222 Commits

Author	SHA1	Message	Date
Patrick Schleizer	ff9bc1d7ea	informational output during PAM: ... * Show failed and remaining password attempts. * Document unlock procedure if Linux user account got locked. * Point out, that there is no password feedback for `su`. * Explain locked (root) account if locked. * /usr/share/pam-configs/tally2-security-misc * /usr/lib/security-misc/pam_tally2-info	2019-08-15 13:37:28 +00:00
Patrick Schleizer	ce4a30d3ce	bumped changelog version	2019-08-14 11:52:26 +00:00
Patrick Schleizer	a7c25a451c	remove unneeded dependency on libpam-cgfs	2019-08-14 11:50:53 +00:00
Patrick Schleizer	633854c6be	bumped changelog version	2019-08-14 11:13:25 +00:00
Patrick Schleizer	0feb54b28e	add Depends: apparmor-profile-anondist to fix apparmor issue ... sudo[19806]: pam_exec(sudo:session): execve(/usr/lib/security-misc/permission-lockdown,...) failed: Permission denied sudo[18961]: pam_exec(sudo:session): /usr/lib/security-misc/permission-lockdown failed: exit code 13 kernel: audit: type=1400 audit(1565780860.972:224): apparmor="DENIED" operation="exec" profile="/usr/bin/whonixcheck" name="/usr/lib/security-misc/permission-lockdown" pid=19806 comm="sudo" requested_mask="x" denied_mask="x" fsuid=0 ouid=0	2019-08-14 11:10:18 +00:00
Patrick Schleizer	5213cfbcdc	bumped changelog version	2019-08-14 10:08:18 +00:00
Patrick Schleizer	01b3a0bfae	description	2019-08-14 09:52:53 +00:00
Patrick Schleizer	dee195d89e	description	2019-08-14 09:40:41 +00:00
Patrick Schleizer	21489111d1	run permission lockdown during pam ... https://forums.whonix.org/t/change-default-umask/7416	2019-08-14 08:34:03 +00:00
Patrick Schleizer	42f2d5f666	description	2019-08-14 07:39:28 +00:00
Patrick Schleizer	f210294f40	description	2019-08-14 07:24:24 +00:00
Patrick Schleizer	f1d8cbc9fb	bumped changelog version	2019-08-14 07:02:09 +00:00
Patrick Schleizer	a82448d46a	description	2019-08-14 07:01:25 +00:00
Patrick Schleizer	6f8acf06d7	bumped changelog version	2019-08-11 12:07:07 +00:00
Patrick Schleizer	aacd9c7679	description	2019-08-11 10:34:38 +00:00
Patrick Schleizer	c0b5c70de4	description	2019-08-11 10:33:22 +00:00
Patrick Schleizer	75769151cd	bumped changelog version	2019-08-10 11:37:02 +00:00
Patrick Schleizer	a703865dcf	bumped changelog version	2019-08-01 12:02:41 +00:00
Patrick Schleizer	5d0aec1321	bumped changelog version	2019-07-31 19:12:27 +00:00
madaidan	4a6f87f3fa	Update control	2019-07-31 18:33:28 +00:00
Patrick Schleizer	864de10659	bumped changelog version	2019-07-31 15:17:51 +00:00
Patrick Schleizer	c09fb208d1	bumped changelog version	2019-07-31 07:44:50 +00:00
Patrick Schleizer	ac1220e14b	depend on sudo so group sudo exists during postinst	2019-07-31 07:32:59 +00:00
Patrick Schleizer	09f75fb1ff	description	2019-07-31 07:32:36 +00:00
Patrick Schleizer	2ad087dcd9	description	2019-07-31 07:30:40 +00:00
Patrick Schleizer	404f597c0a	description	2019-07-31 07:29:42 +00:00
Patrick Schleizer	c921872016	description	2019-07-31 07:27:13 +00:00
Patrick Schleizer	39e1b1c5f0	update file path	2019-07-31 07:26:25 +00:00
Patrick Schleizer	031a1c8751	bumped changelog version	2019-07-22 01:16:18 +00:00
Patrick Schleizer	8c538ba318	bumped changelog version	2019-07-17 21:38:26 +00:00
Patrick Schleizer	940054d53f	bumped changelog version	2019-07-17 21:08:23 +00:00
