Commit graph

17 commits

Author SHA1 Message Date
raja-grewal
0b9b9ffb1e
Improve clarity for panic on OOM 2025-11-11 11:32:47 +00:00
raja-grewal
b89aaea61e
Add docs on logging martian packets 2025-11-10 06:03:33 +00:00
raja-grewal
a3830db09e
Update docs relating to panic on OOM 2025-11-09 13:42:31 +00:00
raja-grewal
0aa0b67df6
Merge branch 'master' into docs 2025-11-10 00:20:48 +11:00
Patrick Schleizer
0391411885
revert Force immediate kernel panic on OOM.
https://github.com/Kicksecure/security-misc/issues/324#issuecomment-3507949741
2025-11-09 05:47:00 -05:00
raja-grewal
9f7480e20a
Make terminology consistent 2025-10-19 01:41:58 +00:00
raja-grewal
f2c3eba4f0
Merge branch 'Kicksecure:master' into docs 2025-10-19 12:23:13 +11:00
Aaron Rainbolt
29639fe69e
Merge remote-tracking branch 'raja/bad_ipv6_ra' into arraybolt3/trixie 2025-10-15 19:01:08 -05:00
Aaron Rainbolt
026d55ac41
Typo fixes 2025-10-15 18:30:52 -05:00
Aaron Rainbolt
35fce26476
Merge remote-tracking branch 'raja/stop_ptrace' into arraybolt3/trixie 2025-10-15 18:18:33 -05:00
raja-grewal
f690b58870
Add docs relating to panic on OOM 2025-10-13 02:08:44 +00:00
raja-grewal
7161430a60
Seperate ptrace() disabling into own file 2025-10-12 02:27:48 +00:00
Patrick Schleizer
968de33c65
Force immediate kernel panic on OOM.
This is to avoid security features such as the screen locker, kloak, emerg-shutdown
from being arbitrarily terminated when the system starts running out of memory.

https://forums.whonix.org/t/screen-locker-in-security-can-we-disable-these-at-least-4-backdoors/8128/14

https://github.com/Kicksecure/security-misc/issues/324

`vm.panic_on_oom=2`

implements https://github.com/Kicksecure/security-misc/issues/324
2025-10-10 08:03:03 -04:00
raja-grewal
0c8f2f1b44
Add docs about the risks associated with IPv6 RAs 2025-10-02 07:05:00 +00:00
raja-grewal
194b8fce4e
Disable the usage of ptrace() by all processes 2025-09-28 03:20:24 +00:00
Aaron Rainbolt
2a39d5997c
security-misc split string changes 2025-09-21 16:06:11 -05:00
Patrick Schleizer
f70550d015
Split the security-misc into security-misc-shared, security-misc-desktop and security-misc-server: rename files
https://github.com/Kicksecure/security-misc/issues/187
2025-09-17 14:49:28 -04:00
Renamed from usr/lib/sysctl.d/990-security-misc.conf (Browse further)