746 Commits

Author	SHA1	Message	Date
Patrick Schleizer	7f03c2b137	fix	2023-10-22 14:45:45 -04:00
Patrick Schleizer	c85db586ca	improve	2023-10-22 14:44:58 -04:00
Patrick Schleizer	7c0ea4324a	fix	2023-10-22 14:39:52 -04:00
Patrick Schleizer	6198ae317c	fix	2023-10-22 14:29:02 -04:00
Patrick Schleizer	245fad0986	fix	2023-10-22 14:00:06 -04:00
Patrick Schleizer	619f1705e1	output	2023-10-22 13:58:55 -04:00
Patrick Schleizer	52fa7db087	output	2023-10-22 13:57:38 -04:00
Patrick Schleizer	8a592c2e37	fix remountsecure kernel parameter logic	2023-10-22 13:56:17 -04:00
Patrick Schleizer	e689f38ad0	todo	2023-10-22 13:31:44 -04:00
Patrick Schleizer	6675a2e931	fix	2023-10-22 13:30:50 -04:00
Patrick Schleizer	4288e10554	fix, rework remount-secure kernel parameters parsing	2023-10-22 13:25:31 -04:00
Patrick Schleizer	b0181af099	fix	2023-10-22 13:12:25 -04:00
Patrick Schleizer	28cb53341d	remount-secure dracut module: improve output	2023-10-22 13:11:44 -04:00
Patrick Schleizer	84ca0ac8a0	improve remount-secure	2023-10-22 12:54:25 -04:00
Patrick Schleizer	e7d30955e8	debugging	2023-10-22 11:28:08 -04:00
Patrick Schleizer	8eb4607a0e	improve	2023-10-22 11:12:54 -04:00
Patrick Schleizer	f1da0ce746	fix	2023-10-22 11:11:10 -04:00
Patrick Schleizer	26826e8398	fix	2023-10-22 11:06:34 -04:00
Patrick Schleizer	233fa4625b	output	2023-10-22 10:49:53 -04:00
Patrick Schleizer	3ebe8cf4de	refactoring	2023-10-22 10:41:42 -04:00
Patrick Schleizer	24d2e26397	no longer reproducible	2023-10-22 10:40:19 -04:00
Patrick Schleizer	fcba70df2e	refactoring	2023-10-22 10:38:48 -04:00
Patrick Schleizer	a05bd3dd0e	/home last because most likely to fail	2023-10-22 10:37:02 -04:00
Patrick Schleizer	41077c94fb	improve remount-secure	2023-10-22 10:32:24 -04:00
Patrick Schleizer	ef69e512bd	refactoring	2023-10-22 10:25:57 -04:00
Patrick Schleizer	d5cb7ecec9	use findmnt	2023-10-22 10:22:21 -04:00
Patrick Schleizer	45ce0ff74d	debugging	2023-10-22 10:16:43 -04:00
Patrick Schleizer	b81a991731	fix	2023-10-22 10:15:11 -04:00
Patrick Schleizer	292a5c3a8a	fix	2023-10-22 10:11:31 -04:00
Patrick Schleizer	bb57b1a289	fix	2023-10-22 10:10:51 -04:00
Patrick Schleizer	181a642479	root check	2023-10-22 10:01:38 -04:00
Patrick Schleizer	84fd41931c	/var/run -> /run	2023-10-22 09:44:17 -04:00
Patrick Schleizer	33d97a2560	improve output of remount-secure dracut module	2023-10-22 09:39:54 -04:00
Patrick Schleizer	c409e3221e	implement remount-secure	2023-10-22 09:36:03 -04:00
Patrick Schleizer	90f2b5e11c	code simplification	2023-10-22 08:51:37 -04:00
Patrick Schleizer	167683ce76	code simplification	2023-10-22 08:50:57 -04:00
Patrick Schleizer	e065f85c88	add remount-secure dracut module	2023-10-22 08:10:48 -04:00
Patrick Schleizer	f0ee470ecd	comment	2023-10-22 07:51:05 -04:00
Patrick Schleizer	e257f2a380	remount-secure: ... no longer use /usr/libexec/helper-scripts/pre.bsh as not simple with dracut	2023-10-22 07:50:14 -04:00
Patrick Schleizer	ed11c68ac6	move remount-secure to /usr/bin/remount-secure to make it easier to manually run	2023-10-22 06:51:52 -04:00