Patrick Schleizer	c0a4a10d6b	description	2019-07-17 21:05:11 +00:00
Patrick Schleizer	7352b2ac31	description	2019-07-17 21:03:54 +00:00
Patrick Schleizer	4bf2360b95	description	2019-07-17 21:02:27 +00:00
Patrick Schleizer	9f2e300e72	description	2019-07-17 20:48:33 +00:00
Patrick Schleizer	d044780c04	description	2019-07-17 20:42:14 +00:00
Patrick Schleizer	75e5714d18	description	2019-07-17 20:40:01 +00:00
Patrick Schleizer	8c2f983578	description	2019-07-17 20:39:42 +00:00
Patrick Schleizer	50036b2934	bumped changelog version	2019-07-17 19:13:57 +00:00
Patrick Schleizer	1b772c6a9a	bumped changelog version	2019-07-16 19:45:52 +00:00
Patrick Schleizer	2499ae0890	description	2019-07-16 07:28:50 -04:00
Patrick Schleizer	d0124b24d1	description	2019-07-16 07:27:56 -04:00
Patrick Schleizer	4b604bbb24	bumped changelog version	2019-07-15 13:26:47 +00:00
Patrick Schleizer	5c741d2149	shuffle	2019-07-15 13:02:30 +00:00
Patrick Schleizer	d247b7534b	sort description by categories	2019-07-15 13:01:46 +00:00
Patrick Schleizer	168ea5a660	shuffle	2019-07-15 08:48:17 -04:00
Patrick Schleizer	1731196c9f	bumped changelog version	2019-07-13 18:51:32 +00:00
Patrick Schleizer	7afddb028f	bumped changelog version	2019-07-13 16:30:39 +00:00
Patrick Schleizer	ea90f95f1c	cleanup	2019-07-13 16:26:40 +00:00
Patrick Schleizer	ea8b22ee78	shuffle	2019-07-13 16:26:14 +00:00
Patrick Schleizer	ca7e0e0161	description	2019-07-13 16:25:08 +00:00
Patrick Schleizer	ffb5a9c482	formatting	2019-07-13 16:23:39 +00:00
Patrick Schleizer	41675ddcff	removed: The amount of hashing rounds used by shadow is bumped to 65536. ... This increases the security of hashed passwords. Since we do not do that currently. https://forums.whonix.org/t/restrict-root-access/7658/37	2019-07-13 16:21:34 +00:00
Patrick Schleizer	3f031a297d	Removes read, write and execute access for others for all users who have home ... folders under folder /home by running for example "chmod o-rwx /home/user" during package installation or upgrade. This will be done only once per folder in folder /home so users who wish to relax file permissions are free to do so. This is to protect previously created files in user home folder which were previously created with lax file permissions prior installation of this package.	2019-07-13 16:20:14 +00:00
Patrick Schleizer	4740e8b335	cleanup	2019-07-13 16:13:55 +00:00
Patrick Schleizer	834fcc4671	bumped changelog version	2019-07-13 15:17:16 +00:00
Patrick Schleizer	e2b6268702	bumped changelog version	2019-07-13 14:58:47 +00:00
Patrick Schleizer	1d8a0dbec7	remove no longer shipped files in etc/pam.d/*	2019-07-13 14:57:51 +00:00
Patrick Schleizer	8e5d45352e	bumped changelog version	2019-07-13 14:55:31 +00:00
Patrick Schleizer	4079632d1a	remove modifying to /etc/pam.d directly (unrelased) ... config-package-dev displace /etc/securetty remove trailing spaces https://forums.whonix.org/t/restrict-root-access/7658/31	2019-07-13 11:41:37 +00:00
Patrick Schleizer	cdb7c6f7eb	bumped changelog version	2019-07-11 18:28:04 +00:00
Patrick Schleizer	aee6b34635	fix lintian warning	2019-07-11 18:26:17 +00:00
madaidan	1aee08fa5e	Update control	2019-07-11 15:30:09 +00:00
madaidan	853c2eb377	Update control	2019-07-11 15:26:14 +00:00
Patrick Schleizer	f5356cee2c	bumped changelog version	2019-07-11 07:16:38 +00:00
