127 Commits

Author	SHA1	Message	Date
Raja Grewal	d0a59617f6	Add missing Copyright (C) statements	2024-07-18 00:13:30 +10:00
Raja Grewal	8f3896c3da	Upgrade hyperlinks to HTTPS	2024-07-17 23:44:37 +10:00
Raja Grewal	1bb843ec38	Update Copyright (C) to 2024	2024-05-11 13:18:36 +10:00
Patrick Schleizer	808e72f24b	use long options ... https://github.com/Kicksecure/security-misc/issues/172	2024-02-26 08:11:26 -05:00
Patrick Schleizer	2d1d1b246f	improve output ... https://github.com/Kicksecure/security-misc/issues/172	2024-02-26 08:07:29 -05:00
Patrick Schleizer	d8f5376c4f	improve output ... https://github.com/Kicksecure/security-misc/issues/172	2024-02-26 07:58:06 -05:00
Patrick Schleizer	cf84762a3a	improve output ... https://github.com/Kicksecure/security-misc/issues/172	2024-02-26 07:52:41 -05:00
Patrick Schleizer	f2958bbfa5	comment	2024-02-26 07:49:30 -05:00
Daniel Winzen	ef44ecea44	Add option to disabe /sys hardening	2024-02-22 17:27:46 +01:00
Daniel Winzen	3bc1765dbb	Allow access to /sys/fs for polkit	2024-02-22 17:27:45 +01:00
Patrick Schleizer	ad010ef5b4	debugging	2023-11-05 17:52:44 -05:00
Patrick Schleizer	3130a39d8c	set -e	2023-11-05 17:43:07 -05:00
Patrick Schleizer	36f3c30440	Merge pull request #148 from monsieuremre/module-loading-hardening ... Harden the loading of new modules to the kernel after install	2023-11-05 17:41:56 -05:00
Patrick Schleizer	4a19fbae0b	move permission-hardening to /usr/bin to make it more easily accessible	2023-11-05 15:13:01 -05:00
Patrick Schleizer	c75f80b29f	lower verbosity of permission hardener ... fixes https://github.com/Kicksecure/security-misc/issues/158	2023-11-05 15:09:29 -05:00
monsieuremre	19eceaa810	more fix	2023-11-04 20:56:46 +00:00
Patrick Schleizer	d71ac03d96	comment	2023-11-03 10:36:15 -04:00
monsieuremre	9f063584c1	disable-kernel-module-loading	2023-11-02 10:28:41 +00:00
Patrick Schleizer	a330a9fd75	refactor permission-lockdown	2023-10-26 19:20:21 -04:00
monsieuremre	91c445244c	actually we do it once indeed	2023-10-26 19:41:07 +00:00
monsieuremre	88f396264c	avoiding /etc/passwd	2023-10-26 19:35:59 +00:00
monsieuremre	b5ba03247a	readability	2023-10-26 19:31:25 +00:00
monsieuremre	f487752ba1	not limiting ourselves. we do not do this not just once.	2023-10-26 19:30:58 +00:00
monsieuremre	88cd5a905d	strip unnecessary	2023-10-26 19:25:24 +00:00
monsieuremre	d9f10c221a	new permission-lockdown	2023-10-26 18:17:50 +00:00
Patrick Schleizer	ed11c68ac6	move remount-secure to /usr/bin/remount-secure to make it easier to manually run	2023-10-22 06:51:52 -04:00
Patrick Schleizer	6f4bf57ff2	remount-secure: add support for --force; output	2023-10-22 06:48:56 -04:00
Patrick Schleizer	6dec5cb1d6	debugging	2023-10-22 06:32:19 -04:00
Patrick Schleizer	bc768aa196	output	2023-10-22 06:31:57 -04:00
Patrick Schleizer	c069c73109	refactoring	2023-10-22 06:29:38 -04:00
Patrick Schleizer	abc3592734	remount-secure: stricter error handling	2023-10-22 06:23:48 -04:00
Jeremy Rand	6ab400c9d9	mmap-rnd-bits: Fix typo in error message	2023-05-09 10:55:31 +00:00
Patrick Schleizer	0c10b3f038	output	2023-05-06 11:59:59 +00:00
Patrick Schleizer	5d4d04a2eb	output	2023-05-06 11:54:00 +00:00
Patrick Schleizer	2d465c6249	refactoring	2023-05-06 11:51:25 +00:00
Patrick Schleizer	014a28ba07	comment	2023-05-05 15:04:21 +00:00
Patrick Schleizer	ec01c1a996	minor mmap-rnd-bits improvements	2023-05-05 15:02:31 +00:00
Patrick Schleizer	3dc406f138	minor	2023-05-05 15:01:22 +00:00
Patrick Schleizer	40e940ec58	minor mmap-rnd-bits improvements	2023-05-05 14:54:24 +00:00
Patrick Schleizer	f4fd0f9012	minor mmap-rnd-bits improvements	2023-05-05 14:53:07 +00:00
Patrick Schleizer	a8e4121bef	minor mmap-rnd-bits improvements	2023-05-05 14:52:07 +00:00
Patrick Schleizer	9184e6bb92	fix	2023-05-05 14:51:19 +00:00
Patrick Schleizer	89168ef40c	minor mmap-rnd-bits improvements	2023-05-05 14:49:56 +00:00
Patrick Schleizer	d6d79e96c9	minor mmap-rnd-bits improvements	2023-05-05 14:44:29 +00:00
Jeremy Rand	48a68ba237	mmap-rnd-bits: Handle unwritable /etc/sysctl.d/	2023-04-24 23:07:40 +00:00
Jeremy Rand	434cfb427f	mmap-rnd-bits: Check that configs are valid integers	2023-04-24 23:07:40 +00:00
Jeremy Rand	76ca8a27f9	mmap-rnd-bits: Handle missing kernel config file	2023-04-24 23:07:40 +00:00
Jeremy Rand	61f63255ac	vm.mmap_rnd_bits: Fix ppc64le ... Probably fixes a bunch of other non-x86_64 arches too.	2023-04-24 23:07:39 +00:00
Raja Grewal	7a4212dd76	Update copyright	2023-03-30 17:08:47 +11:00
Patrick Schleizer	7bda2ad3e8	move ram-wipe scripts to dedicated ram-wipe package	2023-01-24 06:34:17 -05:00