Patrick Schleizer	6f4bf57ff2	remount-secure: add support for --force; output	2023-10-22 06:48:56 -04:00
Patrick Schleizer	6dec5cb1d6	debugging	2023-10-22 06:32:19 -04:00
Patrick Schleizer	bc768aa196	output	2023-10-22 06:31:57 -04:00
Patrick Schleizer	c069c73109	refactoring	2023-10-22 06:29:38 -04:00
Patrick Schleizer	abc3592734	remount-secure: stricter error handling	2023-10-22 06:23:48 -04:00
Patrick Schleizer	25760f7024	bookworm	2023-06-13 08:34:41 +00:00
Jeremy Rand	6ab400c9d9	mmap-rnd-bits: Fix typo in error message	2023-05-09 10:55:31 +00:00
Patrick Schleizer	0c10b3f038	output	2023-05-06 11:59:59 +00:00
Patrick Schleizer	5d4d04a2eb	output	2023-05-06 11:54:00 +00:00
Patrick Schleizer	2d465c6249	refactoring	2023-05-06 11:51:25 +00:00
Patrick Schleizer	014a28ba07	comment	2023-05-05 15:04:21 +00:00
Patrick Schleizer	ec01c1a996	minor mmap-rnd-bits improvements	2023-05-05 15:02:31 +00:00
Patrick Schleizer	3dc406f138	minor	2023-05-05 15:01:22 +00:00
Patrick Schleizer	40e940ec58	minor mmap-rnd-bits improvements	2023-05-05 14:54:24 +00:00
Patrick Schleizer	f4fd0f9012	minor mmap-rnd-bits improvements	2023-05-05 14:53:07 +00:00
Patrick Schleizer	a8e4121bef	minor mmap-rnd-bits improvements	2023-05-05 14:52:07 +00:00
Patrick Schleizer	9184e6bb92	fix	2023-05-05 14:51:19 +00:00
Patrick Schleizer	89168ef40c	minor mmap-rnd-bits improvements	2023-05-05 14:49:56 +00:00
Patrick Schleizer	d6d79e96c9	minor mmap-rnd-bits improvements	2023-05-05 14:44:29 +00:00
Jeremy Rand	48a68ba237	mmap-rnd-bits: Handle unwritable /etc/sysctl.d/	2023-04-24 23:07:40 +00:00
Jeremy Rand	434cfb427f	mmap-rnd-bits: Check that configs are valid integers	2023-04-24 23:07:40 +00:00
Jeremy Rand	76ca8a27f9	mmap-rnd-bits: Handle missing kernel config file	2023-04-24 23:07:40 +00:00
Jeremy Rand	61f63255ac	vm.mmap_rnd_bits: Fix ppc64le ... Probably fixes a bunch of other non-x86_64 arches too.	2023-04-24 23:07:39 +00:00
Raja Grewal	7a4212dd76	Update copyright	2023-03-30 17:08:47 +11:00
Patrick Schleizer	b87d9eb865	lintian	2023-01-24 07:08:13 -05:00
Patrick Schleizer	7bda2ad3e8	move ram-wipe scripts to dedicated ram-wipe package	2023-01-24 06:34:17 -05:00
Patrick Schleizer	d769099db1	use warn instead of info for now ... because dracut does not show info messages when kernel parameter quiet is set	2023-01-09 05:34:07 -05:00
Patrick Schleizer	f3b84e15be	refactoring	2023-01-08 07:16:18 -05:00
Patrick Schleizer	96d6ca7ae0	improve kernel and initrd file detection	2023-01-08 07:09:09 -05:00
Patrick Schleizer	8367b27a0d	output	2023-01-08 07:08:18 -05:00
Patrick Schleizer	da0fc9f5bd	improve kernel and initrd file detection	2023-01-08 07:07:43 -05:00
Patrick Schleizer	5b11eecaec	refactoring	2023-01-08 06:45:10 -05:00
Patrick Schleizer	938b87d26c	comment	2023-01-07 18:06:10 -05:00
Patrick Schleizer	0b1310a219	output	2023-01-07 18:05:47 -05:00
Patrick Schleizer	2fd302f580	output	2023-01-07 18:02:21 -05:00
Patrick Schleizer	080abe574b	output	2023-01-07 17:48:21 -05:00
Patrick Schleizer	5689c07f97	comment	2023-01-07 17:37:46 -05:00
Patrick Schleizer	8e2db269b0	cleanup	2023-01-07 17:36:51 -05:00
Patrick Schleizer	a07af63155	output	2023-01-07 17:35:56 -05:00
