Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-10-01 08:25:45 -04:00
Code Issues Packages Projects Releases Wiki Activity
2,387 Commits 2 Branches 291 Tags 8.2 MiB
5a255d4831
Commit Graph

2387 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Patrick Schleizer
0f86fbd8ce
Merge pull request #242 from raja-grewal/ptrace 
Disable the usage of `ptrace()` by all processes
 2024-07-28 15:43:54 -04:00
Raja Grewal
9cabaa1bd1
Typo 2024-07-28 22:04:30 +10:00
Raja Grewal
d2d024ebe9
Typo 2024-07-28 22:03:33 +10:00
Raja Grewal
9fbee9fc82
Clarify 2024-07-28 21:57:25 +10:00
Patrick Schleizer
e60ce50d30
bumped changelog version 2024-07-27 16:13:35 +00:00
Patrick Schleizer
e86b2e7f8f
output 2024-07-27 12:13:18 -04:00
Raja Grewal
1445457626
Show details regarding secure_redirects (again) 2024-07-27 14:00:30 +10:00
Raja Grewal
73979d4342
Link to ptrace() discussion 2024-07-27 13:28:59 +10:00
Raja Grewal
1c9f33f906
Revert "Disable the usage of ptrace() by all processes" 
This reverts commit b04828f858.
 2024-07-27 13:24:08 +10:00
Patrick Schleizer
330cf14eab
bumped changelog version 2024-07-26 15:40:24 +00:00
Patrick Schleizer
62bb4bc626
Merge remote-tracking branch 'github-kicksecure/master' 2024-07-26 11:10:25 -04:00
Patrick Schleizer
886f6095db
Merge pull request #250 from raja-grewal/Panik-Kalm 
Add details on "oopes" and kernel panics
 2024-07-26 11:08:30 -04:00
Patrick Schleizer
7969e86071
Merge remote-tracking branch 'github-kicksecure/master' 2024-07-26 11:06:13 -04:00
Patrick Schleizer
0318f577ab
Merge pull request #246 from raja-grewal/cfi 
Provide the option to change the default CFI implementation in the future
 2024-07-26 11:04:29 -04:00
Patrick Schleizer
e2ae93a957
port to safe_echo 2024-07-26 10:30:45 -04:00
Patrick Schleizer
8ec23ed712
echo does not support end-of-options 2024-07-26 10:28:57 -04:00
Patrick Schleizer
6096ed1109
comment 2024-07-26 10:26:43 -04:00
Patrick Schleizer
ac41d1cfff
comment 2024-07-26 10:25:59 -04:00
Patrick Schleizer
3b033ceba2
shellcheck 2024-07-26 10:17:24 -04:00
Patrick Schleizer
04d9ca1ebe
use find with safe_echo_nonewline 2024-07-26 10:16:20 -04:00
raja-grewal
20454fb811
Merge branch 'Kicksecure:master' into blacklist_to_disable 2024-07-27 00:09:30 +10:00
Patrick Schleizer
6bbf176e3b
consider end-of-options for find 2024-07-26 09:33:45 -04:00
Patrick Schleizer
794f6a25fa
comment 2024-07-26 09:08:29 -04:00
Patrick Schleizer
7e0f1a8701
dpkg-statoverride can actually handle '--file-name'. 2024-07-26 09:08:04 -04:00
Patrick Schleizer
ee037c01a1
Skip file names starting with '--', 
because this would be interpreted by dpkg-statoverride as an option.
 2024-07-26 08:58:44 -04:00
Patrick Schleizer
82d401a7de
sanity test 2024-07-26 08:52:42 -04:00
Patrick Schleizer
0e661bc688
output 2024-07-26 08:49:14 -04:00
Patrick Schleizer
d144f68d1a
output 2024-07-26 08:46:08 -04:00
Patrick Schleizer
05504b9ab2
minor 2024-07-26 08:40:10 -04:00
Patrick Schleizer
d96c0633d4
more use of end of options 2024-07-26 08:39:11 -04:00
Patrick Schleizer
8e40c10c31
comment 2024-07-26 08:31:17 -04:00
Patrick Schleizer
f2c9c2f5d1
output 2024-07-26 08:26:16 -04:00
Patrick Schleizer
2b40ea75e9
cleanup 2024-07-26 08:24:23 -04:00
Patrick Schleizer
6f0551b944
refactoring 2024-07-26 08:23:54 -04:00
Patrick Schleizer
aac450f808
refactoring 2024-07-26 08:22:04 -04:00
Patrick Schleizer
30f46790a4
use end of options whenever possible 2024-07-26 08:21:21 -04:00
Patrick Schleizer
95722d6d79
use long option name 2024-07-26 08:13:33 -04:00
Patrick Schleizer
19f131c742
code simplification 
https://github.com/Kicksecure/security-misc/pull/251
 2024-07-26 08:07:08 -04:00
Patrick Schleizer
9694cf0cd1
output 2024-07-26 07:43:59 -04:00
Patrick Schleizer
bdfe764f9d
Merge remote-tracking branch 'ben-grande/stat-dedup' 2024-07-26 07:19:05 -04:00
Patrick Schleizer
9f135231cc
no longer disable Intel ME related kernel modules 
because that might break firmware updates

This reverts commit 64f8b2eb58.

https://github.com/Kicksecure/security-misc/issues/239
 2024-07-26 06:43:14 -04:00
Patrick Schleizer
f616da7c06
bumped changelog version 2024-07-26 09:40:59 +00:00
Raja Grewal
4397de0138
Update description of cfi=kcfi kerenel parameter 2024-07-26 11:30:46 +10:00
Ben Grande
652a06c8e9
Only print SUID or SGID values when set 2024-07-25 12:37:21 +02:00
Ben Grande
3b8a3f9b83
Unduplicate stat call 2024-07-25 12:20:16 +02:00
Raja Grewal
28b25bda3f
Partial inclusion of GrapheneOS infrastructure blacklist 2024-07-25 15:51:32 +10:00
Raja Grewal
ed3336694c
Provide the option to immediately reboot on a kernel panics 2024-07-25 10:28:27 +10:00
Raja Grewal
3926b91dcf
Add documentation on sysctl kernel.panic_on_oops=1 2024-07-25 10:26:23 +10:00
Raja Grewal
f699eb02a2
Set sysctl fs.binfmt_misc.status=0 2024-07-25 10:11:33 +10:00
Patrick Schleizer
9231f05891
todo 2024-07-24 13:31:49 -04:00