Patrick Schleizer
|
3ebe8cf4de
|
refactoring
|
2023-10-22 10:41:42 -04:00 |
|
Patrick Schleizer
|
24d2e26397
|
no longer reproducible
|
2023-10-22 10:40:19 -04:00 |
|
Patrick Schleizer
|
fcba70df2e
|
refactoring
|
2023-10-22 10:38:48 -04:00 |
|
Patrick Schleizer
|
a05bd3dd0e
|
/home last because most likely to fail
|
2023-10-22 10:37:02 -04:00 |
|
Patrick Schleizer
|
41077c94fb
|
improve remount-secure
|
2023-10-22 10:32:24 -04:00 |
|
Patrick Schleizer
|
ef69e512bd
|
refactoring
|
2023-10-22 10:25:57 -04:00 |
|
Patrick Schleizer
|
d5cb7ecec9
|
use findmnt
|
2023-10-22 10:22:21 -04:00 |
|
Patrick Schleizer
|
45ce0ff74d
|
debugging
|
2023-10-22 10:16:43 -04:00 |
|
Patrick Schleizer
|
292a5c3a8a
|
fix
|
2023-10-22 10:11:31 -04:00 |
|
Patrick Schleizer
|
181a642479
|
root check
|
2023-10-22 10:01:38 -04:00 |
|
Patrick Schleizer
|
84fd41931c
|
/var/run -> /run
|
2023-10-22 09:44:17 -04:00 |
|
Patrick Schleizer
|
c409e3221e
|
implement remount-secure
|
2023-10-22 09:36:03 -04:00 |
|
Patrick Schleizer
|
167683ce76
|
code simplification
|
2023-10-22 08:50:57 -04:00 |
|
Patrick Schleizer
|
f0ee470ecd
|
comment
|
2023-10-22 07:51:05 -04:00 |
|
Patrick Schleizer
|
e257f2a380
|
remount-secure:
no longer use /usr/libexec/helper-scripts/pre.bsh as not simple with dracut
|
2023-10-22 07:50:14 -04:00 |
|
Patrick Schleizer
|
ed11c68ac6
|
move remount-secure to /usr/bin/remount-secure to make it easier to manually run
|
2023-10-22 06:51:52 -04:00 |
|
Raja Grewal
|
7a4212dd76
|
Update copyright
|
2023-03-30 17:08:47 +11:00 |
|
Patrick Schleizer
|
6d7a782624
|
fix
|
2022-11-24 07:21:46 -05:00 |
|
Patrick Schleizer
|
39b35ef9ac
|
fix
|
2022-11-24 06:49:15 -05:00 |
|
Patrick Schleizer
|
d05c101721
|
debugging
|
2022-11-24 06:31:24 -05:00 |
|
Patrick Schleizer
|
36454c2dbf
|
debugging
|
2022-11-24 06:25:47 -05:00 |
|
Patrick Schleizer
|
e06b173a1b
|
debugging
|
2022-11-24 06:24:14 -05:00 |
|
Patrick Schleizer
|
497b5b4544
|
fix
|
2022-11-24 06:14:04 -05:00 |
|
Patrick Schleizer
|
e5255a630a
|
pam-info: support non-root environments (such as during graphical display manager login and xscreensaver)
|
2022-11-22 05:57:30 -05:00 |
|
Patrick Schleizer
|
eb8535fe87
|
renamed: usr/bin/disabled-by-security-misc -> bin/disabled-by-security-misc
|
2022-07-07 15:48:39 -04:00 |
|
Raja Grewal
|
780dc8eec9
|
replace /bin/false -> /bin/disabled-by-security-misc
|
2022-07-08 04:11:25 +10:00 |
|
Patrick Schleizer
|
2d37e3a1af
|
copyright
|
2022-05-20 14:46:38 -04:00 |
|
Patrick Schleizer
|
50bdd097df
|
move /usr/lib/security-misc to /usr/libexec/security-misc as per lintian FHS
|
2021-08-03 12:56:31 -04:00 |
|
Patrick Schleizer
|
a67007f4b7
|
copyright
|
2021-03-17 09:45:21 -04:00 |
|
Patrick Schleizer
|
2ceea8d1fe
|
update copyright year
|
2020-04-01 08:49:59 -04:00 |
|
Patrick Schleizer
|
649ec5dfa1
|
pkexec wrapper: fix gdebi / synaptic
but at cost of checking for passwordless sudo /etc/suders /etc/sudoers.d
exceptions.
http://forums.whonix.org/t/cannot-use-pkexec/8129/53
|
2020-02-29 04:59:56 -05:00 |
|
Patrick Schleizer
|
80159545a5
|
fix xfce4-power-manager xfpm-power-backlight-helper pkexec lxsudo popup
https://forums.whonix.org/t/xfce4-power-manager-xfpm-power-backlight-helper-pkexec-lxsudo-popup/8764
do show lxqt-sudo password prompt if there is a sudoers exceptoin
improved pkexec wrapper logging
|
2020-01-15 02:42:10 -05:00 |
|
Patrick Schleizer
|
d90ca4b1ad
|
refactoring
|
2020-01-14 15:12:13 -05:00 |
|
Patrick Schleizer
|
082f04f2d4
|
add logging to pkexec wrapper
|
2020-01-14 15:04:58 -05:00 |
|
Patrick Schleizer
|
6dd6530fa5
|
remove hardening-enable
please invent package security-paranoid instead
https://forums.whonix.org/t/security-hardening-tool-usr-bin-hardening-enable-by-security-misc/8609
|
2019-12-20 05:32:26 -05:00 |
|
Patrick Schleizer
|
ac96708b24
|
improve usr/bin/hardening-enable
|
2019-12-08 04:01:11 -05:00 |
|
Patrick Schleizer
|
1dbca1ea2d
|
add usr/bin/hardening-enable
|
2019-12-08 02:27:09 -05:00 |
|
Patrick Schleizer
|
bce5274a15
|
quotes fix
|
2019-10-22 09:22:29 -04:00 |
|
Patrick Schleizer
|
e20b9e2133
|
better solution when using pkexec with --user: wrap sudo --user with lxqt-sudo
|
2019-10-22 09:08:18 -04:00 |
|
Patrick Schleizer
|
d4e02de43a
|
set SUDO_ASKPASS for pkexec wrapper when using sudo --askpass
|
2019-10-22 09:04:44 -04:00 |
|
Patrick Schleizer
|
1a65a91039
|
long rather than short option
|
2019-10-22 08:56:05 -04:00 |
|
Patrick Schleizer
|
b55913637b
|
silence output by mount/grep
|
2019-10-22 08:54:48 -04:00 |
|
Patrick Schleizer
|
a1154170c9
|
Call original pkexec in case there are no arguments.
|
2019-10-22 08:54:17 -04:00 |
|
Patrick Schleizer
|
40707e70db
|
Redirect calls for pkexec to lxqt-sudo because pkexec is incompatible with hidepid.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860040
https://forums.whonix.org/t/cannot-use-pkexec/8129
Thanks to AnonymousUser for the bug report!
|
2019-10-21 05:46:49 -04:00 |
|