Patrick Schleizer	539156c0da	drop_caches	2023-01-07 17:23:25 -05:00
Patrick Schleizer	02f44459ad	DRACUT_QUIET=no	2023-01-07 17:22:45 -05:00
Patrick Schleizer	ab89d0e06e	cleanup	2023-01-07 16:59:00 -05:00
Patrick Schleizer	2e833b40a1	prevent "wait: pid 55 is not a child of this shell"	2023-01-07 16:43:09 -05:00
Patrick Schleizer	3777ecba85	comment	2023-01-07 16:34:19 -05:00
Patrick Schleizer	e0ded5e69d	comment	2023-01-07 16:34:04 -05:00
Patrick Schleizer	996c6af2d8	lower debugging	2023-01-07 16:31:23 -05:00
Patrick Schleizer	4fca8f4225	comment	2023-01-07 16:28:11 -05:00
Patrick Schleizer	2bd9cc5bc1	output	2023-01-07 16:08:12 -05:00
Patrick Schleizer	2456fed361	output	2023-01-07 16:00:42 -05:00
Patrick Schleizer	c0b5fea680	protect against wipe RAM reboot loop	2023-01-07 15:59:52 -05:00
Patrick Schleizer	91aedb234a	output	2023-01-07 15:36:36 -05:00
Patrick Schleizer	368ad8e636	cleanup	2023-01-07 15:36:05 -05:00
Patrick Schleizer	d8bf40f7a2	refactoring	2023-01-07 15:35:45 -05:00
Patrick Schleizer	166a6863a1	output	2023-01-07 15:35:15 -05:00
Patrick Schleizer	20596488be	long options	2023-01-07 15:34:20 -05:00
Patrick Schleizer	b0630f58c1	debugging	2023-01-07 15:24:05 -05:00
Patrick Schleizer	dde01f3663	long options	2023-01-07 15:23:23 -05:00
Patrick Schleizer	6e0926eece	long options	2023-01-07 15:22:58 -05:00
Patrick Schleizer	51a5f68c76	refactoring	2023-01-07 15:22:25 -05:00
Patrick Schleizer	83800fcb4f	--no-legend	2023-01-07 15:18:58 -05:00
Patrick Schleizer	822cf64618	output	2023-01-07 15:13:36 -05:00
Patrick Schleizer	bb2f0a3c44	minor	2023-01-07 15:12:15 -05:00
Patrick Schleizer	c3a822af0e	test if readable	2023-01-07 15:09:25 -05:00
Patrick Schleizer	227871c12c	output	2023-01-07 15:07:34 -05:00
Patrick Schleizer	c09f4da192	code simplification	2023-01-07 15:06:56 -05:00
Patrick Schleizer	01fee8a7b4	refactoring	2023-01-07 15:06:31 -05:00
Patrick Schleizer	f675f8da0d	quotes	2023-01-07 15:05:58 -05:00
Patrick Schleizer	d0daf75db3	quotes	2023-01-07 15:05:24 -05:00
Patrick Schleizer	8bcf7e3c23	minor	2023-01-07 15:04:57 -05:00
Patrick Schleizer	2cc3c6c59c	lower debugging	2023-01-07 15:04:42 -05:00
Patrick Schleizer	10932bb5d8	minor	2023-01-07 15:04:23 -05:00
Patrick Schleizer	c88e95ce33	output	2023-01-07 15:04:07 -05:00
Patrick Schleizer	06034d2e4f	fix	2023-01-07 15:03:06 -05:00
Patrick Schleizer	059ebb212d	comment	2023-01-07 14:35:30 -05:00
Patrick Schleizer	c0304ec029	minor	2023-01-07 14:35:09 -05:00
Patrick Schleizer	d31c17ea04	fix	2023-01-07 14:31:14 -05:00
Patrick Schleizer	41d116aa2f	lintian	2023-01-07 14:30:12 -05:00
Patrick Schleizer	e83ba18553	minor	2023-01-07 14:29:12 -05:00
Patrick Schleizer	bb121e52bb	chmod +x	2023-01-07 14:27:22 -05:00
Patrick Schleizer	d37b19fb6b	comment	2023-01-07 12:55:05 -05:00
Patrick Schleizer	0367250dc7	comment	2023-01-07 12:54:35 -05:00
Patrick Schleizer	c1df2fd601	comment	2023-01-07 12:52:14 -05:00
Patrick Schleizer	c2b20603fd	output	2023-01-07 12:49:18 -05:00
Patrick Schleizer	999a82ed94	output	2023-01-07 12:46:21 -05:00
Patrick Schleizer	2860560edb	minor	2023-01-07 12:43:07 -05:00
