Patrick Schleizer
|
f88ca25889
|
fix terminology, sguid -> sgid
Thanks to @madaidan for the bug report!
https://forums.whonix.org/t/permission-hardening/8655/21
|
2019-12-20 11:58:07 -05:00 |
|
Patrick Schleizer
|
1cd5fb6a00
|
bumped changelog version
|
2019-12-20 11:50:25 -05:00 |
|
Patrick Schleizer
|
ff0a26fb5d
|
comment
|
2019-12-20 11:49:19 -05:00 |
|
Patrick Schleizer
|
71496a33ab
|
skip folders are these are not suid / guid
|
2019-12-20 11:47:53 -05:00 |
|
Patrick Schleizer
|
9321ecff41
|
no more need to add/remove /
|
2019-12-20 11:43:53 -05:00 |
|
Patrick Schleizer
|
b95225b6a6
|
pipefail
|
2019-12-20 11:37:05 -05:00 |
|
Patrick Schleizer
|
cad6f328f4
|
minor
|
2019-12-20 11:34:44 -05:00 |
|
Patrick Schleizer
|
3265f9894d
|
output
|
2019-12-20 11:27:43 -05:00 |
|
Patrick Schleizer
|
28d12c3966
|
bumped changelog version
|
2019-12-20 11:09:22 -05:00 |
|
Patrick Schleizer
|
1615ebec58
|
output
|
2019-12-20 11:07:44 -05:00 |
|
Patrick Schleizer
|
1e11b775cf
|
output
|
2019-12-20 11:05:05 -05:00 |
|
Patrick Schleizer
|
731f802895
|
output
|
2019-12-20 11:04:12 -05:00 |
|
Patrick Schleizer
|
cd8efe5800
|
output
|
2019-12-20 11:03:22 -05:00 |
|
Patrick Schleizer
|
c0ddb76d74
|
bumped changelog version
|
2019-12-20 10:50:51 -05:00 |
|
Patrick Schleizer
|
b31abea0af
|
improve error handling
|
2019-12-20 10:49:31 -05:00 |
|
Patrick Schleizer
|
79cd3b86b6
|
comment
|
2019-12-20 10:47:23 -05:00 |
|
Patrick Schleizer
|
b3458cc6ee
|
fix checking existing entries to avoid needless calls to dpkg-statoverride
|
2019-12-20 10:45:59 -05:00 |
|
Patrick Schleizer
|
370f3c5e54
|
comment
|
2019-12-20 10:35:05 -05:00 |
|
Patrick Schleizer
|
133d09f298
|
output
|
2019-12-20 10:33:16 -05:00 |
|
Patrick Schleizer
|
1ffa8e197e
|
speed up setuid removal by using find with '-perm /u=s,g=s'
https://forums.whonix.org/t/permission-hardening/8655/19
|
2019-12-20 10:31:26 -05:00 |
|
Patrick Schleizer
|
4cfdf2c65b
|
fix, re-enforce nosuid even if changed on the disk
|
2019-12-20 10:21:27 -05:00 |
|
Patrick Schleizer
|
e36868e675
|
output
|
2019-12-20 10:02:46 -05:00 |
|
Patrick Schleizer
|
50b8f65490
|
add sanity test: count if we really processed all files
|
2019-12-20 09:59:28 -05:00 |
|
Patrick Schleizer
|
e28da89253
|
/bin/sudo whitelist / /bin/bwrap whitelist
|
2019-12-20 09:48:06 -05:00 |
|
Patrick Schleizer
|
55faa7b997
|
fix missing processing files bug
https://forums.whonix.org/t/permission-hardening/8655/16
|
2019-12-20 09:43:23 -05:00 |
|
Patrick Schleizer
|
fbe2479f48
|
count processed file system objects
to be able to verify if any were "forgotten"
|
2019-12-20 08:54:56 -05:00 |
|
Patrick Schleizer
|
195ea522f5
|
fix
|
2019-12-20 08:52:14 -05:00 |
|
Patrick Schleizer
|
6f8231be70
|
debugging
|
2019-12-20 08:51:55 -05:00 |
|
Patrick Schleizer
|
ed50f98010
|
output
|
2019-12-20 08:47:22 -05:00 |
|
Patrick Schleizer
|
089c40135f
|
bumped changelog version
|
2019-12-20 08:15:00 -05:00 |
|
Patrick Schleizer
|
6d30e3b4a2
|
do not remove suid from whitelisted binaries ever
https://forums.whonix.org/t/permission-hardening/8655/13
|
2019-12-20 08:13:23 -05:00 |
|
Patrick Schleizer
|
d5f1bd8dd2
|
fix mode sanity check
no longer use seq due to issue
https://forums.whonix.org/t/permission-hardening/8655/13
|
2019-12-20 08:02:30 -05:00 |
|
Patrick Schleizer
|
ddc0eec63d
|
bumped changelog version
|
2019-12-20 07:12:36 -05:00 |
|
Patrick Schleizer
|
65248a94ef
|
readme
|
2019-12-20 07:06:50 -05:00 |
|
Patrick Schleizer
|
8e112c3423
|
description
|
2019-12-20 06:53:24 -05:00 |
|
Patrick Schleizer
|
24ea70384b
|
description
|
2019-12-20 06:53:03 -05:00 |
|
Patrick Schleizer
|
0ae3e689b5
|
comment
|
2019-12-20 06:35:02 -05:00 |
|
Patrick Schleizer
|
050f4d8b94
|
comment
|
2019-12-20 06:34:37 -05:00 |
|
Patrick Schleizer
|
36043fe5cc
|
comment
|
2019-12-20 06:33:41 -05:00 |
|
Patrick Schleizer
|
fb4254547b
|
comment
|
2019-12-20 06:32:04 -05:00 |
|
Patrick Schleizer
|
cca0908d9a
|
fix
|
2019-12-20 06:11:38 -05:00 |
|
Patrick Schleizer
|
e254b8b52d
|
fix
|
2019-12-20 06:09:17 -05:00 |
|
Patrick Schleizer
|
7f8b3c76de
|
output
|
2019-12-20 06:02:17 -05:00 |
|
Patrick Schleizer
|
071c64dc41
|
enable 'set -e'
|
2019-12-20 06:01:49 -05:00 |
|
Patrick Schleizer
|
b97c66707c
|
minor
|
2019-12-20 05:59:05 -05:00 |
|
Patrick Schleizer
|
17b4f12276
|
output
|
2019-12-20 05:58:42 -05:00 |
|
Patrick Schleizer
|
48fe7312bf
|
update config
|
2019-12-20 05:57:41 -05:00 |
|
Patrick Schleizer
|
87d820d84c
|
comment
|
2019-12-20 05:54:16 -05:00 |
|
Patrick Schleizer
|
918cbb4e25
|
output
|
2019-12-20 05:51:25 -05:00 |
|
Patrick Schleizer
|
c8cf09a4cb
|
output
|
2019-12-20 05:50:16 -05:00 |
|