Commit Graph

2398 Commits

Author SHA1 Message Date
Patrick Schleizer
5572eb897a
bumped changelog version 2024-09-25 01:03:42 +00:00
Patrick Schleizer
e04f9cd4c1
Merge remote-tracking branch 'github-kicksecure/master' 2024-09-24 20:16:06 -04:00
Patrick Schleizer
65aa910503
Merge pull request #272 from raja-grewal/text
Documentation update
2024-09-24 20:15:03 -04:00
raja-grewal
870ff88605
Comment on Flatpak requiring unprivileged user namespaces 2024-09-25 10:01:45 +10:00
raja-grewal
769767a96a
Update mmap ASLR docs 2024-09-25 09:54:49 +10:00
Patrick Schleizer
18d426f521
bumped changelog version 2024-09-14 02:56:09 +00:00
Patrick Schleizer
3280dbd5d5
Fix VirtualBox audio device ICH AC97.
no longer `blacklist snd_intel8x0`

Breaks VirtualBox audio device ICH AC97, which is unfortunately still required by some users.
https://www.kicksecure.com/wiki/Dev/audio

Fixes https://github.com/Kicksecure/security-misc/issues/271
2024-09-13 22:52:47 -04:00
Patrick Schleizer
1bc694fa12
bumped changelog version 2024-09-08 17:41:30 +00:00
Patrick Schleizer
01908d505a
readme 2024-09-05 07:00:11 -04:00
Patrick Schleizer
e914028be7
add KSPP compliance status to readme based on comment by @raja-grewal
https://github.com/Kicksecure/security-misc/issues/256#issuecomment-2330376651
2024-09-05 06:03:05 -04:00
Patrick Schleizer
40fb14c654
bumped changelog version 2024-09-04 14:13:15 +00:00
Patrick Schleizer
5a255d4831
Merge remote-tracking branch 'github-kicksecure/master' 2024-09-04 10:12:34 -04:00
Patrick Schleizer
563a898013
Merge pull request #265 from raja-grewal/mmap_min_addr
Set `sysctl vm.mmap_min_addr=65536`
2024-09-04 10:11:48 -04:00
Patrick Schleizer
d618f9f35b
Merge remote-tracking branch 'github-kicksecure/master' 2024-09-04 10:07:50 -04:00
Patrick Schleizer
175945ec9a
Merge pull request #268 from raja-grewal/panic_on_warn
Enable `panic_on_warn=1`
2024-09-04 10:05:47 -04:00
Patrick Schleizer
b0a8544182
Merge pull request #270 from raja-grewal/typo
Small typo
2024-09-04 10:04:45 -04:00
raja-grewal
7393ba1591
Typo 2024-09-04 23:23:24 +10:00
Patrick Schleizer
59374ce902
bumped changelog version 2024-08-29 09:49:51 +00:00
Patrick Schleizer
7e2838ec07
Merge remote-tracking branch 'github-kicksecure/master' 2024-08-29 05:06:07 -04:00
Patrick Schleizer
0762794ff6
Merge pull request #269 from raja-grewal/tidy
Minor correction
2024-08-29 04:46:26 -04:00
Raja Grewal
6294729c8e
Follow-up on f70fe308a9 2024-08-29 15:34:24 +10:00
Raja Grewal
3101035a3f
Enable panic_on_warn=1 2024-08-29 01:57:32 +10:00
Patrick Schleizer
9c918eb431
bumped changelog version 2024-08-28 11:01:37 +00:00
Patrick Schleizer
f70fe308a9
no longer set sysctl fs.binfmt_misc.status=0 /
no longer disallow registering interpreters for miscellaneous binary formats

causing file/folder permissions issue `d????????? ? ? ? ?            ? .`

Firefox no longer starting (probably not not a Firefox issue)

https://github.com/Kicksecure/security-misc/issues/267
2024-08-28 06:49:50 -04:00
Patrick Schleizer
463aa58f28
Merge remote-tracking branch 'github-kicksecure/master' 2024-08-28 06:42:49 -04:00
Patrick Schleizer
328840c933
Merge pull request #264 from raja-grewal/kspp_compliance
Add KSPP compliance notices to corresponding parameters and `sysctls`
2024-08-28 06:38:57 -04:00
Raja Grewal
9e91c98cc9
Add details on BPF hardening and split the sysctls 2024-08-26 12:40:04 +10:00
Raja Grewal
2c356e8b0e
Add KSPP notice definitions 2024-08-26 11:34:12 +10:00
Raja Grewal
2841d789be
README: Update 2024-08-26 11:21:26 +10:00
Raja Grewal
ac6602ac35
Add detail on disabling user namespaces breaking UPower 2024-08-26 11:19:20 +10:00
raja-grewal
9dbd200be4
Merge branch 'Kicksecure:master' into kspp_compliance 2024-08-26 11:08:21 +10:00
Patrick Schleizer
cf824ddb24
bumped changelog version 2024-08-25 15:34:55 +00:00
Patrick Schleizer
500568e322
Merge remote-tracking branch 'github-kicksecure/master' 2024-08-25 11:01:58 -04:00
Patrick Schleizer
73900b59db
Merge pull request #263 from raja-grewal/max_user_namespaces
Provide option to disable user namespaces
2024-08-25 11:00:51 -04:00
Patrick Schleizer
43d13b70f1
Merge remote-tracking branch 'raja/syntax' 2024-08-25 10:55:52 -04:00
Patrick Schleizer
835376418d
Merge remote-tracking branch 'raja/mod' 2024-08-25 10:48:25 -04:00
Patrick Schleizer
ae85fd5b4c
bumped changelog version 2024-08-25 14:33:40 +00:00
Raja Grewal
433b15f985
README.md: Organise sysctls 2024-08-25 09:56:53 -04:00
Raja Grewal
af87a84b4f
README.md: Organise kernel boot parameters 2024-08-25 09:56:24 -04:00
Raja Grewal
32de5e7c49
Add details on oopses and warnings 2024-08-25 12:57:22 +10:00
Raja Grewal
e4909b5e28
Add details on kernel panics 2024-08-25 12:47:04 +10:00
Raja Grewal
342caf82b2
README.md: Organise kernel boot parameters 2024-08-21 12:52:48 +10:00
Raja Grewal
b87a18d405
README.md: Organise sysctls 2024-08-21 12:51:51 +10:00
Raja Grewal
18ed77ecc9
Refactor modprobe.d to minimise potential future merge conflicts 2024-08-21 12:50:14 +10:00
Raja Grewal
56b28e3826
Typo 2024-08-19 11:50:08 +10:00
Raja Grewal
e61027a40e
Set sysctl vm.mmap_min_addr=65536 2024-08-19 11:32:20 +10:00
Raja Grewal
94dab1b7c5
Partial compliance with the KSPP on kernel panics 2024-08-19 10:53:05 +10:00
Raja Grewal
683110e7f0
Correction 2024-08-19 01:34:14 +10:00
Raja Grewal
1f51d4eeb2
Add details on user namespaces 2024-08-18 13:53:11 +10:00
Raja Grewal
248e094b8e
Include KSPP compliance notices 2024-08-17 01:06:21 +10:00