2204 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
raja-grewal	0c031a29d3	RFDS mitigation on Intel Atom CPUs (including E-cores)	2024-05-01 13:55:09 +10:00
raja-grewal	1122b3402c	GDS mitigation for CPUs	2024-05-01 13:50:42 +10:00
raja-grewal	c002bd62e8	Clarify use of mitigations=auto	2024-05-01 13:49:34 +10:00
raja-grewal	d89d7e8ef8	Add reference for RETBleed	2024-05-01 13:49:00 +10:00
raja-grewal	015dcc4212	Add reference for SSB	2024-05-01 13:48:13 +10:00
raja-grewal	de4f4be947	Merge spectre mitigations	2024-05-01 13:47:40 +10:00
raja-grewal	965c8641fd	Update BHI mitigation reference	2024-05-01 13:47:02 +10:00
Patrick Schleizer	a9886a3119	bumped changelog version	2024-04-12 06:56:39 +00:00
Patrick Schleizer	5cbdf3c126	Merge remote-tracking branch 'github-kicksecure/master'	2024-04-12 02:54:17 -04:00
Patrick Schleizer	ab8b6da484	Merge pull request #216 from raja-grewal/spectre_bhi ... BHI mitigation on Intel CPUs	2024-04-12 02:53:08 -04:00
raja-grewal	493576836c	BHI mitigation on Intel CPUs	2024-04-12 00:17:06 +10:00
Patrick Schleizer	7fba04d148	bumped changelog version	2024-04-01 06:56:45 +00:00
Patrick Schleizer	7dba3fb7be	no longer disable MSR by default ... fixes https://github.com/Kicksecure/security-misc/issues/215	2024-04-01 02:56:27 -04:00
Patrick Schleizer	d9ac01ba5c	bumped changelog version	2024-03-18 15:10:10 +00:00
Patrick Schleizer	ecaa024f22	lower debugging	2024-03-18 11:01:56 -04:00
Patrick Schleizer	357ea5deab	bumped changelog version	2024-03-11 15:07:50 +00:00
Patrick Schleizer	0a018bdebc	Merge remote-tracking branch 'github-kicksecure/master'	2024-03-11 10:13:57 -04:00
Patrick Schleizer	0b81316300	Merge pull request #211 from wryMitts/patch-1 ... Create proc group on install	2024-03-11 10:12:46 -04:00
wryMitts	03ed546cd8	Create proc group on install ... Fixes https://github.com/Kicksecure/security-misc/issues/210	2024-03-10 16:55:10 -04:00
Patrick Schleizer	57fc487e5e	bumped changelog version	2024-03-10 13:19:26 +00:00
Patrick Schleizer	a5206bde33	proc-hidepid.service add gid=proc ... This allows users that are a member of the `proc` group to be excluded from `hidepid` protections. https://github.com/Kicksecure/security-misc/issues/208	2024-03-10 08:44:53 -04:00
Patrick Schleizer	0f0d9ca2a4	bumped changelog version	2024-03-04 11:48:30 +00:00
Patrick Schleizer	6b76373395	fix panic-on-oops started every 10s in Qubes-Whonix ... by changing from a /etc/profile.d etc. related mechanism to start to a systemd unit file based approach Thanks to @marmarek for the bug report! https://forums.whonix.org/t/panic-on-oops-started-every-10s/19450	2024-03-04 06:44:26 -05:00
Patrick Schleizer	af6c6971a7	comment	2024-03-04 06:33:51 -05:00
Patrick Schleizer	e013070e0b	newline	2024-03-04 06:33:21 -05:00
Patrick Schleizer	a5cc1774f2	bumped changelog version	2024-02-26 13:32:44 +00:00
Patrick Schleizer	808e72f24b	use long options ... https://github.com/Kicksecure/security-misc/issues/172	2024-02-26 08:11:26 -05:00
Patrick Schleizer	2d1d1b246f	improve output ... https://github.com/Kicksecure/security-misc/issues/172	2024-02-26 08:07:29 -05:00
Patrick Schleizer	d8f5376c4f	improve output ... https://github.com/Kicksecure/security-misc/issues/172	2024-02-26 07:58:06 -05:00
Patrick Schleizer	cf84762a3a	improve output ... https://github.com/Kicksecure/security-misc/issues/172	2024-02-26 07:52:41 -05:00
Patrick Schleizer	f2958bbfa5	comment	2024-02-26 07:49:30 -05:00
Patrick Schleizer	bc8f9edc31	Merge remote-tracking branch 'github-kicksecure/master'	2024-02-26 07:48:19 -05:00
Patrick Schleizer	b23d167342	Merge pull request #204 from DanWin/sysfs-mount ... Make /sys hardening optional and allow access to /sys/fs to make polkit work	2024-02-26 07:46:02 -05:00
Patrick Schleizer	02d6f67741	bumped changelog version	2024-02-22 20:08:17 +00:00
Patrick Schleizer	d13d1aa7ec	comments	2024-02-22 15:07:53 -05:00
Patrick Schleizer	a1f898e3b3	bumped changelog version	2024-02-22 19:58:01 +00:00
Patrick Schleizer	c3dd178b19	output	2024-02-22 14:57:50 -05:00
Daniel Winzen	ef44ecea44	Add option to disabe /sys hardening	2024-02-22 17:27:46 +01:00
Daniel Winzen	3bc1765dbb	Allow access to /sys/fs for polkit	2024-02-22 17:27:45 +01:00
Patrick Schleizer	6b73e6c2a9	bumped changelog version	2024-02-22 16:07:16 +00:00
Patrick Schleizer	37a7abdf0c	ConditionKernelCommandLine=!remountsecure=0	2024-02-22 11:07:01 -05:00
Patrick Schleizer	eb3e0b9292	bumped changelog version	2024-02-22 14:52:55 +00:00
Patrick Schleizer	c0924321b8	fix systemd unit ExecStart	2024-02-22 09:52:36 -05:00
Patrick Schleizer	d148a769b7	bumped changelog version	2024-02-22 14:50:05 +00:00
Patrick Schleizer	6d7cf3c12a	output	2024-02-22 09:49:48 -05:00
Patrick Schleizer	f7831db197	do not exit non-zero if folder does not exist	2024-02-22 09:17:41 -05:00
Patrick Schleizer	5bdd7b8475	output	2024-02-22 09:14:52 -05:00
Patrick Schleizer	44a15cd97d	mount --make-private ... https://github.com/Kicksecure/security-misc/issues/172	2024-02-22 09:13:56 -05:00
Patrick Schleizer	c0f98b05b6	comment ... https://github.com/Kicksecure/security-misc/pull/202	2024-02-22 06:03:59 -05:00
Patrick Schleizer	1e1613aa93	allow /opt exec as usually optional binaries are placed there such as firefox ... https://github.com/Kicksecure/security-misc/pull/202	2024-02-22 06:02:28 -05:00