469 Commits

Author	SHA1	Message	Date
Patrick Schleizer	d4b2baa9b6	bumped changelog version	2020-04-01 10:58:16 -04:00
Patrick Schleizer	2ceea8d1fe	update copyright year	2020-04-01 08:49:59 -04:00
Patrick Schleizer	b6de867dec	bumped changelog version	2020-04-01 08:26:44 -04:00
Patrick Schleizer	ad022fc0b7	fix	2020-04-01 08:21:06 -04:00
Patrick Schleizer	354af7085b	bumped changelog version	2020-03-31 07:41:45 -04:00
Patrick Schleizer	a369a0a94d	bumped changelog version	2020-03-30 18:42:02 -04:00
Patrick Schleizer	c22adbd92f	notify if security-misc installation is forced	2020-03-30 18:39:23 -04:00
Patrick Schleizer	7ee5fc1b76	bumped changelog version	2020-03-30 17:16:46 -04:00
Patrick Schleizer	f663b5eff8	skip check if any non-root user is a member of group sudo and console if ... environment variable `SECURITY_MISC_INSTALL` is set to `force`	2020-03-30 17:15:02 -04:00
Patrick Schleizer	bc22fc9fdb	skip check if any non-root user is a member of group sudo and console if file ... /var/lib/security-misc/skip_install_check exists	2020-03-30 17:12:43 -04:00
Patrick Schleizer	d7a69628b1	bumped changelog version	2020-03-21 14:56:48 -04:00
Patrick Schleizer	e4118cb21e	bumped changelog version	2020-03-12 04:43:08 -04:00
Patrick Schleizer	04a87f7029	bumped changelog version	2020-03-08 09:43:24 -04:00
Patrick Schleizer	44351ec9b7	remove no longer needed code for installation of apparmor profiles	2020-03-07 21:44:19 -05:00
Patrick Schleizer	71ae623916	bumped changelog version	2020-03-05 08:36:27 -05:00
Patrick Schleizer	15dde15a36	typo	2020-03-03 09:42:24 -05:00
Patrick Schleizer	8887af26d6	bumped changelog version	2020-03-03 09:19:49 -05:00
Patrick Schleizer	cd19c2da00	fix lintian warning	2020-03-03 09:18:24 -05:00
Patrick Schleizer	7e3fedefb2	bumped changelog version	2020-03-03 09:12:50 -05:00
Patrick Schleizer	453aa8a4eb	Merge pull request #65 from madaidan/userfaultfd ... Restrict the userfaultfd() syscall to root	2020-02-29 12:28:32 +00:00
Patrick Schleizer	e3e39f2235	Merge remote-tracking branch 'origin/master'	2020-02-29 05:01:41 -05:00
Patrick Schleizer	b31caefdeb	description	2020-02-29 04:59:02 -05:00
Patrick Schleizer	bd7678c574	Merge pull request #66 from madaidan/mce ... Fix docs	2020-02-28 12:04:05 +00:00
madaidan	42d3b986c4	Update control	2020-02-27 17:41:14 +00:00
Patrick Schleizer	4043d2af3f	description	2020-02-25 02:06:48 -05:00
Patrick Schleizer	0e5187ff24	description	2020-02-25 02:00:27 -05:00
madaidan	60fbf8b0de	Update control	2020-02-24 18:24:07 +00:00
madaidan	8ea4e50c8e	Update control	2020-02-16 19:52:40 +00:00
Patrick Schleizer	01eaee997e	bumped changelog version	2020-02-15 15:35:44 -05:00
Patrick Schleizer	dce54d5d0f	bumped changelog version	2020-02-15 15:29:38 -05:00
Patrick Schleizer	1e5946c795	Merge branch 'master' into sysrq	2020-02-15 10:41:52 +00:00
madaidan	0f49736957	Update control	2020-02-14 18:18:18 +00:00
madaidan	ace6211176	Update control	2020-02-14 17:51:17 +00:00
Patrick Schleizer	ad6b766886	Merge pull request #57 from madaidan/sysctl ... Prevent symlink/hardlink TOCTOU races	2020-02-13 18:40:58 +00:00
