2585 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Patrick Schleizer	597186972e	bumped changelog version	2025-01-15 15:02:44 +00:00
Patrick Schleizer	ca25716410	improve permission hardener migration code	2025-01-15 09:44:48 -05:00
Patrick Schleizer	2dfd30a44a	Merge remote-tracking branch 'ArrayBolt3/arraybolt3/more-permission-hardener'	2025-01-15 09:33:57 -05:00
Aaron Rainbolt	328f747179	Restore permission-hardener's notice about how to compare old and new states	2025-01-14 20:35:28 -06:00
Aaron Rainbolt	c6f09748f3	Handle de-corruption of new_mode a bit better	2025-01-14 20:27:53 -06:00
Aaron Rainbolt	a0f81958df	De-corrupt the new_mode permission-hardener statoverride database too	2025-01-14 19:25:15 -06:00
Aaron Rainbolt	396372c129	Avoid scanning unnecessary packages for modified permission-hardener config	2025-01-14 18:56:48 -06:00
Patrick Schleizer	a84d3ba732	bumped changelog version	2025-01-14 14:32:13 +00:00
Patrick Schleizer	709036c79f	debconf-updatepo	2025-01-14 09:31:58 -05:00
Patrick Schleizer	659c7037c6	bumped changelog version	2025-01-14 14:30:58 +00:00
Patrick Schleizer	86d3db15bf	output	2025-01-14 09:30:46 -05:00
Patrick Schleizer	876c0b6187	output	2025-01-14 09:29:35 -05:00
Patrick Schleizer	c46178dee4	output	2025-01-14 09:27:37 -05:00
Patrick Schleizer	f3c07a2451	update link	2025-01-14 09:24:06 -05:00
Patrick Schleizer	bbc4ad7c2a	bumped changelog version	2025-01-14 14:16:45 +00:00
Patrick Schleizer	9bb92e91a8	debhelper	2025-01-14 09:16:25 -05:00
Patrick Schleizer	95dd8f419f	bumped changelog version	2025-01-14 14:07:50 +00:00
Patrick Schleizer	0a2f06b456	use pre.bsh	2025-01-14 09:07:32 -05:00
Patrick Schleizer	6a4f9c1bd8	bumped changelog version	2025-01-14 14:06:50 +00:00
Patrick Schleizer	e60183ec07	output	2025-01-14 09:06:41 -05:00
Patrick Schleizer	a812961bea	verbose	2025-01-14 09:06:12 -05:00
Patrick Schleizer	0e4dfc59dd	bumped changelog version	2025-01-14 13:53:49 +00:00
Patrick Schleizer	cdf179f127	fix	2025-01-14 08:53:38 -05:00
Patrick Schleizer	41cd09933a	bumped changelog version	2025-01-14 09:26:05 +00:00
Patrick Schleizer	eec2e2c8ee	comment	2025-01-14 04:13:39 -05:00
Patrick Schleizer	6d282226ef	comment	2025-01-14 04:12:12 -05:00
Patrick Schleizer	466308e4f9	permission hardener: disable SUID for chrome-sandbox	2025-01-14 04:09:57 -05:00
Patrick Schleizer	7a5f8b87af	permission hardener: disable SUID for ssh-agent, ssh-keysign, /lib/openssh/* ... This might break SSH host-based authentication.	2025-01-14 04:06:44 -05:00
Patrick Schleizer	d89ffcde30	comment	2025-01-14 04:04:09 -05:00
Patrick Schleizer	9f1759ba0e	comment	2025-01-14 03:56:55 -05:00
Patrick Schleizer	0ac85ea9f5	comment	2025-01-14 03:54:35 -05:00
Patrick Schleizer	fce6a5f830	comment	2025-01-14 03:51:43 -05:00
Patrick Schleizer	1e99404813	comment	2025-01-14 03:50:16 -05:00
Patrick Schleizer	b198591537	comment	2025-01-14 03:49:42 -05:00
Patrick Schleizer	7d44db2cb2	usrmerge	2025-01-14 03:49:15 -05:00
Patrick Schleizer	7e7632a553	bumped changelog version	2025-01-14 08:24:05 +00:00
Patrick Schleizer	420cb3f86f	refactoring	2025-01-14 03:19:21 -05:00
Patrick Schleizer	b7e7b2767e	refactoring	2025-01-14 03:18:17 -05:00
Patrick Schleizer	b2a1a0ec9f	refactoring	2025-01-14 03:17:00 -05:00
Patrick Schleizer	69ae2d9ea0	Merge remote-tracking branch 'ArrayBolt3/arraybolt3/permission-hardener-migrate'	2025-01-14 03:15:45 -05:00
Aaron Rainbolt	de9ebabd46	Fix minor migration bugs, don't run the migration code on new image builds	2025-01-13 22:16:02 -06:00
Aaron Rainbolt	a9e87e9d30	Prevent installation failures when installing non-interactively	2025-01-12 21:13:43 -06:00
Aaron Rainbolt	5570d3e5b9	Add a forgotten set -e	2025-01-12 20:40:41 -06:00
Aaron Rainbolt	07786de039	Enable smooth migration from permission-hardener-v1 to permission-hardener-v2	2025-01-12 19:34:41 -06:00
Patrick Schleizer	de1f31e3df	bumped changelog version	2025-01-12 11:47:18 +00:00
Patrick Schleizer	b0baa8baa5	add link	2025-01-12 05:38:35 -05:00
Patrick Schleizer	d6a7cd3e0d	formatting. ... use chapter to make allow for deep linking	2025-01-12 05:36:16 -05:00
Patrick Schleizer	485d9abd1d	bumped changelog version	2025-01-10 15:34:21 +00:00
Patrick Schleizer	c17485baa1	Merge remote-tracking branch 'github-kicksecure/master'	2025-01-10 10:32:26 -05:00
Patrick Schleizer	e9ef3602dd	Merge pull request #292 from raja-grewal/cpu_table ... Add link to tabular comparison of CPU mitigations	2025-01-10 10:30:34 -05:00