Patrick Schleizer
|
4cc1289e89
|
output
|
2024-07-24 13:30:30 -04:00 |
|
Patrick Schleizer
|
10c73b326f
|
fix delimiter parsing
|
2024-07-24 12:07:26 -04:00 |
|
Patrick Schleizer
|
a16dd8474b
|
sanity test
|
2024-07-24 11:50:30 -04:00 |
|
Patrick Schleizer
|
cc2b335ee6
|
cleanup
|
2024-07-24 11:48:32 -04:00 |
|
Patrick Schleizer
|
6cadc70a96
|
output
|
2024-07-24 11:47:52 -04:00 |
|
Patrick Schleizer
|
cda0d26af7
|
cannot use NULL inside a bash variable
use custom delimiter instead
|
2024-07-24 11:45:13 -04:00 |
|
Patrick Schleizer
|
4a5312b3a9
|
output
|
2024-07-24 11:27:51 -04:00 |
|
Patrick Schleizer
|
3bf1f26c0b
|
downgrade warning of non-existing folders to info
to avoid all users by default getting a warning for expected non-existing folders
|
2024-07-24 11:20:26 -04:00 |
|
Patrick Schleizer
|
151ca659a9
|
output
|
2024-07-24 11:19:15 -04:00 |
|
Patrick Schleizer
|
c9fd2ceb61
|
downgrade warning of non-existing files to info
to avoid all users by default getting a warning for expected non-existing files
|
2024-07-24 11:13:35 -04:00 |
|
Patrick Schleizer
|
721392901b
|
remove duplicate test
|
2024-07-24 11:12:39 -04:00 |
|
Patrick Schleizer
|
9712b5b4e3
|
output
|
2024-07-24 11:12:18 -04:00 |
|
Patrick Schleizer
|
00911df5c1
|
modify call of stat to use NUL delimiter
for more robust string parsing
|
2024-07-24 11:10:56 -04:00 |
|
Patrick Schleizer
|
d536683511
|
local clean_output_prefix clean_output
|
2024-07-24 11:03:28 -04:00 |
|
Patrick Schleizer
|
a6e517736b
|
local stat_output
|
2024-07-24 11:02:25 -04:00 |
|
Patrick Schleizer
|
ced02fb9e0
|
add sanity test for file_name output from stat
|
2024-07-24 11:01:24 -04:00 |
|
Patrick Schleizer
|
b9dfe70a01
|
check first if file_name is empty
|
2024-07-24 10:58:05 -04:00 |
|
Patrick Schleizer
|
1cbda79981
|
check first if array is empty before parsing further
|
2024-07-24 10:57:13 -04:00 |
|
Patrick Schleizer
|
a077ae54ea
|
modify call of stat to use NUL delimiter
for more robust string parsing
|
2024-07-24 10:56:08 -04:00 |
|
Raja Grewal
|
1135d34ab3
|
Reword description of cfi=kcfi kerenel parameter
|
2024-07-24 23:33:36 +10:00 |
|
Patrick Schleizer
|
7200e9bd8c
|
output
|
2024-07-24 09:15:02 -04:00 |
|
Patrick Schleizer
|
1b6161c2dc
|
Merge remote-tracking branch 'ben-grande/fuzz'
|
2024-07-24 09:13:48 -04:00 |
|
Raja Grewal
|
88c88187f2
|
Re-enable (default) secure_redirects for ICMP redirect messages
|
2024-07-24 17:26:50 +10:00 |
|
Ben Grande
|
8be21b6eff
|
Handle newlines in file names
|
2024-07-23 19:36:12 +02:00 |
|
Ben Grande
|
aa99de68d3
|
Log output with defined levels
|
2024-07-23 18:50:16 +02:00 |
|
Ben Grande
|
06fbcdac1d
|
Prettify log messages
|
2024-07-23 09:55:02 +02:00 |
|
Raja Grewal
|
fb494c2ba5
|
Update docs relating to the cfi=kcfi kernel parameter
|
2024-07-23 13:12:13 +10:00 |
|
Ben Grande
|
7ee1ea2cc7
|
Unify functions that evaluate commands
|
2024-07-22 17:06:07 +02:00 |
|
Ben Grande
|
9c3566f524
|
Delimit file names with null terminator
|
2024-07-22 16:56:42 +02:00 |
|
Raja Grewal
|
d6fc71dba7
|
Add option to switch (back) to using kCFI in the future
|
2024-07-22 17:26:00 +10:00 |
|
raja-grewal
|
f582e54343
|
Merge branch 'Kicksecure:master' into blacklist_to_disable
|
2024-07-22 15:12:00 +10:00 |
|
Patrick Schleizer
|
d2563ed923
|
bumped changelog version
|
2024-07-21 10:40:14 +00:00 |
|
Patrick Schleizer
|
64f8b2eb58
|
Revert "no longer disable Intel ME related kernel modules"
This reverts commit 6157e328f4 .
