Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-29 13:46:13 -05:00
Code Issues Packages Projects Releases Wiki Activity
2,053 Commits 2 Branches 291 Tags 8.2 MiB
1122b3402c
Commit Graph

2053 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
raja-grewal
1122b3402c
GDS mitigation for CPUs 2024-05-01 13:50:42 +10:00
raja-grewal
c002bd62e8
Clarify use of mitigations=auto 2024-05-01 13:49:34 +10:00
raja-grewal
d89d7e8ef8
Add reference for RETBleed 2024-05-01 13:49:00 +10:00
raja-grewal
015dcc4212
Add reference for SSB 2024-05-01 13:48:13 +10:00
raja-grewal
de4f4be947
Merge spectre mitigations 2024-05-01 13:47:40 +10:00
raja-grewal
965c8641fd
Update BHI mitigation reference 2024-05-01 13:47:02 +10:00
Patrick Schleizer
a9886a3119
bumped changelog version 2024-04-12 06:56:39 +00:00
Patrick Schleizer
5cbdf3c126
Merge remote-tracking branch 'github-kicksecure/master' 2024-04-12 02:54:17 -04:00
Patrick Schleizer
ab8b6da484
Merge pull request #216 from raja-grewal/spectre_bhi 
BHI mitigation on Intel CPUs
 2024-04-12 02:53:08 -04:00
raja-grewal
493576836c
BHI mitigation on Intel CPUs 2024-04-12 00:17:06 +10:00
Patrick Schleizer
7fba04d148
bumped changelog version 2024-04-01 06:56:45 +00:00
Patrick Schleizer
7dba3fb7be
no longer disable MSR by default 
fixes https://github.com/Kicksecure/security-misc/issues/215
 2024-04-01 02:56:27 -04:00
Patrick Schleizer
d9ac01ba5c
bumped changelog version 2024-03-18 15:10:10 +00:00
Patrick Schleizer
ecaa024f22
lower debugging 2024-03-18 11:01:56 -04:00
Patrick Schleizer
357ea5deab
bumped changelog version 2024-03-11 15:07:50 +00:00
Patrick Schleizer
0a018bdebc
Merge remote-tracking branch 'github-kicksecure/master' 2024-03-11 10:13:57 -04:00
Patrick Schleizer
0b81316300
Merge pull request #211 from wryMitts/patch-1 
Create proc group on install
 2024-03-11 10:12:46 -04:00
wryMitts
03ed546cd8
Create proc group on install 
Fixes https://github.com/Kicksecure/security-misc/issues/210
 2024-03-10 16:55:10 -04:00
Patrick Schleizer
57fc487e5e
bumped changelog version 2024-03-10 13:19:26 +00:00
Patrick Schleizer
a5206bde33
proc-hidepid.service add gid=proc 
This allows users that are a member of the `proc` group to be excluded from `hidepid` protections.

https://github.com/Kicksecure/security-misc/issues/208
 2024-03-10 08:44:53 -04:00
Patrick Schleizer
0f0d9ca2a4
bumped changelog version 2024-03-04 11:48:30 +00:00
Patrick Schleizer
6b76373395
fix panic-on-oops started every 10s in Qubes-Whonix 
by changing from a /etc/profile.d etc. related mechanism to start to a systemd unit file based approach

Thanks to @marmarek for the bug report!

https://forums.whonix.org/t/panic-on-oops-started-every-10s/19450
 2024-03-04 06:44:26 -05:00
Patrick Schleizer
af6c6971a7
comment 2024-03-04 06:33:51 -05:00
Patrick Schleizer
e013070e0b
newline 2024-03-04 06:33:21 -05:00
Patrick Schleizer
a5cc1774f2
bumped changelog version 2024-02-26 13:32:44 +00:00
Patrick Schleizer
808e72f24b
use long options 
https://github.com/Kicksecure/security-misc/issues/172
 2024-02-26 08:11:26 -05:00
Patrick Schleizer
2d1d1b246f
improve output 
https://github.com/Kicksecure/security-misc/issues/172
 2024-02-26 08:07:29 -05:00
Patrick Schleizer
d8f5376c4f
improve output 
https://github.com/Kicksecure/security-misc/issues/172
 2024-02-26 07:58:06 -05:00
Patrick Schleizer
cf84762a3a
improve output 
https://github.com/Kicksecure/security-misc/issues/172
 2024-02-26 07:52:41 -05:00
Patrick Schleizer
f2958bbfa5
comment 2024-02-26 07:49:30 -05:00
Patrick Schleizer
bc8f9edc31
Merge remote-tracking branch 'github-kicksecure/master' 2024-02-26 07:48:19 -05:00
Patrick Schleizer
b23d167342
Merge pull request #204 from DanWin/sysfs-mount 
Make /sys hardening optional and allow access to /sys/fs to make polkit work
 2024-02-26 07:46:02 -05:00
Patrick Schleizer
02d6f67741
bumped changelog version 2024-02-22 20:08:17 +00:00
Patrick Schleizer
d13d1aa7ec
comments 2024-02-22 15:07:53 -05:00
Patrick Schleizer
a1f898e3b3
bumped changelog version 2024-02-22 19:58:01 +00:00
Patrick Schleizer
c3dd178b19
output 2024-02-22 14:57:50 -05:00
Daniel Winzen
ef44ecea44
Add option to disabe /sys hardening 2024-02-22 17:27:46 +01:00
Daniel Winzen
3bc1765dbb
Allow access to /sys/fs for polkit 2024-02-22 17:27:45 +01:00
Patrick Schleizer
6b73e6c2a9
bumped changelog version 2024-02-22 16:07:16 +00:00
Patrick Schleizer
37a7abdf0c
ConditionKernelCommandLine=!remountsecure=0 2024-02-22 11:07:01 -05:00
Patrick Schleizer
eb3e0b9292
bumped changelog version 2024-02-22 14:52:55 +00:00
Patrick Schleizer
c0924321b8
fix systemd unit ExecStart 2024-02-22 09:52:36 -05:00
Patrick Schleizer
d148a769b7
bumped changelog version 2024-02-22 14:50:05 +00:00
Patrick Schleizer
6d7cf3c12a
output 2024-02-22 09:49:48 -05:00
Patrick Schleizer
f7831db197
do not exit non-zero if folder does not exist 2024-02-22 09:17:41 -05:00
Patrick Schleizer
5bdd7b8475
output 2024-02-22 09:14:52 -05:00
Patrick Schleizer
44a15cd97d
mount --make-private 
https://github.com/Kicksecure/security-misc/issues/172
 2024-02-22 09:13:56 -05:00
Patrick Schleizer
c0f98b05b6
comment 
https://github.com/Kicksecure/security-misc/pull/202
 2024-02-22 06:03:59 -05:00
Patrick Schleizer
1e1613aa93
allow /opt exec as usually optional binaries are placed there such as firefox 
https://github.com/Kicksecure/security-misc/pull/202
 2024-02-22 06:02:28 -05:00
Patrick Schleizer
7c7b4b24b4
fix home_noexec_maybe -> most_noexec_maybe 
https://github.com/Kicksecure/security-misc/pull/202
 2024-02-22 06:02:00 -05:00