/security-misc/panic-on-oops ]; then if [ -x /usr/lib/security-misc/panic-on-oops ]; then

2
etc/X11/Xsession.d/50security-misc
View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
if [ -z "$XDG_CONFIG_DIRS" ]; then if [ -z "$XDG_CONFIG_DIRS" ]; then

2
etc/apparmor.d/tunables/home.d/security-misc
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
alias /etc/pam.d/common-session -> /etc/pam.d//etc/pam.d/common-session.security-misc, alias /etc/pam.d/common-session -> /etc/pam.d//etc/pam.d/common-session.security-misc,

2
etc/apt/apt.conf.d/40sandbox
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## https://forums.whonix.org/t/apt-seccomp-bpf-sandboxing/7702 ## https://forums.whonix.org/t/apt-seccomp-bpf-sandboxing/7702

2
etc/default/grub.d/40_cpu_mitigations.cfg
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Enables all mitigations for CPU vulnerabilities. ## Enables all mitigations for CPU vulnerabilities.

2
etc/default/grub.d/40_distrust_cpu.cfg
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Distrusts the CPU for initial entropy at boot as it is not possible to ## Distrusts the CPU for initial entropy at boot as it is not possible to

2
etc/default/grub.d/40_enable_iommu.cfg
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Enables IOMMU to prevent DMA attacks. ## Enables IOMMU to prevent DMA attacks.

2
etc/default/grub.d/40_kernel_hardening.cfg
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
kpkg="linux-image-$(dpkg --print-architecture)" || true kpkg="linux-image-$(dpkg --print-architecture)" || true

2
etc/hide-hardware-info.d/30_default.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Disable the /sys whitelist. ## Disable the /sys whitelist.

2
etc/initramfs-tools/hooks/sysctl-initramfs
View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
set -e set -e

2
etc/initramfs-tools/scripts/init-bottom/sysctl-initramfs
View File

@ -1,6 +1,6 @@
#!/bin/sh #!/bin/sh
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
PREREQ="" PREREQ=""

2
etc/kernel/postinst.d/30_remove-system-map
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
if test -x /usr/lib/security-misc/remove-system.map ; then if test -x /usr/lib/security-misc/remove-system.map ; then

2
etc/modprobe.d/30_security-misc.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## https://phabricator.whonix.org/T486 ## https://phabricator.whonix.org/T486

2
etc/permission-hardening.d/25_default_whitelist_bubblewrap.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/permission-hardening.d/25_default_whitelist_chromium.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/permission-hardening.d/25_default_whitelist_dbus.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/permission-hardening.d/25_default_whitelist_firejail.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/permission-hardening.d/25_default_whitelist_fuse.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/permission-hardening.d/25_default_whitelist_mount.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/permission-hardening.d/25_default_whitelist_policykit.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/permission-hardening.d/25_default_whitelist_qubes.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/permission-hardening.d/25_default_whitelist_selinux.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/permission-hardening.d/25_default_whitelist_spice.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/permission-hardening.d/25_default_whitelist_sudo.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/permission-hardening.d/25_default_whitelist_virtualbox.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/permission-hardening.d/30_default.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Please use "/etc/permission-hardening.d/20_user.conf" or ## Please use "/etc/permission-hardening.d/20_user.conf" or

2
etc/security/access-security-misc.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## To enable root login, see: ## To enable root login, see:

2
etc/security/limits.d/30_security-misc.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Disable coredumps. ## Disable coredumps.

2
etc/skel/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml
View File

@ -1,6 +1,6 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<!-- ## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> --> <!-- ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org> -->
<!-- ## See the file COPYING for copying conditions. --> <!-- ## See the file COPYING for copying conditions. -->
<!-- Configuration for Thunar. --> <!-- Configuration for Thunar. -->

2
etc/sudoers.d/pkexec-security-misc
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## REVIEW: is it ok that users can find out the PATH setting of root? ## REVIEW: is it ok that users can find out the PATH setting of root?

2
etc/sudoers.d/security-misc
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
user ALL=NOPASSWD: /usr/lib/security-misc/panic-on-oops user ALL=NOPASSWD: /usr/lib/security-misc/panic-on-oops

2
etc/sudoers.d/xfce-security-misc
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## https://forums.whonix.org/t/xfce4-power-manager-xfpm-power-backlight-helper-pkexec-lxsudo-popup/8764 ## https://forums.whonix.org/t/xfce4-power-manager-xfpm-power-backlight-helper-pkexec-lxsudo-popup/8764

2
etc/sysctl.d/30_security-misc.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Disables coredumps. This setting may be overwritten by systemd so this may not be useful. ## Disables coredumps. This setting may be overwritten by systemd so this may not be useful.

