raja-grewal
|
a9f238fe04
|
README.md: Split optional setting to new line
|
2024-10-14 02:57:31 +00:00 |
|
raja-grewal
|
09fe46adc9
|
Clarify KSPP compliance header for the undocumented case
|
2024-10-14 02:54:30 +00:00 |
|
Patrick Schleizer
|
263335f74e
|
bumped changelog version
|
2024-10-08 11:24:56 +00:00 |
|
Patrick Schleizer
|
9169611645
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-10-08 05:54:50 -04:00 |
|
Patrick Schleizer
|
8227a3dde2
|
Merge pull request #273 from raja-grewal/text_2
Documentation update 2
|
2024-10-08 05:53:48 -04:00 |
|
raja-grewal
|
0c0774f6c0
|
Merge branch 'master' into text_2
|
2024-10-06 10:48:52 +00:00 |
|
raja-grewal
|
dc470cac1d
|
Remmove deprecated link
|
2024-10-06 10:46:05 +00:00 |
|
Patrick Schleizer
|
8a2d432ffe
|
bumped changelog version
|
2024-10-03 07:22:23 +00:00 |
|
Patrick Schleizer
|
0e3ffa3f11
|
no longer set kernel.unprivileged_userns_clone=0
because it breaks too much
fixes https://github.com/Kicksecure/security-misc/issues/274
|
2024-10-03 02:58:58 -04:00 |
|
Patrick Schleizer
|
f401d94d5e
|
expand documentation on kernel.unprivileged_userns_clone=0 sysctl
https://github.com/Kicksecure/security-misc/issues/274
|
2024-10-03 02:44:06 -04:00 |
|
raja-grewal
|
ac1378743c
|
Consistent formatting
|
2024-09-30 16:56:18 +10:00 |
|
raja-grewal
|
eae38e72f3
|
README.md: Show the current max_map_count
|
2024-09-26 13:10:36 +00:00 |
|
raja-grewal
|
f3b50a23c9
|
Add reference on unprivileged_userns_restriction
|
2024-09-26 13:10:01 +00:00 |
|
raja-grewal
|
39d063d494
|
Add KSPP=no definition
|
2024-09-26 13:09:21 +00:00 |
|
Patrick Schleizer
|
5572eb897a
|
bumped changelog version
|
2024-09-25 01:03:42 +00:00 |
|
Patrick Schleizer
|
e04f9cd4c1
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-09-24 20:16:06 -04:00 |
|
Patrick Schleizer
|
65aa910503
|
Merge pull request #272 from raja-grewal/text
Documentation update
|
2024-09-24 20:15:03 -04:00 |
|
raja-grewal
|
870ff88605
|
Comment on Flatpak requiring unprivileged user namespaces
|
2024-09-25 10:01:45 +10:00 |
|
raja-grewal
|
769767a96a
|
Update mmap ASLR docs
|
2024-09-25 09:54:49 +10:00 |
|
Patrick Schleizer
|
18d426f521
|
bumped changelog version
|
2024-09-14 02:56:09 +00:00 |
|
Patrick Schleizer
|
3280dbd5d5
|
Fix VirtualBox audio device ICH AC97.
no longer `blacklist snd_intel8x0`
Breaks VirtualBox audio device ICH AC97, which is unfortunately still required by some users.