Patrick Schleizer	14140ad41b	bumped changelog version	2020-02-13 13:39:45 -05:00
madaidan	2796c2dd00	Update control	2020-02-12 18:43:19 +00:00
madaidan	14f8458374	Update control	2020-02-12 18:05:32 +00:00
Patrick Schleizer	163e20b886	bumped changelog version	2020-02-05 06:31:48 -05:00
Patrick Schleizer	8c5cd865f4	bumped changelog version	2020-02-03 09:23:13 -05:00
Patrick Schleizer	2291b7f787	bumped changelog version	2020-02-03 08:43:31 -05:00
Patrick Schleizer	0bd0a4a647	bumped changelog version	2020-01-30 06:14:34 -05:00
Patrick Schleizer	d69c1839cd	bumped changelog version	2020-01-30 06:02:26 -05:00
Patrick Schleizer	2711d0f7f0	bumped changelog version	2020-01-30 01:22:32 -05:00
Patrick Schleizer	c1a0da60be	set kernel boot parameter l1tf=full,force and nosmt=force ... https://forums.whonix.org/t/should-all-kernel-patches-for-cpu-bugs-be-unconditionally-enabled-vs-performance-vs-applicability/7647/17	2020-01-30 00:46:48 -05:00
Patrick Schleizer	efc40da4fb	bumped changelog version	2020-01-24 12:02:27 -05:00
Patrick Schleizer	f4c54881ac	description	2020-01-24 04:49:19 -05:00
Patrick Schleizer	25317f23e3	bumped changelog version	2020-01-24 04:41:16 -05:00
Patrick Schleizer	c0d3726b00	comment	2020-01-24 04:40:03 -05:00
Patrick Schleizer	a37da1c968	add digits to drop-in file names	2020-01-24 04:39:06 -05:00
Patrick Schleizer	2ab940c603	bumped changelog version	2020-01-24 04:34:18 -05:00
Patrick Schleizer	3a4d283169	description	2020-01-24 04:33:30 -05:00
Patrick Schleizer	e0aa67677d	merge the many modprobe.d config files into 1 ... and use a name starting with double digits to make it easier to disable settings using a lexically higher config file	2020-01-24 04:30:36 -05:00
Patrick Schleizer	6a4c493213	merge the many sysctl config files into 1 ... and use a name starting with double digits to make it easier to disable settings using a lexically higher config file	2020-01-24 04:26:36 -05:00
Patrick Schleizer	f653b94e77	bumped changelog version	2020-01-24 03:49:02 -05:00
Patrick Schleizer	8616728ce0	remove duplicate	2020-01-24 03:35:15 -05:00
Patrick Schleizer	3b283ec00f	bumped changelog version	2020-01-22 07:10:47 -05:00
Patrick Schleizer	531f17cb68	add update initramfs trigger ... https://github.com/Whonix/security-misc/pull/53	2020-01-22 07:08:31 -05:00
Patrick Schleizer	df0b2afda1	bumped changelog version	2020-01-21 10:12:32 -05:00
Patrick Schleizer	627b95e0b3	bumped changelog version	2020-01-20 08:51:25 -05:00
Patrick Schleizer	fbe9b60d95	fix Whonix / Kicksecure ... /var/lib/dpkg/tmp.ci/preinst: ERROR: No user is a member of group 'console'. Installation aborted. /var/lib/dpkg/tmp.ci/preinst: ERROR: You probably want to run: sudo adduser user console	2020-01-20 08:49:02 -05:00
Patrick Schleizer	960e1ff6e8	bumped changelog version	2020-01-17 03:32:57 -05:00
madaidan	1df48a226d	Update control	2020-01-15 20:30:17 +00:00
Patrick Schleizer	e110ea0b84	bumped changelog version	2020-01-15 11:37:52 -05:00