2
etc/sysctl.d/30_silent-kernel-printk.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Prevent kernel info leaks in console during boot. ## Prevent kernel info leaks in console during boot.

2
etc/thunderbird/pref/40_security-mic.js
View File

@ -1,4 +1,4 @@
//#### Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> //#### Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
//#### See the file COPYING for copying conditions. //#### See the file COPYING for copying conditions.
//#### meta start //#### meta start

2
lib/systemd/system-preset/50-security-misc.preset
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## https://forums.whonix.org/t/restrict-hardware-information-to-root-testers-wanted/8618 ## https://forums.whonix.org/t/restrict-hardware-information-to-root-testers-wanted/8618

2
lib/systemd/system/hide-hardware-info.service
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
[Unit] [Unit]

2
lib/systemd/system/permission-hardening.service
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
[Unit] [Unit]

2
lib/systemd/system/proc-hidepid.service
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
[Unit] [Unit]

2
lib/systemd/system/remount-secure.service
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
[Unit] [Unit]

2
lib/systemd/system/remove-system-map.service
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
[Unit] [Unit]

2
usr/bin/pkexec.security-misc
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Redirect calls for pkexec to lxqt-sudo because pkexec is incompatible with ## Redirect calls for pkexec to lxqt-sudo because pkexec is incompatible with

2
usr/lib/modules-load.d/30_security-misc.conf
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## https://www.whonix.org/wiki/Dev/Entropy ## https://www.whonix.org/wiki/Dev/Entropy

2
usr/lib/security-misc/apt-get-update
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
sigterm_trap() { sigterm_trap() {

2
usr/lib/security-misc/apt-get-update-sanity-test
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
set -x set -x

2
usr/lib/security-misc/apt-get-wrapper
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
set -e set -e

2
usr/lib/security-misc/askpass
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
set -e set -e

2
usr/lib/security-misc/echo-path
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
set -e set -e

2
usr/lib/security-misc/hide-hardware-info
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
set -e set -e

2
usr/lib/security-misc/pam-abort-on-locked-password
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## This is only a usability feature to avoid needlessly bumping pam_tally2 ## This is only a usability feature to avoid needlessly bumping pam_tally2

2
usr/lib/security-misc/pam_only_if_login
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## https://serverfault.com/questions/134471/success-n-control-syntax-in-pam-conf-pam-d-files ## https://serverfault.com/questions/134471/success-n-control-syntax-in-pam-conf-pam-d-files

2
usr/lib/security-misc/pam_tally2-info
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
grep_result="$(grep "accessfile=/etc/security/access-security-misc.conf" /etc/pam.d/common-account 2>/dev/null)" grep_result="$(grep "accessfile=/etc/security/access-security-misc.conf" /etc/pam.d/common-account 2>/dev/null)"

2
usr/lib/security-misc/pam_tally2_not_if_x
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## https://serverfault.com/questions/134471/success-n-control-syntax-in-pam-conf-pam-d-files ## https://serverfault.com/questions/134471/success-n-control-syntax-in-pam-conf-pam-d-files

2
usr/lib/security-misc/panic-on-oops
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
set -e set -e

2
usr/lib/security-misc/permission-hardening
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## https://forums.whonix.org/t/disable-suid-binaries/7706 ## https://forums.whonix.org/t/disable-suid-binaries/7706

2
usr/lib/security-misc/permission-hardening-undo
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
#set -x #set -x

2
usr/lib/security-misc/permission-lockdown
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## Doing this for all users would create many issues. ## Doing this for all users would create many issues.

2
usr/lib/security-misc/remount-secure
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## noexec in /tmp and/or /home can break some malware but also legitimate ## noexec in /tmp and/or /home can break some malware but also legitimate

2
usr/lib/security-misc/remove-system.map
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
if [ -f /usr/lib/helper-scripts/pre.bsh ]; then if [ -f /usr/lib/helper-scripts/pre.bsh ]; then

2
usr/lib/security-misc/virusforget
View File

@ -1,6 +1,6 @@
#!/bin/bash #!/bin/bash
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## VirusForget is inspired by Christopher Laprise. ## VirusForget is inspired by Christopher Laprise.

2
usr/share/lintian/overrides/security-misc
View File

@ -1,4 +1,4 @@
## Copyright (C) 2019 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2019 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions. ## See the file COPYING for copying conditions.
## The whole point of the package. ## The whole point of the package.

2
usr/share/security-misc/dolphinrc
View File

@ -1,4 +1,4 @@
## Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP <adrelanos@riseup.net> ## Copyright (C) 2012 - 2021 ENCRYPTED SUPPORT LP <adrelanos@whonix.org>
## See the file COPYING for copying conditions ## See the file COPYING for copying conditions
[PreviewSettings] [PreviewSettings]