https://www.kicksecure.com/wiki/Out-of-band_Management_Technology#Intel_ME_Kernel_Modules
https://github.com/Kicksecure/security-misc/issues/239
|
2024-07-21 06:36:22 -04:00 |
|
Patrick Schleizer
|
04fb00572f
|
bumped changelog version
|
2024-07-20 17:02:05 +00:00 |
|
Patrick Schleizer
|
f0a478c7c9
|
permission hardener: allow postfix
postqueue matchwhitelist
postdrop matchwhitelist
|
2024-07-20 12:57:56 -04:00 |
|
Raja Grewal
|
a189956adc
|
Typo
|
2024-07-20 20:11:09 +10:00 |
|
Raja Grewal
|
3c720a0715
|
Disable some legacy drivers
These were all previously blacklisted for over 2 years.
|
2024-07-20 15:03:21 +10:00 |
|
Raja Grewal
|
c4965ed838
|
Disable legacy framebuffer drivers
These were all previously blacklisted for over 2 years.
|
2024-07-20 14:55:10 +10:00 |
|
Patrick Schleizer
|
9f53a0182b
|
undo io_uring related changes
as these should be done in a separate pull request (if apprpriate)
https://github.com/Kicksecure/security-misc/pull/244#issuecomment-2238889062
|
2024-07-19 07:20:59 -04:00 |
|
Patrick Schleizer
|
8791aecb38
|
Merge remote-tracking branch 'raja/fixes'
|
2024-07-19 07:19:09 -04:00 |
|
Raja Grewal
|
06894d1c98
|
Typo
|
2024-07-19 18:30:42 +10:00 |
|
Patrick Schleizer
|
2d11436432
|
bumped changelog version
|
2024-07-18 18:05:07 +00:00 |
|
Patrick Schleizer
|
cac5bbad99
|
comment
|
2024-07-18 14:04:00 -04:00 |
|
Patrick Schleizer
|
a5eed00eba
|
cleanup comments
|
2024-07-18 14:02:38 -04:00 |
|
Patrick Schleizer
|
21efacf1b1
|
cleanup duplicate comments which are already in /etc/dkms/framework.conf
|
2024-07-18 14:00:28 -04:00 |
|
Patrick Schleizer
|
61628c2baf
|
bumped changelog version
|
2024-07-18 14:11:35 +00:00 |
|
Patrick Schleizer
|
05cf438199
|
no comments / copyright allowed in .displace-extension
|
2024-07-18 10:11:03 -04:00 |
|
Patrick Schleizer
|
2ccc95f6d4
|
bumped changelog version
|
2024-07-18 14:05:23 +00:00 |
|
Raja Grewal
|
95286df502
|
Update README.md regarding secure ICMP redirects
|
2024-07-18 15:28:31 +10:00 |
|
Raja Grewal
|
13cc1f0986
|
Clarify (future) disabling of io_uring
|
2024-07-18 12:25:00 +10:00 |
|