2398 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Patrick Schleizer	bdfe764f9d	Merge remote-tracking branch 'ben-grande/stat-dedup'	2024-07-26 07:19:05 -04:00
Patrick Schleizer	9f135231cc	no longer disable Intel ME related kernel modules ... because that might break firmware updates This reverts commit 64f8b2eb58. https://github.com/Kicksecure/security-misc/issues/239	2024-07-26 06:43:14 -04:00
Patrick Schleizer	f616da7c06	bumped changelog version	2024-07-26 09:40:59 +00:00
Raja Grewal	4397de0138	Update description of cfi=kcfi kerenel parameter	2024-07-26 11:30:46 +10:00
Ben Grande	652a06c8e9	Only print SUID or SGID values when set	2024-07-25 12:37:21 +02:00
Ben Grande	3b8a3f9b83	Unduplicate stat call	2024-07-25 12:20:16 +02:00
Raja Grewal	28b25bda3f	Partial inclusion of GrapheneOS infrastructure blacklist	2024-07-25 15:51:32 +10:00
Raja Grewal	ed3336694c	Provide the option to immediately reboot on a kernel panics	2024-07-25 10:28:27 +10:00
Raja Grewal	3926b91dcf	Add documentation on sysctl kernel.panic_on_oops=1	2024-07-25 10:26:23 +10:00
Raja Grewal	f699eb02a2	Set sysctl fs.binfmt_misc.status=0	2024-07-25 10:11:33 +10:00
Patrick Schleizer	9231f05891	todo	2024-07-24 13:31:49 -04:00
Patrick Schleizer	4cc1289e89	output	2024-07-24 13:30:30 -04:00
Patrick Schleizer	10c73b326f	fix delimiter parsing	2024-07-24 12:07:26 -04:00
Patrick Schleizer	a16dd8474b	sanity test	2024-07-24 11:50:30 -04:00
Patrick Schleizer	cc2b335ee6	cleanup	2024-07-24 11:48:32 -04:00
Patrick Schleizer	6cadc70a96	output	2024-07-24 11:47:52 -04:00
Patrick Schleizer	cda0d26af7	cannot use NULL inside a bash variable ... use custom delimiter instead	2024-07-24 11:45:13 -04:00
Patrick Schleizer	4a5312b3a9	output	2024-07-24 11:27:51 -04:00
Patrick Schleizer	3bf1f26c0b	downgrade warning of non-existing folders to info ... to avoid all users by default getting a warning for expected non-existing folders	2024-07-24 11:20:26 -04:00
Patrick Schleizer	151ca659a9	output	2024-07-24 11:19:15 -04:00
Patrick Schleizer	c9fd2ceb61	downgrade warning of non-existing files to info ... to avoid all users by default getting a warning for expected non-existing files	2024-07-24 11:13:35 -04:00
Patrick Schleizer	721392901b	remove duplicate test	2024-07-24 11:12:39 -04:00
Patrick Schleizer	9712b5b4e3	output	2024-07-24 11:12:18 -04:00
Patrick Schleizer	00911df5c1	modify call of stat to use NUL delimiter ... for more robust string parsing	2024-07-24 11:10:56 -04:00
Patrick Schleizer	d536683511	local clean_output_prefix clean_output	2024-07-24 11:03:28 -04:00
Patrick Schleizer	a6e517736b	local stat_output	2024-07-24 11:02:25 -04:00
Patrick Schleizer	ced02fb9e0	add sanity test for file_name output from stat	2024-07-24 11:01:24 -04:00
Patrick Schleizer	b9dfe70a01	check first if file_name is empty	2024-07-24 10:58:05 -04:00
Patrick Schleizer	1cbda79981	check first if array is empty before parsing further	2024-07-24 10:57:13 -04:00
Patrick Schleizer	a077ae54ea	modify call of stat to use NUL delimiter ... for more robust string parsing	2024-07-24 10:56:08 -04:00
Raja Grewal	1135d34ab3	Reword description of cfi=kcfi kerenel parameter	2024-07-24 23:33:36 +10:00
Patrick Schleizer	7200e9bd8c	output	2024-07-24 09:15:02 -04:00
Patrick Schleizer	1b6161c2dc	Merge remote-tracking branch 'ben-grande/fuzz'	2024-07-24 09:13:48 -04:00
Raja Grewal	88c88187f2	Re-enable (default) secure_redirects for ICMP redirect messages	2024-07-24 17:26:50 +10:00
Ben Grande	8be21b6eff	Handle newlines in file names	2024-07-23 19:36:12 +02:00
Ben Grande	aa99de68d3	Log output with defined levels	2024-07-23 18:50:16 +02:00
Ben Grande	06fbcdac1d	Prettify log messages	2024-07-23 09:55:02 +02:00
Raja Grewal	fb494c2ba5	Update docs relating to the cfi=kcfi kernel parameter	2024-07-23 13:12:13 +10:00
Ben Grande	7ee1ea2cc7	Unify functions that evaluate commands	2024-07-22 17:06:07 +02:00
Ben Grande	9c3566f524	Delimit file names with null terminator	2024-07-22 16:56:42 +02:00
Raja Grewal	d6fc71dba7	Add option to switch (back) to using kCFI in the future	2024-07-22 17:26:00 +10:00
raja-grewal	f582e54343	Merge branch 'Kicksecure:master' into blacklist_to_disable	2024-07-22 15:12:00 +10:00
Patrick Schleizer	d2563ed923	bumped changelog version	2024-07-21 10:40:14 +00:00
Patrick Schleizer	64f8b2eb58	Revert "no longer disable Intel ME related kernel modules" ... This reverts commit 6157e328f4. https://www.kicksecure.com/wiki/Out-of-band_Management_Technology#Intel_ME_Kernel_Modules https://github.com/Kicksecure/security-misc/issues/239	2024-07-21 06:36:22 -04:00
Patrick Schleizer	04fb00572f	bumped changelog version	2024-07-20 17:02:05 +00:00
Patrick Schleizer	f0a478c7c9	permission hardener: allow postfix ... postqueue matchwhitelist postdrop matchwhitelist	2024-07-20 12:57:56 -04:00
Raja Grewal	a189956adc	Typo	2024-07-20 20:11:09 +10:00
Raja Grewal	3c720a0715	Disable some legacy drivers ... These were all previously blacklisted for over 2 years.	2024-07-20 15:03:21 +10:00
Raja Grewal	c4965ed838	Disable legacy framebuffer drivers ... These were all previously blacklisted for over 2 years.	2024-07-20 14:55:10 +10:00
Patrick Schleizer	9f53a0182b	undo io_uring related changes ... as these should be done in a separate pull request (if apprpriate) https://github.com/Kicksecure/security-misc/pull/244#issuecomment-2238889062	2024-07-19 07:20:59 -04:00