Commit Graph

1122 Commits

Author SHA1 Message Date
Patrick Schleizer
3558a9949f
Enable APT seccomp sandboxing.
Thanks to @torjunkie for the suggestion!

https://forums.whonix.org/t/apt-seccomp-bpf-sandboxing/7702
2019-07-07 09:37:25 +00:00
Patrick Schleizer
93e81b4330
bumped changelog version 2019-07-06 13:56:28 +00:00
Patrick Schleizer
3cd1a5ec09
fix lintian warning 2019-07-06 13:56:00 +00:00
Patrick Schleizer
b73cdfd7cc
bumped changelog version 2019-07-06 13:53:10 +00:00
Patrick Schleizer
7b0b9da32c
Merge remote-tracking branch 'origin/master' 2019-07-06 07:06:54 -04:00
Patrick Schleizer
649878fdcb
Merge pull request #20 from madaidan/patch-15
Blacklist HDLC and use "install" for blacklisting firewire/thunderbolt
2019-07-06 11:06:25 +00:00
madaidan
8888147e1e
Update control 2019-07-04 14:26:31 +00:00
madaidan
46409be8b6
Use install instead of blacklist 2019-07-04 14:25:28 +00:00
madaidan
eb7eaffba1
Blacklist n-hdlc 2019-07-04 14:24:44 +00:00
Patrick Schleizer
6df7b3c295
bumped changelog version 2019-07-01 15:23:49 +00:00
Patrick Schleizer
f82731698c
re-enable PrivateNetwork=true 2019-07-01 14:53:01 +00:00
Patrick Schleizer
81b38529d9
add copyright for files in etc/pam.d/* 2019-07-01 13:58:20 +00:00
Patrick Schleizer
552b6edbed
fix machine readable copyright format 2019-07-01 13:51:00 +00:00
Patrick Schleizer
a05264934b
add copyright for etc/login.defs.security-misc 2019-07-01 13:46:01 +00:00
Patrick Schleizer
48e511347c
fix lintian warning 2019-07-01 13:37:55 +00:00
Patrick Schleizer
93c0821054
config-package-dev displace files for change umask
https://forums.whonix.org/t/change-default-umask/7416
2019-07-01 13:35:45 +00:00
Patrick Schleizer
a73f0566e9
change default umask to 006
session optional  pam_umask.so usergroups

https://forums.whonix.org/t/change-default-umask/7416/17
2019-07-01 13:25:23 +00:00
Patrick Schleizer
41b61e3277
revert to Debian buster original 2019-07-01 13:24:29 +00:00
Patrick Schleizer
88a78b1c87
Merge remote-tracking branch 'origin/master' 2019-07-01 09:21:05 -04:00
Patrick Schleizer
8c60e7c67f
Merge pull request #18 from madaidan/patch-14
Change the default umask to 006
2019-07-01 13:20:21 +00:00
Patrick Schleizer
24cc8e380d
comment out proc-hidepid.service hardening for now
since broken in Qubes Debian AppVMs

https://forums.whonix.org/t/kernel-hardening/7296/104
2019-07-01 03:43:02 -04:00
Patrick Schleizer
0bffc7a930
Merge remote-tracking branch 'origin/master' 2019-07-01 03:08:26 -04:00
Patrick Schleizer
3c176ce158
allow permissions openat mkdir
since required in Qubes Debian templates
2019-07-01 03:07:14 -04:00
Patrick Schleizer
344d009032
Merge pull request #19 from madaidan/patch-15
Add licensing to proc-hidepid.service
2019-07-01 06:39:28 +00:00
madaidan
b8f2aee905
Add licensing 2019-06-30 13:22:43 +00:00
madaidan
cfaafe400c
Update control 2019-06-30 13:16:12 +00:00
madaidan
eedeaa0e7f
Update common-session-noninteractive 2019-06-30 13:12:59 +00:00
madaidan
a9af85f585
Update common-session 2019-06-30 13:12:16 +00:00
madaidan
1e1d29cfde
Create common-session-noninteractive 2019-06-30 13:11:31 +00:00
madaidan
501901f7c0
Change default umask to 006 2019-06-30 13:10:54 +00:00
madaidan
09a5c27f47
Create common-session 2019-06-30 13:10:29 +00:00
madaidan
a319333493
Create login.defs 2019-06-30 13:09:51 +00:00
Patrick Schleizer
f26ad14d4c
bumped changelog version 2019-06-30 07:21:58 -04:00
Patrick Schleizer
b8ace6e3f6
bump 2019-06-30 07:21:31 -04:00
Patrick Schleizer
f3a4800987
bumped changelog version 2019-06-30 08:23:51 +00:00
Patrick Schleizer
85f61758c5
fix package description 2019-06-30 04:11:38 -04:00
Patrick Schleizer
e473397061
Merge remote-tracking branch 'origin/master' 2019-06-30 04:11:12 -04:00
Patrick Schleizer
ec78a3e42e
Merge pull request #17 from madaidan/patch-13
Disable coredumps
2019-06-30 08:10:28 +00:00
Patrick Schleizer
67de5247c8
Merge branch 'master' into patch-13 2019-06-30 08:10:04 +00:00
Patrick Schleizer
9525ff87c6
Merge pull request #16 from madaidan/patch-12
Mount /proc with hidepid=2
2019-06-30 08:09:23 +00:00
madaidan
dbfb9e1cdf
Update control 2019-06-30 00:21:46 +00:00
madaidan
024a698249
Update control 2019-06-30 00:20:38 +00:00
madaidan
230ef34db4
Create disable-coredumps.conf 2019-06-30 00:19:04 +00:00
madaidan
1bf802f846
Create coredumps.conf 2019-06-30 00:16:50 +00:00
madaidan
f040081a59
Prevent setuid processes from creating coredumps. 2019-06-30 00:13:52 +00:00
madaidan
c6b669f1a5
Create disable-coredumps.conf 2019-06-30 00:11:13 +00:00
madaidan
22267c895b
Update control 2019-06-29 22:30:41 +00:00
madaidan
a2c676ed48
Update proc-hidepid.service 2019-06-29 22:28:41 +00:00
madaidan
dcf57bebf0
Create proc-hidepid.service 2019-06-29 22:27:24 +00:00
Patrick Schleizer
24b19c5976
bumped changelog version 2019-06-29 10:35:13 +00:00