Friedrich Doku	b8e82fffca	Get rid of /dev/kmsg	2023-01-07 11:31:02 -05:00
Friedrich Doku	78a4fad667	Change echo to info. Included more reliable way of getting initrd and kernel. Allow user custom kexec	2023-01-07 11:14:31 -05:00
Friedrich Doku	8da3b9c40c	fix last line	2023-01-06 21:40:17 -05:00
Friedrich Doku	7cf51a1b43	Checking job queue instead of dbus	2023-01-06 21:32:57 -05:00
Friedrich Doku	4b7053a635	Update wipe-ram.sh	2023-01-06 13:53:28 -05:00
Friedrich Doku	779ad24b57	Update wipe-ram-needshutdown.sh	2023-01-06 13:53:18 -05:00
Friedrich Doku	d45ba826bc	Update module-setup.sh	2023-01-06 13:53:10 -05:00
Friedrich Doku	b3d4314a06	Update wipe-ram.sh	2023-01-06 13:52:51 -05:00
Friedrich Doku	3387725017	Update wipe-ram-needshutdown.sh	2023-01-06 13:52:42 -05:00
Friedrich Doku	ec68ee6ded	Update module-setup.sh	2023-01-06 13:52:32 -05:00
Friedrich Doku	62dcdcf764	Update cold-boot-attack-defense-kexec-prepare	2023-01-06 13:51:45 -05:00
Friedrich Doku	14abfbfccd	Update cold-boot-attack-defense-kexec-prepare	2023-01-06 13:48:03 -05:00
Friedrich Doku	37a5264696	Update wipe-ram.sh	2023-01-06 13:47:34 -05:00
Friedrich Doku	7ac45acd0f	Update wipe-ram-needshutdown.sh	2023-01-06 13:47:23 -05:00
Friedrich Doku	114a37fcd3	Update module-setup.sh	2023-01-06 13:47:14 -05:00
Friedrich Doku	1eeb32b7b9	Update wipe-ram.sh	2023-01-06 13:47:01 -05:00
Friedrich Doku	c5accc5ad1	Update wipe-ram-needshutdown.sh	2023-01-06 13:46:51 -05:00
Friedrich Doku	f9ebc3cfa8	Update module-setup.sh	2023-01-06 13:46:40 -05:00
Friedrich Doku	28687092ef	Update cold-boot-attack-defense-kexec-prepare	2023-01-06 12:52:36 -05:00
Friedrich Doku	d67d3c1d7d	Update wipe-ram.sh	2023-01-06 12:51:18 -05:00
Friedrich Doku	7fa64d6842	Update wipe-ram-needshutdown.sh	2023-01-06 12:50:58 -05:00
Friedrich Doku	14c7239681	Update module-setup.sh	2023-01-06 12:50:42 -05:00
Friedrich Doku	73913ea5af	Added checks	2023-01-06 12:49:34 -05:00
Friedrich Doku	a7015f4ddf	added files	2023-01-06 10:50:34 -05:00
Patrick Schleizer	6d7a782624	fix	2022-11-24 07:21:46 -05:00
Patrick Schleizer	421f03ae9e	fix	2022-11-24 07:20:56 -05:00
Patrick Schleizer	a806c782d7	fix	2022-11-24 07:00:23 -05:00
Patrick Schleizer	39b35ef9ac	fix	2022-11-24 06:49:15 -05:00
Patrick Schleizer	d05c101721	debugging	2022-11-24 06:31:24 -05:00
Patrick Schleizer	36454c2dbf	debugging	2022-11-24 06:25:47 -05:00
Patrick Schleizer	e06b173a1b	debugging	2022-11-24 06:24:14 -05:00
Patrick Schleizer	497b5b4544	fix	2022-11-24 06:14:04 -05:00
Patrick Schleizer	e5255a630a	pam-info: support non-root environments (such as during graphical display manager login and xscreensaver)	2022-11-22 05:57:30 -05:00
Patrick Schleizer	09e6af5c08	pam-info refactoring	2022-11-16 02:01:23 -05:00
Patrick Schleizer	caf0099064	pam-info refactoring	2022-11-16 02:00:32 -05:00
Patrick Schleizer	487f63bb01	comment	2022-11-16 01:56:01 -05:00
Patrick Schleizer	f59f959a8d	pam-info fix	2022-11-16 01:55:14 -05:00
Patrick Schleizer	ae113442a1	pam-info refactoring	2022-11-16 01:49:45 -05:00
Patrick Schleizer	bb6b509d06	pam-info refactoring	2022-11-16 01:44:21 -05:00