Patrick Schleizer	0057c0dd8c	fix lintian warning	2019-07-11 07:07:01 +00:00
madaidan	1e4d349516	Update control	2019-07-10 14:28:39 +00:00
madaidan	a8b44c75f9	Update control	2019-07-09 21:57:07 +00:00
Patrick Schleizer	0f15303eb4	Merge branch 'master' into patch-16	2019-07-09 10:54:24 +00:00
madaidan	24b326d906	Update control	2019-07-08 23:24:41 +00:00
madaidan	45f8102d56	Update control	2019-07-08 23:04:47 +00:00
Patrick Schleizer	50c00fcfa1	bumped changelog version	2019-07-08 00:23:52 +00:00
Patrick Schleizer	223b691833	add 'Depends: libpam-cgfs' ... https://forums.whonix.org/t/change-default-umask/7416/30?u=patrick	2019-07-07 23:39:58 +00:00
Patrick Schleizer	d31a16f264	bumped changelog version	2019-07-07 23:00:27 +00:00
Patrick Schleizer	673aab6bc2	shut up pam-auth-update	2019-07-07 22:18:47 +00:00
Patrick Schleizer	67ff83262b	move to pam-auth-update --force ... --package hangs in Qubes updater since it starts whiptail for interactive dpkg configuration dialog.	2019-07-07 21:31:56 +00:00
Patrick Schleizer	8399a11367	bumped changelog version	2019-07-07 21:11:08 +00:00
Patrick Schleizer	d4c79cce69	add "Depends: libpam-runtime" so pam-auth-update is available ... for Debian maintainer script	2019-07-07 21:09:26 +00:00
Patrick Schleizer	f68b96241c	comment	2019-07-07 21:08:28 +00:00
Patrick Schleizer	91fb21aafb	Due to error: ... Jul 07 20:35:39 host sudo[16090]: PAM unable to dlopen(pam_cgfs.so): /lib/security/pam_cgfs.so: cannot open shared object file: No such file or directory Jul 07 20:35:39 host sudo[16090]: PAM adding faulty module: pam_cgfs.so run: pam-auth-update --package from Debian maintainer scripts	2019-07-07 16:51:40 -04:00
Patrick Schleizer	8f4a5f33b9	bumped changelog version	2019-07-07 09:39:12 +00:00
Patrick Schleizer	93e81b4330	bumped changelog version	2019-07-06 13:56:28 +00:00
Patrick Schleizer	3cd1a5ec09	fix lintian warning	2019-07-06 13:56:00 +00:00
Patrick Schleizer	b73cdfd7cc	bumped changelog version	2019-07-06 13:53:10 +00:00
madaidan	8888147e1e	Update control	2019-07-04 14:26:31 +00:00
Patrick Schleizer	6df7b3c295	bumped changelog version	2019-07-01 15:23:49 +00:00
Patrick Schleizer	81b38529d9	add copyright for files in etc/pam.d/*	2019-07-01 13:58:20 +00:00
Patrick Schleizer	552b6edbed	fix machine readable copyright format	2019-07-01 13:51:00 +00:00
Patrick Schleizer	a05264934b	add copyright for etc/login.defs.security-misc	2019-07-01 13:46:01 +00:00
Patrick Schleizer	48e511347c	fix lintian warning	2019-07-01 13:37:55 +00:00
Patrick Schleizer	93c0821054	config-package-dev displace files for change umask ... https://forums.whonix.org/t/change-default-umask/7416	2019-07-01 13:35:45 +00:00
madaidan	cfaafe400c	Update control	2019-06-30 13:16:12 +00:00
Patrick Schleizer	f26ad14d4c	bumped changelog version	2019-06-30 07:21:58 -04:00
Patrick Schleizer	f3a4800987	bumped changelog version	2019-06-30 08:23:51 +00:00
Patrick Schleizer	85f61758c5	fix package description	2019-06-30 04:11:38 -04:00
Patrick Schleizer	67de5247c8	Merge branch 'master' into patch-13	2019-06-30 08:10:04 +00:00
madaidan	dbfb9e1cdf	Update control	2019-06-30 00:21:46 +00:00
madaidan	024a698249	Update control	2019-06-30 00:20:38 +00:00
madaidan	22267c895b	Update control	2019-06-29 22:30:41 +00:00
Patrick Schleizer	24b19c5976	bumped changelog version	2019-06-29 10:35:13 +00:00