Commit graph

2678 commits

Author SHA1 Message Date
Patrick Schleizer
14cf205579
fix 2025-05-21 08:36:16 -04:00
Patrick Schleizer
ff6bc5d5b6
bumped changelog version 2025-05-21 11:23:39 +00:00
Patrick Schleizer
353b6e83c5
test that wc is functional
https://github.com/Kicksecure/security-misc/pull/305#issuecomment-2892378246
2025-05-21 07:20:13 -04:00
Patrick Schleizer
5930e27052
pam-info: improve error handling
https://github.com/Kicksecure/security-misc/pull/305#issuecomment-2892378246
2025-05-21 07:05:25 -04:00
Patrick Schleizer
5c981e0891
pam-info: fix, consistently write errors and warnings to stderr 2025-05-21 06:55:09 -04:00
Patrick Schleizer
19d7e1af5d
bumped changelog version 2025-05-20 11:40:27 +00:00
Patrick Schleizer
405880e63b
handle case of non-existence of /proc/cmdline 2025-05-18 06:44:42 -04:00
Patrick Schleizer
88235cc97b
refactoring 2025-05-18 06:44:04 -04:00
Patrick Schleizer
601ea77b00
end-of-options 2025-05-18 06:42:39 -04:00
Patrick Schleizer
d8feca1276
printf 2025-05-18 06:41:41 -04:00
Patrick Schleizer
7f2ba0980d
refactoring 2025-05-18 06:40:50 -04:00
Patrick Schleizer
4d1f8c44d2
Merge remote-tracking branch 'github-kicksecure/master' 2025-05-18 06:36:08 -04:00
Patrick Schleizer
e478750814
Merge pull request #305 from DMHalford/pam-info-failed_login_counter-fix
Prevent erroneous "Login blocked after [negative number] attempts" errors
2025-05-18 06:35:23 -04:00
DMHalford
91a76db66b
Prevent erroneous "Login blocked after [negative number] attempts" errors
For root, faillock appears to always* return an empty string (i.e. no table headers are present), yielding a zero-initialized pam_faillock_output_count and thus resulting in the calculation of a negative failed_login_counter value.

This can cause erroneous errors of the form "ERROR: Login blocked after [negative number] attempts" during sudo-ing and screen unlocking.

This commit modifies the initialization of failed_login_counter such that it cannot be negative and prevents the display of these incorrect warnings.

* Only rudimentary local tests were conducted
2025-05-15 15:42:50 -04:00
DMHalford
6c3be9ced0
Prevent erroneous "Login blocked after [negative number] attempts" errors
For root, faillock appears to always* return an empty string (i.e. no table headers are present), yielding a zero-initialized pam_faillock_output_count and thus resulting in the calculation of a negative failed_login_counter value.

This can cause erroneous errors of the form "ERROR: Login blocked after [negative number] attempts" during sudo-ing and screen unlocking.

This commit modifies the initialization of failed_login_counter such that it cannot be negative and prevents the display of these incorrect warnings.

* Only rudimentary tests were conducted
2025-05-15 15:06:10 -04:00
Patrick Schleizer
341dce33fb
bumped changelog version 2025-04-25 09:54:23 +00:00
Patrick Schleizer
06e1e44b00
comments 2025-04-25 05:51:21 -04:00
Patrick Schleizer
ba1012ca87
bumped changelog version 2025-04-25 08:19:35 +00:00
Patrick Schleizer
a8f6132bec
output 2025-04-25 03:11:39 -04:00
Patrick Schleizer
1d14a9f324
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/fix-pkexec-umask' 2025-04-25 02:59:09 -04:00
Aaron Rainbolt
612f5f92fd
Fix umask for pkexec-run commands 2025-04-24 20:01:35 -05:00
Patrick Schleizer
e154d0af6d
bumped changelog version 2025-04-21 10:21:54 +00:00
Patrick Schleizer
4bf0e3a636
comments 2025-04-21 04:57:07 -04:00
Patrick Schleizer
502f5953c7
comments 2025-04-21 04:55:19 -04:00
Patrick Schleizer
abb0c83619
comments 2025-04-21 04:54:06 -04:00
Patrick Schleizer
efa2967fca
comments 2025-04-21 04:53:04 -04:00
Patrick Schleizer
dc7e857904
bumped changelog version 2025-04-19 17:33:56 +00:00
Patrick Schleizer
9948ae114d
fix 2025-04-19 13:24:17 -04:00
Patrick Schleizer
4aca622706
fix 2025-04-19 13:23:26 -04:00
Patrick Schleizer
701f4a0e88
output 2025-04-19 13:20:04 -04:00
Patrick Schleizer
a670c0d873
comment 2025-04-19 13:18:23 -04:00
Patrick Schleizer
4799f3ce02
make /usr/libexec/security-misc/apt-get-update more reliable 2025-04-19 13:17:28 -04:00
Patrick Schleizer
c4f0e1d16f
refactoring 2025-04-19 12:57:14 -04:00
Patrick Schleizer
81634930fa
refactoring 2025-04-19 12:55:32 -04:00
Patrick Schleizer
90330a1ec9
refactoring 2025-04-19 12:49:18 -04:00
Patrick Schleizer
ce2c9a21a3
/usr/libexec/security-misc/apt-get-update: use /run/helper-scripts folder for pid file instead of $TMP
to avoid permission issues
2025-04-19 12:48:19 -04:00
Patrick Schleizer
96ff7c8dc6
refactoring 2025-04-19 12:45:06 -04:00
Patrick Schleizer
5a37790e6b
cleanup 2025-04-19 12:43:15 -04:00
Patrick Schleizer
7512aa6757
bumped changelog version 2025-04-15 20:59:37 +00:00
Patrick Schleizer
e0e2a9b61c
Merge remote-tracking branch 'github-kicksecure/master' 2025-04-15 15:27:10 -04:00
Patrick Schleizer
9f2836d2ba
Merge pull request #304 from raja-grewal/stop_pstore
Disable PStore
2025-04-15 15:17:25 -04:00
Patrick Schleizer
5e88dfe809
bumped changelog version 2025-04-10 11:38:17 +00:00
Patrick Schleizer
c0a18c5a71
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/rename-boot-modes' 2025-04-10 06:07:55 -04:00
Aaron Rainbolt
74ca63d12c
Mass-change "PERSISTENCE mode USERNAME" to "PERSISTENCE Mode - USERNAME Session" 2025-04-09 21:01:41 -05:00
raja-grewal
aa0ffff427
README.md: Revert error 2025-04-10 11:49:45 +10:00
Patrick Schleizer
da9dd3c3f1
bumped changelog version 2025-04-09 15:16:00 +00:00
Patrick Schleizer
163d51f32a
newline at the end 2025-04-09 09:47:52 -04:00
Patrick Schleizer
4d2b2e6546
bumped changelog version 2025-04-08 14:08:24 +00:00
Patrick Schleizer
39f4f5b607
comments 2025-04-08 06:53:08 -04:00
Patrick Schleizer
173606891a
output 2025-04-08 06:48:29 -04:00