https://www.kicksecure.com/wiki/Dev/audio
Fixes https://github.com/Kicksecure/security-misc/issues/271
|
2024-09-13 22:52:47 -04:00 |
|
Patrick Schleizer
|
1bc694fa12
|
bumped changelog version
|
2024-09-08 17:41:30 +00:00 |
|
Patrick Schleizer
|
01908d505a
|
readme
|
2024-09-05 07:00:11 -04:00 |
|
Patrick Schleizer
|
e914028be7
|
add KSPP compliance status to readme based on comment by @raja-grewal
https://github.com/Kicksecure/security-misc/issues/256#issuecomment-2330376651
|
2024-09-05 06:03:05 -04:00 |
|
Patrick Schleizer
|
40fb14c654
|
bumped changelog version
|
2024-09-04 14:13:15 +00:00 |
|
Patrick Schleizer
|
5a255d4831
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-09-04 10:12:34 -04:00 |
|
Patrick Schleizer
|
563a898013
|
Merge pull request #265 from raja-grewal/mmap_min_addr
Set `sysctl vm.mmap_min_addr=65536`
|
2024-09-04 10:11:48 -04:00 |
|
Patrick Schleizer
|
d618f9f35b
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-09-04 10:07:50 -04:00 |
|
Patrick Schleizer
|
175945ec9a
|
Merge pull request #268 from raja-grewal/panic_on_warn
Enable `panic_on_warn=1`
|
2024-09-04 10:05:47 -04:00 |
|
Patrick Schleizer
|
b0a8544182
|
Merge pull request #270 from raja-grewal/typo
Small typo
|
2024-09-04 10:04:45 -04:00 |
|
raja-grewal
|
7393ba1591
|
Typo
|
2024-09-04 23:23:24 +10:00 |
|
Patrick Schleizer
|
59374ce902
|
bumped changelog version
|
2024-08-29 09:49:51 +00:00 |
|
Patrick Schleizer
|
7e2838ec07
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-08-29 05:06:07 -04:00 |
|
Patrick Schleizer
|
0762794ff6
|
Merge pull request #269 from raja-grewal/tidy
Minor correction
|
2024-08-29 04:46:26 -04:00 |
|
Raja Grewal
|
6294729c8e
|
Follow-up on f70fe308a9
|
2024-08-29 15:34:24 +10:00 |
|
Raja Grewal
|
3101035a3f
|
Enable panic_on_warn=1
|
2024-08-29 01:57:32 +10:00 |
|
Patrick Schleizer
|
9c918eb431
|
bumped changelog version
|
2024-08-28 11:01:37 +00:00 |
|
Patrick Schleizer
|
f70fe308a9
|
no longer set sysctl fs.binfmt_misc.status=0 /
no longer disallow registering interpreters for miscellaneous binary formats
causing file/folder permissions issue `d????????? ? ? ? ? ? .`
Firefox no longer starting (probably not not a Firefox issue)
https://github.com/Kicksecure/security-misc/issues/267
|
2024-08-28 06:49:50 -04:00 |
|
Patrick Schleizer
|
463aa58f28
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-08-28 06:42:49 -04:00 |
|
Patrick Schleizer
|
328840c933
|
Merge pull request #264 from raja-grewal/kspp_compliance
Add KSPP compliance notices to corresponding parameters and `sysctls`
|
2024-08-28 06:38:57 -04:00 |
|
Raja Grewal
|
9e91c98cc9
|
Add details on BPF hardening and split the sysctl s
|
2024-08-26 12:40:04 +10:00 |
|
Raja Grewal
|
2c356e8b0e
|
Add KSPP notice definitions
|
2024-08-26 11:34:12 +10:00 |
|
Raja Grewal
|
2841d789be
|
README: Update
|
2024-08-26 11:21:26 +10:00 |
|
Raja Grewal
|
ac6602ac35
|
Add detail on disabling user namespaces breaking UPower
|
2024-08-26 11:19:20 +10:00 |
|
raja-grewal
|
9dbd200be4
|
Merge branch 'Kicksecure:master' into kspp_compliance
|
2024-08-26 11:08:21 +10:00 |
|
Patrick Schleizer
|
cf824ddb24
|
bumped changelog version
|
2024-08-25 15:34:55 +00:00 |
|
Patrick Schleizer
|
500568e322
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-08-25 11:01:58 -04:00 |
|
Patrick Schleizer
|
73900b59db
|
Merge pull request #263 from raja-grewal/max_user_namespaces
Provide option to disable user namespaces
|
2024-08-25 11:00:51 -04:00 |
|
Patrick Schleizer
|
43d13b70f1
|
Merge remote-tracking branch 'raja/syntax'
|
2024-08-25 10:55:52 -04:00 |
|
Patrick Schleizer
|
835376418d
|
Merge remote-tracking branch 'raja/mod'
|
2024-08-25 10:48:25 -04:00 |
|