Patrick Schleizer	e5d7ab7082	comment	2022-11-15 12:44:12 -05:00
Patrick Schleizer	23b936b573	also support /usr/local/etc/pam-info-debug	2022-11-15 12:31:14 -05:00
Patrick Schleizer	95487346db	pam-info: create debug log file ~/pam-info-debug.txt ... when file /etc/pam-info-debug exists	2022-11-15 12:29:41 -05:00
Patrick Schleizer	2872c2ab52	comments	2022-11-15 12:00:59 -05:00
Patrick Schleizer	6033de7815	debugging	2022-11-15 11:58:50 -05:00
Patrick Schleizer	272a33fe2c	addgroup -> adduser fix	2022-08-13 11:35:25 -04:00
Patrick Schleizer	82da4ed18f	comments	2022-07-28 09:56:24 -04:00
Patrick Schleizer	a6bee1493d	cold-boot-attack-defense wait longer to make messages readable by user	2022-07-28 09:55:12 -04:00
Patrick Schleizer	053142cdb5	fix	2022-07-26 10:00:21 -04:00
Patrick Schleizer	3b844eaab2	output	2022-07-09 11:42:11 -04:00
Patrick Schleizer	73d2c9d921	output	2022-07-09 11:40:15 -04:00
Patrick Schleizer	adfdac6dea	output	2022-07-09 11:40:01 -04:00
Patrick Schleizer	1df2cfd1ad	comment	2022-07-09 11:38:37 -04:00
Patrick Schleizer	fede41e6e0	fix	2022-07-09 11:38:04 -04:00
Krish-sysadmin	e5f8004a94	Update hide-hardware-info	2022-07-05 03:37:40 +02:00
Patrick Schleizer	69af8be7b8	drop_caches before and after sdmem	2022-07-02 19:10:55 -04:00
Patrick Schleizer	67bdd58bf2	sync	2022-07-02 19:07:06 -04:00
Patrick Schleizer	973f117aa6	wipe RAM at shutdown: Ensure any remaining disk cache is erased by Linux' memory poisoning ... by running: `echo 3 > /proc/sys/vm/drop_caches` Inspired by Tails: https://gitlab.tails.boum.org/tails/tails/-/blob/master/config/chroot_local-includes/usr/local/lib/initramfs-pre-shutdown-hook	2022-07-02 18:12:36 -04:00
Patrick Schleizer	95187bd357	fix	2022-07-02 17:21:33 -04:00
Patrick Schleizer	148a050468	fix	2022-07-02 16:03:45 -04:00
Patrick Schleizer	82e7863d5b	improvement	2022-07-02 16:02:28 -04:00
Patrick Schleizer	1144b39e5e	debugging	2022-07-02 15:50:59 -04:00
Patrick Schleizer	c29b21c08a	output	2022-07-02 15:45:19 -04:00
Patrick Schleizer	d34fe21963	fix	2022-07-02 15:32:42 -04:00
Patrick Schleizer	32fdcf522b	- introduce wiperam=skip kernel parameter to skip wipe ram ... - introduce `wiperam=force` kernel parameter to force wipe ram inside VMs	2022-06-30 14:47:45 -04:00
Patrick Schleizer	036f518ddc	improvement	2022-06-30 13:56:29 -04:00
Patrick Schleizer	0e2fae2b69	skip ram wipe inside VMs ... https://forums.whonix.org/t/is-ram-wipe-possible-inside-whonix-cold-boot-attack-defense/5596/40	2022-06-30 13:50:18 -04:00
Patrick Schleizer	e06405c7be	undo	2022-06-29 16:56:16 -04:00
Patrick Schleizer	1b97d9cb76	fix	2022-06-29 16:30:31 -04:00
Patrick Schleizer	92c543e71f	output	2022-06-29 16:24:52 -04:00
Patrick Schleizer	d4161b2748	output	2022-06-29 16:23:42 -04:00
Patrick Schleizer	1ce7b27297	improvement	2022-06-29 16:23:12 -04:00
Patrick Schleizer	8b584c570a	lintian	2022-06-29 16:06:22 -04:00
Patrick Schleizer	f5e0c1742a	credits	2022-06-29 16:02:05 -04:00
Patrick Schleizer	42e24f3c24	update file names	2022-06-29 15:54:49 -04:00
Patrick Schleizer	52aaac9b6d	rename	2022-06-29 15:53:52 -04:00