1989 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
monsieuremre	c975c3c0ff	new lines 990-security-misc.conf ... added new recommended hardening settings with comments	2023-10-27 11:07:53 +00:00
monsieuremre	f2c23a2831	ssh config	2023-10-27 10:53:45 +00:00
Patrick Schleizer	7d576842fb	bumped changelog version	2023-10-26 20:08:41 -04:00
Patrick Schleizer	7cff267002	remove duplicates	2023-10-26 19:31:14 -04:00
Patrick Schleizer	928cdb81d4	Merge remote-tracking branch 'github-kicksecure/master'	2023-10-26 19:29:55 -04:00
Patrick Schleizer	39fed058f4	Merge pull request #140 from monsieuremre/patch-3 ... New lines in default permission config	2023-10-26 19:27:41 -04:00
Patrick Schleizer	a330a9fd75	refactor permission-lockdown	2023-10-26 19:20:21 -04:00
Patrick Schleizer	8bf5ff82be	Merge remote-tracking branch 'github-kicksecure/master'	2023-10-26 19:15:04 -04:00
Patrick Schleizer	92a6ecc40a	Merge pull request #141 from monsieuremre/patch-4 ... New permission-lockdown	2023-10-26 19:13:34 -04:00
Patrick Schleizer	1123d23114	remount-secure: disable debugging to save space in initrd	2023-10-26 18:45:07 -04:00
monsieuremre	91c445244c	actually we do it once indeed	2023-10-26 19:41:07 +00:00
monsieuremre	88f396264c	avoiding /etc/passwd	2023-10-26 19:35:59 +00:00
monsieuremre	b5ba03247a	readability	2023-10-26 19:31:25 +00:00
monsieuremre	f487752ba1	not limiting ourselves. we do not do this not just once.	2023-10-26 19:30:58 +00:00
monsieuremre	88cd5a905d	strip unnecessary	2023-10-26 19:25:24 +00:00
monsieuremre	d9f10c221a	new permission-lockdown	2023-10-26 18:17:50 +00:00
monsieuremre	99355c6169	new lines 30_default.conf	2023-10-26 17:45:28 +00:00
Patrick Schleizer	ca9603af17	bumped changelog version	2023-10-26 12:23:48 -04:00
Patrick Schleizer	5f4222c1c3	enable SUID Disabler and Permission Hardener by default ... https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener https://forums.whonix.org/t/suid-disabler-and-permission-hardener/7706	2023-10-26 12:20:48 -04:00
Patrick Schleizer	e5d989af5a	comment	2023-10-26 12:04:13 -04:00
Patrick Schleizer	8557e0963e	bumped changelog version	2023-10-25 17:55:37 -04:00
Patrick Schleizer	b7e2d49f5f	comment	2023-10-25 17:41:05 -04:00
Patrick Schleizer	5d71217e59	Merge remote-tracking branch 'github-kicksecure/master'	2023-10-25 17:40:13 -04:00
Patrick Schleizer	6a22351d29	renamed: usr/lib/sysctl.d/30_security-misc.conf -> usr/lib/sysctl.d/990-security-misc.conf	2023-10-25 17:30:07 -04:00
Patrick Schleizer	b7c52800f4	renamed: etc/sysctl.d/30_security-misc.conf -> usr/lib/sysctl.d/30_security-misc.conf ... renamed: etc/sysctl.d/30_security-misc_kexec-disable.conf -> usr/lib/sysctl.d/30_security-misc_kexec-disable.conf renamed: etc/sysctl.d/30_silent-kernel-printk.conf -> usr/lib/sysctl.d/30_silent-kernel-printk.conf	2023-10-25 17:28:43 -04:00
Patrick Schleizer	a2f811aff0	Merge pull request #135 from monsieuremre/kernel-fix ... Kernel hardening fix	2023-10-25 17:26:46 -04:00
monsieuremre	ee6716e178	security-misc.maintscript	2023-10-24 20:43:10 +00:00
Patrick Schleizer	3317332cb4	bumped changelog version	2023-10-24 05:51:11 -04:00
Patrick Schleizer	42c802cd1e	Merge remote-tracking branch 'github-kicksecure/master'	2023-10-24 05:30:15 -04:00
Patrick Schleizer	5320c11f3f	Merge pull request #134 from monsieuremre/patch-1 ... Fix double mount issue for /var/log and /var/tmp	2023-10-24 05:22:33 -04:00
monsieuremre	1f489719ef	rename	2023-10-23 16:38:58 +00:00
monsieuremre	9dda6f69a7	more rename	2023-10-23 16:38:40 +00:00
monsieuremre	89381fe7ab	rename	2023-10-23 16:38:23 +00:00
monsieuremre	f0857fd560	Fix double mount issue for /var/log and /var/tmp ... Mounting var with bind and mounting a subdirectory causes /var/tmp and /var/log bind mounted twice each. can be checked with lsblk. When we bind mount var only after having mounted the subdirectories, everything is mounted only one.	2023-10-23 15:33:05 +00:00
Patrick Schleizer	f3b40f12cb	bumped changelog version	2023-10-22 19:23:22 -04:00
Patrick Schleizer	d2e8a6dad3	debugging	2023-10-22 19:21:51 -04:00
Patrick Schleizer	e7aafd64d4	refactoring	2023-10-22 19:16:12 -04:00
Patrick Schleizer	ee15f749bb	bumped changelog version	2023-10-22 16:54:58 -04:00
Patrick Schleizer	d521662d04	comment	2023-10-22 16:49:36 -04:00
Patrick Schleizer	0e80acf38d	fix	2023-10-22 16:45:10 -04:00
Patrick Schleizer	a1c3b87fce	bumped changelog version	2023-10-22 16:29:08 -04:00
Patrick Schleizer	f6d1346e2b	fix	2023-10-22 16:22:08 -04:00
Patrick Schleizer	9a649ddd09	bumped changelog version	2023-10-22 16:16:40 -04:00
Patrick Schleizer	11382881b5	comments	2023-10-22 16:12:26 -04:00
Patrick Schleizer	5182d7502b	improve remount-secure	2023-10-22 16:08:21 -04:00
Patrick Schleizer	555d83792d	bumped changelog version	2023-10-22 15:44:47 -04:00
Patrick Schleizer	a88c0a3ad2	fix	2023-10-22 15:44:30 -04:00
Patrick Schleizer	316282952f	bumped changelog version	2023-10-22 15:40:59 -04:00
Patrick Schleizer	a7629b98cf	fix	2023-10-22 15:40:49 -04:00
Patrick Schleizer	7112eac3be	output	2023-10-22 15:37:21 -04:00