726 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Patrick Schleizer	f68b96241c	comment	2019-07-07 21:08:28 +00:00
Patrick Schleizer	91fb21aafb	Due to error: ... Jul 07 20:35:39 host sudo[16090]: PAM unable to dlopen(pam_cgfs.so): /lib/security/pam_cgfs.so: cannot open shared object file: No such file or directory Jul 07 20:35:39 host sudo[16090]: PAM adding faulty module: pam_cgfs.so run: pam-auth-update --package from Debian maintainer scripts	2019-07-07 16:51:40 -04:00
Patrick Schleizer	e543c4bf82	apparmor fixes (this broke whonixcheck apparmor profile)	2019-07-07 16:37:46 -04:00
Patrick Schleizer	8f4a5f33b9	bumped changelog version	2019-07-07 09:39:12 +00:00
Patrick Schleizer	3558a9949f	Enable APT seccomp sandboxing. ... Thanks to @torjunkie for the suggestion! https://forums.whonix.org/t/apt-seccomp-bpf-sandboxing/7702	2019-07-07 09:37:25 +00:00
Patrick Schleizer	93e81b4330	bumped changelog version	2019-07-06 13:56:28 +00:00
Patrick Schleizer	3cd1a5ec09	fix lintian warning	2019-07-06 13:56:00 +00:00
Patrick Schleizer	b73cdfd7cc	bumped changelog version	2019-07-06 13:53:10 +00:00
Patrick Schleizer	7b0b9da32c	Merge remote-tracking branch 'origin/master'	2019-07-06 07:06:54 -04:00
Patrick Schleizer	649878fdcb	Merge pull request #20 from madaidan/patch-15 ... Blacklist HDLC and use "install" for blacklisting firewire/thunderbolt	2019-07-06 11:06:25 +00:00
madaidan	8888147e1e	Update control	2019-07-04 14:26:31 +00:00
madaidan	46409be8b6	Use install instead of blacklist	2019-07-04 14:25:28 +00:00
madaidan	eb7eaffba1	Blacklist n-hdlc	2019-07-04 14:24:44 +00:00
Patrick Schleizer	6df7b3c295	bumped changelog version	2019-07-01 15:23:49 +00:00
Patrick Schleizer	f82731698c	re-enable PrivateNetwork=true	2019-07-01 14:53:01 +00:00
Patrick Schleizer	81b38529d9	add copyright for files in etc/pam.d/*	2019-07-01 13:58:20 +00:00
Patrick Schleizer	552b6edbed	fix machine readable copyright format	2019-07-01 13:51:00 +00:00
Patrick Schleizer	a05264934b	add copyright for etc/login.defs.security-misc	2019-07-01 13:46:01 +00:00
Patrick Schleizer	48e511347c	fix lintian warning	2019-07-01 13:37:55 +00:00
Patrick Schleizer	93c0821054	config-package-dev displace files for change umask ... https://forums.whonix.org/t/change-default-umask/7416	2019-07-01 13:35:45 +00:00
Patrick Schleizer	a73f0566e9	change default umask to 006 ... session optional pam_umask.so usergroups https://forums.whonix.org/t/change-default-umask/7416/17	2019-07-01 13:25:23 +00:00
Patrick Schleizer	41b61e3277	revert to Debian buster original	2019-07-01 13:24:29 +00:00
Patrick Schleizer	88a78b1c87	Merge remote-tracking branch 'origin/master'	2019-07-01 09:21:05 -04:00
Patrick Schleizer	8c60e7c67f	Merge pull request #18 from madaidan/patch-14 ... Change the default umask to 006	2019-07-01 13:20:21 +00:00
Patrick Schleizer	24cc8e380d	comment out proc-hidepid.service hardening for now ... since broken in Qubes Debian AppVMs https://forums.whonix.org/t/kernel-hardening/7296/104	2019-07-01 03:43:02 -04:00
Patrick Schleizer	0bffc7a930	Merge remote-tracking branch 'origin/master'	2019-07-01 03:08:26 -04:00
Patrick Schleizer	3c176ce158	allow permissions openat mkdir ... since required in Qubes Debian templates	2019-07-01 03:07:14 -04:00
Patrick Schleizer	344d009032	Merge pull request #19 from madaidan/patch-15 ... Add licensing to proc-hidepid.service	2019-07-01 06:39:28 +00:00
madaidan	b8f2aee905	Add licensing	2019-06-30 13:22:43 +00:00
madaidan	cfaafe400c	Update control	2019-06-30 13:16:12 +00:00
madaidan	eedeaa0e7f	Update common-session-noninteractive	2019-06-30 13:12:59 +00:00
madaidan	a9af85f585	Update common-session	2019-06-30 13:12:16 +00:00
madaidan	1e1d29cfde	Create common-session-noninteractive	2019-06-30 13:11:31 +00:00
madaidan	501901f7c0	Change default umask to 006	2019-06-30 13:10:54 +00:00
madaidan	09a5c27f47	Create common-session	2019-06-30 13:10:29 +00:00
madaidan	a319333493	Create login.defs	2019-06-30 13:09:51 +00:00
Patrick Schleizer	f26ad14d4c	bumped changelog version	2019-06-30 07:21:58 -04:00
Patrick Schleizer	b8ace6e3f6	bump	2019-06-30 07:21:31 -04:00
Patrick Schleizer	f3a4800987	bumped changelog version	2019-06-30 08:23:51 +00:00
Patrick Schleizer	85f61758c5	fix package description	2019-06-30 04:11:38 -04:00
Patrick Schleizer	e473397061	Merge remote-tracking branch 'origin/master'	2019-06-30 04:11:12 -04:00
Patrick Schleizer	ec78a3e42e	Merge pull request #17 from madaidan/patch-13 ... Disable coredumps	2019-06-30 08:10:28 +00:00
Patrick Schleizer	67de5247c8	Merge branch 'master' into patch-13	2019-06-30 08:10:04 +00:00
Patrick Schleizer	9525ff87c6	Merge pull request #16 from madaidan/patch-12 ... Mount /proc with hidepid=2	2019-06-30 08:09:23 +00:00
madaidan	dbfb9e1cdf	Update control	2019-06-30 00:21:46 +00:00
madaidan	024a698249	Update control	2019-06-30 00:20:38 +00:00
madaidan	230ef34db4	Create disable-coredumps.conf	2019-06-30 00:19:04 +00:00
madaidan	1bf802f846	Create coredumps.conf	2019-06-30 00:16:50 +00:00
madaidan	f040081a59	Prevent setuid processes from creating coredumps.	2019-06-30 00:13:52 +00:00
madaidan	c6b669f1a5	Create disable-coredumps.conf	2019-06-30 00:11:13 +00:00