Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-27 22:29:23 -05:00
Code Issues Packages Projects Releases Wiki Activity
506 Commits 2 Branches 291 Tags 8.2 MiB
8a42c5b023
Commit Graph

506 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Patrick Schleizer
8a42c5b023
Merge pull request #34 from madaidan/whitelist 
Add a whitelist for /sys and /proc/cpuinfo
 2019-10-17 09:59:12 +00:00
Patrick Schleizer
994ca024c2
Merge pull request #33 from madaidan/documentation 
Improve documentation
 2019-10-17 06:19:46 +00:00
madaidan
61f742304d
return 0 2019-10-16 19:46:59 +00:00
madaidan
259b1f2c71
Update control 2019-10-16 19:21:24 +00:00
madaidan
ffba0e0179
Elaborate 2019-10-16 19:04:15 +00:00
madaidan
4f5b7816ec
Elaborate 2019-10-16 19:01:49 +00:00
madaidan
99a762d3dc
KASLR is different from ASLR 2019-10-16 18:53:04 +00:00
madaidan
a14a2854c6
Elaborate 2019-10-16 18:52:14 +00:00
madaidan
f08c03ab21
Restrict sysfs/cpuinfo if the whitelist is disabled 2019-10-16 15:39:23 +00:00
madaidan
af607d5eb2
Create sysfs and cpuinfo groups 2019-10-15 21:02:03 +00:00
madaidan
42c1701d5c
Whitelist user@.service 2019-10-15 21:00:03 +00:00
madaidan
a47a2fca8b
Create 30_whitelist.conf 2019-10-15 20:58:58 +00:00
madaidan
6b78dbcd07
Add way to whitelist things 2019-10-15 20:57:02 +00:00
Patrick Schleizer
4b1b3b7d66
bumped changelog version 2019-10-14 10:23:01 +00:00
Patrick Schleizer
c19964360a
readme 2019-10-14 10:10:08 +00:00
Patrick Schleizer
c22738be02
comments 2019-10-07 08:25:45 +00:00
Patrick Schleizer
75f36bc2c9
comments 2019-10-07 08:25:07 +00:00
Patrick Schleizer
e92a8a6966
comments 2019-10-07 08:24:02 +00:00
Patrick Schleizer
60c044a9d6
copyright / comments 2019-10-07 05:30:56 +00:00
Patrick Schleizer
cd2135ff82
comments 2019-10-06 10:18:24 +00:00
Patrick Schleizer
8b4f2befd4
comment out sack by default 
https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109/8?u=patrick
 2019-10-05 13:15:34 +00:00
Patrick Schleizer
02096f8d7c
Revert "undo Disabling TCP SACK, DSACK, FACK" 
This reverts commit 5fb4eb8e56.
 2019-10-05 13:13:46 +00:00
Patrick Schleizer
62a0239207
bumped changelog version 2019-10-05 11:33:15 +00:00
Patrick Schleizer
54b83ae44d
readme 2019-10-05 07:20:18 -04:00
Patrick Schleizer
5fb4eb8e56
undo Disabling TCP SACK, DSACK, FACK 
https://forums.whonix.org/t/disabling-tcp-sack-dsack-fack/8109/5
 2019-10-05 07:00:47 -04:00
Patrick Schleizer
c19942f72b
Merge remote-tracking branch 'origin/master' 2019-10-05 06:58:27 -04:00
Patrick Schleizer
a33851a3c9
Merge pull request #32 from madaidan/disable-dsack-fack 
Disable TCP DSACK and FACK
 2019-10-05 10:58:08 +00:00
Patrick Schleizer
213aef6eb9
bumped changelog version 2019-10-05 09:40:26 +00:00
Patrick Schleizer
aaebb32b66
readme 2019-10-05 09:39:05 +00:00
Patrick Schleizer
c87fc75f2a
fix, run remove-system-map.service during sysinit.target 2019-10-05 09:36:21 +00:00
Patrick Schleizer
25b6746784
fix systemd unit file proc-hidepid.service: WantedBy=sysinit.target 2019-10-05 09:14:54 +00:00
Patrick Schleizer
d2bc3a2a08
chmod +x usr/lib/security-misc/hide-hardware-info 2019-10-05 09:14:41 +00:00
Patrick Schleizer
ffe0d62c81
Merge remote-tracking branch 'origin/master' 2019-10-05 04:49:05 -04:00
Patrick Schleizer
7bcf73deaa
Merge pull request #31 from madaidan/hide-hardware-info 
Restrict /proc/cpuinfo, /proc/bus, /proc/scsi and /sys to root
 2019-10-05 08:46:21 +00:00
madaidan
d0c6bb1e90
Disable TCP DSACK and FACK 2019-10-04 17:35:54 +00:00
madaidan
7345287560
Use sysinit.target instead 2019-10-04 17:32:52 +00:00
madaidan
e06eeec678
Disable hide-hardware-info.service by default 2019-10-03 21:42:06 +00:00
madaidan
87917d2f03
Add licensing 2019-10-03 21:38:07 +00:00
madaidan
b06ab912c0
Add licensing 2019-10-03 21:37:29 +00:00
madaidan
ec5fcf813b
Update control 2019-10-03 20:50:48 +00:00
madaidan
ce97e5ed82
Create hide-hardware-info.service 2019-10-03 20:45:29 +00:00
madaidan
9449f5017a
Create hide-hardware-info 2019-10-03 20:45:14 +00:00
Patrick Schleizer
ddc778b452
bumped changelog version 2019-09-16 13:34:11 +00:00
Patrick Schleizer
75258843e9
copyright 2019-09-16 13:03:43 +00:00
Patrick Schleizer
8e39cea876
comment 2019-09-16 13:03:25 +00:00
Patrick Schleizer
bac462f211
comment 2019-09-16 13:03:02 +00:00
Patrick Schleizer
bec680d4f3
pam_tally2-info: fix, do nothing when started as user "user" 
xscreensaver runs as user "user", therefore pam_tally2 cannot function.
xscreensaver has its own failed login counter.

as user "user"
/sbin/pam_tally2 -u user
pam_tally2: Error opening /var/log/tallylog for update: Permission denied
/sbin/pam_tally2: Authentication error

https://askubuntu.com/questions/983183/how-lock-the-unlock-screen-after-wrong-password-attempts

https://forums.whonix.org/t/how-strong-do-linux-user-account-passwords-have-to-be-when-using-full-disk-encryption-fde-too/7698
 2019-09-16 12:30:23 +00:00
Patrick Schleizer
c2e444479c
bumped changelog version 2019-09-15 14:08:13 +00:00
Patrick Schleizer
c9425a1404
readme 2019-09-15 14:07:50 +00:00
Patrick Schleizer
619550da23
description 2019-09-15 14:00:24 +00:00