Patrick Schleizer	0618b53464	fix lintian warning	2020-01-15 11:35:07 -05:00
Patrick Schleizer	47ce3bec75	bumped changelog version	2020-01-15 11:05:54 -05:00
Patrick Schleizer	528c5fc4c4	Merge branch 'master' into sysctl-initramfs	2020-01-15 11:02:03 +00:00
Patrick Schleizer	1059ccf225	bumped changelog version	2020-01-14 09:28:28 -05:00
Patrick Schleizer	660837dc38	fix case when user "user" does not exists	2020-01-14 09:25:32 -05:00
Patrick Schleizer	18c726c3ee	comment	2020-01-14 09:23:02 -05:00
Patrick Schleizer	b8652681e7	fix legacy	2020-01-14 09:21:47 -05:00
Patrick Schleizer	cc21f912a3	bumped changelog version	2020-01-14 09:20:36 -05:00
madaidan	0953bbe1d7	Update control	2020-01-13 21:05:35 +00:00
madaidan	9dc43eae38	Description	2020-01-12 21:42:07 +00:00
Patrick Schleizer	8341242abc	bumped changelog version	2020-01-11 15:19:29 -05:00
Patrick Schleizer	61a2d390a7	lintian	2020-01-11 15:15:12 -05:00
madaidan	6088444c37	Update control	2020-01-11 18:38:17 +00:00
Patrick Schleizer	13a1e1321e	bumped changelog version	2020-01-01 05:59:59 -05:00
Patrick Schleizer	b2bdeb9095	bumped changelog version	2019-12-31 06:08:32 -05:00
Patrick Schleizer	2a3aae62b1	fix	2019-12-31 06:06:52 -05:00
Patrick Schleizer	427deec3f5	bumped changelog version	2019-12-31 06:03:48 -05:00
Patrick Schleizer	e89552c984	add user "user" to group "console" in Whonix and Kicksecure ... enable Console Lockdown in Whonix and Kicksecure	2019-12-31 05:55:44 -05:00
Patrick Schleizer	b5a2d1dc58	bumped changelog version	2019-12-31 02:54:58 -05:00
Patrick Schleizer	06ed728d79	bumped changelog version	2019-12-30 06:42:14 -05:00
Patrick Schleizer	e4e9c4e3b0	bumped changelog version	2019-12-30 05:59:43 -05:00
Patrick Schleizer	d7f58db52c	bumped changelog version	2019-12-27 05:30:12 -05:00
Patrick Schleizer	507a30d6e3	bumped changelog version	2019-12-24 18:35:49 -05:00
Patrick Schleizer	0326cd5ee9	bumped changelog version	2019-12-24 08:07:55 -05:00
Patrick Schleizer	7a80837b4f	bumped changelog version	2019-12-23 08:48:04 -05:00
Patrick Schleizer	bef41a38c2	bumped changelog version	2019-12-23 03:58:00 -05:00
Patrick Schleizer	9ec5b0ee82	description: lockdown not enabled yet	2019-12-23 03:38:49 -05:00
Patrick Schleizer	1ff51ee061	merge	2019-12-23 03:37:28 -05:00
Patrick Schleizer	42ff53e9ad	bumped changelog version	2019-12-23 02:42:07 -05:00
Patrick Schleizer	175d1c2845	bumped changelog version	2019-12-23 02:13:13 -05:00
Patrick Schleizer	3670fcf48b	depend on libcap2-bin for setcap / getcap / capsh	2019-12-23 00:49:33 -05:00
Patrick Schleizer	bce02ffdc0	Merge pull request #47 from madaidan/msr ... Blacklist CPU MSRs	2019-12-22 15:26:07 +00:00
madaidan	8f11a520f4	Update control	2019-12-22 13:54:16 +00:00
Patrick Schleizer	008ce4817c	bumped changelog version	2019-12-21 14:55:03 -05:00
Patrick Schleizer	1213415ce6	bumped changelog version	2019-12-21 14:23:35 -05:00
Patrick Schleizer	1c99b56c9b	bumped changelog version	2019-12-21 07:49:55 -05:00
Patrick Schleizer	b74e5ca972	comment	2019-12-21 07:47:00 -05:00