Commit Graph

2398 Commits

Author SHA1 Message Date
Patrick Schleizer
eab66dad09
Merge pull request #254 from raja-grewal/patch
Updates to kernel and `sysctl` hardening
2024-08-04 16:08:32 -04:00
Raja Grewal
6f14d68cdc
Update legacy name slub_debug -> slab_debug 2024-08-03 15:12:15 +10:00
Raja Grewal
22b6cee80c
Add details about slub_debug 2024-08-03 15:11:14 +10:00
Raja Grewal
b77d1a2b98
Revert "Remove the optional slub_debug parameter since it is no longer recommended"
This reverts commit 48e1ac4163.
2024-08-03 14:49:48 +10:00
Raja Grewal
ca2179bb6a
Provide the option to disable legacy TIOCSTI operation 2024-08-03 00:25:49 +10:00
Raja Grewal
52aeacb4da
Provide option to disable 32 bit vDSO mappings 2024-08-03 00:13:38 +10:00
Raja Grewal
9099ecce8a
Provide option to enable the kernel Electric-Fence 2024-08-03 00:12:50 +10:00
Raja Grewal
f6a16258a1
Add references to KSPP 2024-08-03 00:11:06 +10:00
Raja Grewal
e53d24fc48
Add missing GRUB command lines for disabled boot parameters 2024-08-03 00:09:42 +10:00
Patrick Schleizer
de6f3ea74a
bumped changelog version 2024-07-28 20:50:22 +00:00
Patrick Schleizer
d036094089
Merge remote-tracking branch 'github-kicksecure/master' 2024-07-28 15:44:40 -04:00
Patrick Schleizer
0f86fbd8ce
Merge pull request #242 from raja-grewal/ptrace
Disable the usage of `ptrace()` by all processes
2024-07-28 15:43:54 -04:00
Raja Grewal
9cabaa1bd1
Typo 2024-07-28 22:04:30 +10:00
Raja Grewal
d2d024ebe9
Typo 2024-07-28 22:03:33 +10:00
Raja Grewal
9fbee9fc82
Clarify 2024-07-28 21:57:25 +10:00
Patrick Schleizer
e60ce50d30
bumped changelog version 2024-07-27 16:13:35 +00:00
Patrick Schleizer
e86b2e7f8f
output 2024-07-27 12:13:18 -04:00
Raja Grewal
1445457626
Show details regarding secure_redirects (again) 2024-07-27 14:00:30 +10:00
Raja Grewal
73979d4342
Link to ptrace() discussion 2024-07-27 13:28:59 +10:00
Raja Grewal
1c9f33f906
Revert "Disable the usage of ptrace() by all processes"
This reverts commit b04828f858.
2024-07-27 13:24:08 +10:00
Patrick Schleizer
330cf14eab
bumped changelog version 2024-07-26 15:40:24 +00:00
Patrick Schleizer
62bb4bc626
Merge remote-tracking branch 'github-kicksecure/master' 2024-07-26 11:10:25 -04:00
Patrick Schleizer
886f6095db
Merge pull request #250 from raja-grewal/Panik-Kalm
Add details on "oopes" and kernel panics
2024-07-26 11:08:30 -04:00
Patrick Schleizer
7969e86071
Merge remote-tracking branch 'github-kicksecure/master' 2024-07-26 11:06:13 -04:00
Patrick Schleizer
0318f577ab
Merge pull request #246 from raja-grewal/cfi
Provide the option to change the default CFI implementation in the future
2024-07-26 11:04:29 -04:00
Patrick Schleizer
e2ae93a957
port to safe_echo 2024-07-26 10:30:45 -04:00
Patrick Schleizer
8ec23ed712
echo does not support end-of-options 2024-07-26 10:28:57 -04:00
Patrick Schleizer
6096ed1109
comment 2024-07-26 10:26:43 -04:00
Patrick Schleizer
ac41d1cfff
comment 2024-07-26 10:25:59 -04:00
Patrick Schleizer
3b033ceba2
shellcheck 2024-07-26 10:17:24 -04:00
Patrick Schleizer
04d9ca1ebe
use find with safe_echo_nonewline 2024-07-26 10:16:20 -04:00
raja-grewal
20454fb811
Merge branch 'Kicksecure:master' into blacklist_to_disable 2024-07-27 00:09:30 +10:00
Patrick Schleizer
6bbf176e3b
consider end-of-options for find 2024-07-26 09:33:45 -04:00
Patrick Schleizer
794f6a25fa
comment 2024-07-26 09:08:29 -04:00
Patrick Schleizer
7e0f1a8701
dpkg-statoverride can actually handle '--file-name'. 2024-07-26 09:08:04 -04:00
Patrick Schleizer
ee037c01a1
Skip file names starting with '--',
because this would be interpreted by dpkg-statoverride as an option.
2024-07-26 08:58:44 -04:00
Patrick Schleizer
82d401a7de
sanity test 2024-07-26 08:52:42 -04:00
Patrick Schleizer
0e661bc688
output 2024-07-26 08:49:14 -04:00
Patrick Schleizer
d144f68d1a
output 2024-07-26 08:46:08 -04:00
Patrick Schleizer
05504b9ab2
minor 2024-07-26 08:40:10 -04:00
Patrick Schleizer
d96c0633d4
more use of end of options 2024-07-26 08:39:11 -04:00
Patrick Schleizer
8e40c10c31
comment 2024-07-26 08:31:17 -04:00
Patrick Schleizer
f2c9c2f5d1
output 2024-07-26 08:26:16 -04:00
Patrick Schleizer
2b40ea75e9
cleanup 2024-07-26 08:24:23 -04:00
Patrick Schleizer
6f0551b944
refactoring 2024-07-26 08:23:54 -04:00
Patrick Schleizer
aac450f808
refactoring 2024-07-26 08:22:04 -04:00
Patrick Schleizer
30f46790a4
use end of options whenever possible 2024-07-26 08:21:21 -04:00
Patrick Schleizer
95722d6d79
use long option name 2024-07-26 08:13:33 -04:00
Patrick Schleizer
19f131c742
code simplification
https://github.com/Kicksecure/security-misc/pull/251
2024-07-26 08:07:08 -04:00
Patrick Schleizer
9694cf0cd1
output 2024-07-26 07:43:59 -04:00