2387 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Patrick Schleizer	5a255d4831	Merge remote-tracking branch 'github-kicksecure/master'	2024-09-04 10:12:34 -04:00
Patrick Schleizer	563a898013	Merge pull request #265 from raja-grewal/mmap_min_addr ... Set `sysctl vm.mmap_min_addr=65536`	2024-09-04 10:11:48 -04:00
Patrick Schleizer	d618f9f35b	Merge remote-tracking branch 'github-kicksecure/master'	2024-09-04 10:07:50 -04:00
Patrick Schleizer	175945ec9a	Merge pull request #268 from raja-grewal/panic_on_warn ... Enable `panic_on_warn=1`	2024-09-04 10:05:47 -04:00
Patrick Schleizer	b0a8544182	Merge pull request #270 from raja-grewal/typo ... Small typo	2024-09-04 10:04:45 -04:00
raja-grewal	7393ba1591	Typo	2024-09-04 23:23:24 +10:00
Patrick Schleizer	59374ce902	bumped changelog version	2024-08-29 09:49:51 +00:00
Patrick Schleizer	7e2838ec07	Merge remote-tracking branch 'github-kicksecure/master'	2024-08-29 05:06:07 -04:00
Patrick Schleizer	0762794ff6	Merge pull request #269 from raja-grewal/tidy ... Minor correction	2024-08-29 04:46:26 -04:00
Raja Grewal	6294729c8e	Follow-up on f70fe308a9	2024-08-29 15:34:24 +10:00
Raja Grewal	3101035a3f	Enable panic_on_warn=1	2024-08-29 01:57:32 +10:00
Patrick Schleizer	9c918eb431	bumped changelog version	2024-08-28 11:01:37 +00:00
Patrick Schleizer	f70fe308a9	no longer set sysctl fs.binfmt_misc.status=0 / ... no longer disallow registering interpreters for miscellaneous binary formats causing file/folder permissions issue `d????????? ? ? ? ? ? .` Firefox no longer starting (probably not not a Firefox issue) https://github.com/Kicksecure/security-misc/issues/267	2024-08-28 06:49:50 -04:00
Patrick Schleizer	463aa58f28	Merge remote-tracking branch 'github-kicksecure/master'	2024-08-28 06:42:49 -04:00
Patrick Schleizer	328840c933	Merge pull request #264 from raja-grewal/kspp_compliance ... Add KSPP compliance notices to corresponding parameters and `sysctls`	2024-08-28 06:38:57 -04:00
Raja Grewal	9e91c98cc9	Add details on BPF hardening and split the sysctls	2024-08-26 12:40:04 +10:00
Raja Grewal	2c356e8b0e	Add KSPP notice definitions	2024-08-26 11:34:12 +10:00
Raja Grewal	2841d789be	README: Update	2024-08-26 11:21:26 +10:00
Raja Grewal	ac6602ac35	Add detail on disabling user namespaces breaking UPower	2024-08-26 11:19:20 +10:00
raja-grewal	9dbd200be4	Merge branch 'Kicksecure:master' into kspp_compliance	2024-08-26 11:08:21 +10:00
Patrick Schleizer	cf824ddb24	bumped changelog version	2024-08-25 15:34:55 +00:00
Patrick Schleizer	500568e322	Merge remote-tracking branch 'github-kicksecure/master'	2024-08-25 11:01:58 -04:00
Patrick Schleizer	73900b59db	Merge pull request #263 from raja-grewal/max_user_namespaces ... Provide option to disable user namespaces	2024-08-25 11:00:51 -04:00
Patrick Schleizer	43d13b70f1	Merge remote-tracking branch 'raja/syntax'	2024-08-25 10:55:52 -04:00
Patrick Schleizer	835376418d	Merge remote-tracking branch 'raja/mod'	2024-08-25 10:48:25 -04:00
Patrick Schleizer	ae85fd5b4c	bumped changelog version	2024-08-25 14:33:40 +00:00
Raja Grewal	433b15f985	README.md: Organise sysctls	2024-08-25 09:56:53 -04:00
Raja Grewal	af87a84b4f	README.md: Organise kernel boot parameters	2024-08-25 09:56:24 -04:00
Raja Grewal	32de5e7c49	Add details on oopses and warnings	2024-08-25 12:57:22 +10:00
Raja Grewal	e4909b5e28	Add details on kernel panics	2024-08-25 12:47:04 +10:00
Raja Grewal	342caf82b2	README.md: Organise kernel boot parameters	2024-08-21 12:52:48 +10:00
Raja Grewal	b87a18d405	README.md: Organise sysctls	2024-08-21 12:51:51 +10:00
Raja Grewal	18ed77ecc9	Refactor modprobe.d to minimise potential future merge conflicts	2024-08-21 12:50:14 +10:00
Raja Grewal	56b28e3826	Typo	2024-08-19 11:50:08 +10:00
Raja Grewal	e61027a40e	Set sysctl vm.mmap_min_addr=65536	2024-08-19 11:32:20 +10:00
Raja Grewal	94dab1b7c5	Partial compliance with the KSPP on kernel panics	2024-08-19 10:53:05 +10:00
Raja Grewal	683110e7f0	Correction	2024-08-19 01:34:14 +10:00
Raja Grewal	1f51d4eeb2	Add details on user namespaces	2024-08-18 13:53:11 +10:00
Raja Grewal	248e094b8e	Include KSPP compliance notices	2024-08-17 01:06:21 +10:00
Raja Grewal	759aee8150	Provide option to disable user namespaces	2024-08-16 22:54:57 +10:00
Raja Grewal	fae586c3c5	Patch bug in existing rp_filter sysctl	2024-08-16 19:23:48 +10:00
Patrick Schleizer	e962153f84	bumped changelog version	2024-08-16 08:38:12 +00:00
Patrick Schleizer	40b12f5a2a	Merge remote-tracking branch 'github-kicksecure/master'	2024-08-16 04:30:29 -04:00
Patrick Schleizer	305467c652	Merge pull request #245 from raja-grewal/blacklist_to_disable ... Update `/etc/modprobe.d/*`	2024-08-16 04:25:43 -04:00
Patrick Schleizer	12296c68dc	Merge remote-tracking branch 'github-kicksecure/master'	2024-08-16 04:22:43 -04:00
Patrick Schleizer	036bcea4e6	Merge pull request #262 from raja-grewal/docs ... Miscellaneous updates to presentation	2024-08-16 04:20:32 -04:00
raja-grewal	81bf7a8f90	Merge branch 'Kicksecure:master' into docs	2024-08-16 16:57:01 +10:00
Patrick Schleizer	ef60c5b153	Merge pull request #249 from raja-grewal/binfmt_misc ... Disallow registering interpreters for miscellaneous binary formats	2024-08-16 02:43:57 -04:00
Raja Grewal	cea8e75378	Consistent formating	2024-08-16 14:55:22 +10:00
Raja Grewal	84376d23fc	Add details on ASLR and move to user space section	2024-08-16 13:39:11 +10:00