Commit graph

11 commits

Author SHA1 Message Date
raja-grewal
ab98da957c
Re-set net.ipv4.conf.*.log_martians=1 2025-11-11 04:28:56 +00:00
Patrick Schleizer
0391411885
revert Force immediate kernel panic on OOM.
https://github.com/Kicksecure/security-misc/issues/324#issuecomment-3507949741
2025-11-09 05:47:00 -05:00
Aaron Rainbolt
29639fe69e
Merge remote-tracking branch 'raja/bad_ipv6_ra' into arraybolt3/trixie 2025-10-15 19:01:08 -05:00
Aaron Rainbolt
026d55ac41
Typo fixes 2025-10-15 18:30:52 -05:00
Aaron Rainbolt
35fce26476
Merge remote-tracking branch 'raja/stop_ptrace' into arraybolt3/trixie 2025-10-15 18:18:33 -05:00
raja-grewal
7161430a60
Seperate ptrace() disabling into own file 2025-10-12 02:27:48 +00:00
Patrick Schleizer
968de33c65
Force immediate kernel panic on OOM.
This is to avoid security features such as the screen locker, kloak, emerg-shutdown
from being arbitrarily terminated when the system starts running out of memory.

https://forums.whonix.org/t/screen-locker-in-security-can-we-disable-these-at-least-4-backdoors/8128/14

https://github.com/Kicksecure/security-misc/issues/324

`vm.panic_on_oom=2`

implements https://github.com/Kicksecure/security-misc/issues/324
2025-10-10 08:03:03 -04:00
raja-grewal
0c8f2f1b44
Add docs about the risks associated with IPv6 RAs 2025-10-02 07:05:00 +00:00
raja-grewal
194b8fce4e
Disable the usage of ptrace() by all processes 2025-09-28 03:20:24 +00:00
Aaron Rainbolt
2a39d5997c
security-misc split string changes 2025-09-21 16:06:11 -05:00
Patrick Schleizer
f70550d015
Split the security-misc into security-misc-shared, security-misc-desktop and security-misc-server: rename files
https://github.com/Kicksecure/security-misc/issues/187
2025-09-17 14:49:28 -04:00
Renamed from usr/lib/sysctl.d/990-security-misc.conf (Browse further)