1953 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
monsieuremre	76e684cc0a	Update and rename etc/NetworkManager/conf.d/99_ipv6-privacy.conf to usr/lib/NetworkManager/conf.d/99_ipv6-privacy.conf	2023-11-01 17:51:27 +00:00
Patrick Schleizer	a768f1f1eb	bumped changelog version	2023-11-01 12:26:21 -04:00
Patrick Schleizer	bb14a05852	Merge remote-tracking branch 'github-kicksecure/master'	2023-11-01 11:11:54 -04:00
Patrick Schleizer	44906e8f39	Merge pull request #142 from monsieuremre/patch-5 ... ssh config	2023-11-01 11:11:27 -04:00
Patrick Schleizer	5ed2a5ce4a	bumped changelog version	2023-11-01 11:10:36 -04:00
Patrick Schleizer	bb1161986b	Merge remote-tracking branch 'github-kicksecure/master'	2023-11-01 10:31:04 -04:00
Patrick Schleizer	b7cddd6e55	Merge pull request #143 from monsieuremre/patch-6 ... new lines 990-security-misc.conf	2023-11-01 10:30:26 -04:00
monsieuremre	fc8e201e84	rename	2023-10-27 14:49:24 +00:00
monsieuremre	90a88225a4	security-misc.maintscript	2023-10-27 14:38:31 +00:00
monsieuremre	13b4ddbb62	30_security-misc.conf	2023-10-27 14:34:21 +00:00
monsieuremre	b298d152fc	30_security-misc.conf	2023-10-27 14:32:08 +00:00
monsieuremre	3d4b04fddc	99_ipv6-privacy.conf	2023-10-27 12:35:39 +00:00
monsieuremre	e90f62eaab	99_randomize_mac.conf	2023-10-27 12:34:15 +00:00
monsieuremre	604d839537	99_ipv6-privacy-extensions.conf	2023-10-27 12:30:26 +00:00
monsieuremre	c975c3c0ff	new lines 990-security-misc.conf ... added new recommended hardening settings with comments	2023-10-27 11:07:53 +00:00
monsieuremre	f2c23a2831	ssh config	2023-10-27 10:53:45 +00:00
Patrick Schleizer	7d576842fb	bumped changelog version	2023-10-26 20:08:41 -04:00
Patrick Schleizer	7cff267002	remove duplicates	2023-10-26 19:31:14 -04:00
Patrick Schleizer	928cdb81d4	Merge remote-tracking branch 'github-kicksecure/master'	2023-10-26 19:29:55 -04:00
Patrick Schleizer	39fed058f4	Merge pull request #140 from monsieuremre/patch-3 ... New lines in default permission config	2023-10-26 19:27:41 -04:00
Patrick Schleizer	a330a9fd75	refactor permission-lockdown	2023-10-26 19:20:21 -04:00
Patrick Schleizer	8bf5ff82be	Merge remote-tracking branch 'github-kicksecure/master'	2023-10-26 19:15:04 -04:00
Patrick Schleizer	92a6ecc40a	Merge pull request #141 from monsieuremre/patch-4 ... New permission-lockdown	2023-10-26 19:13:34 -04:00
Patrick Schleizer	1123d23114	remount-secure: disable debugging to save space in initrd	2023-10-26 18:45:07 -04:00
monsieuremre	91c445244c	actually we do it once indeed	2023-10-26 19:41:07 +00:00
monsieuremre	88f396264c	avoiding /etc/passwd	2023-10-26 19:35:59 +00:00
monsieuremre	b5ba03247a	readability	2023-10-26 19:31:25 +00:00
monsieuremre	f487752ba1	not limiting ourselves. we do not do this not just once.	2023-10-26 19:30:58 +00:00
monsieuremre	88cd5a905d	strip unnecessary	2023-10-26 19:25:24 +00:00
monsieuremre	d9f10c221a	new permission-lockdown	2023-10-26 18:17:50 +00:00
monsieuremre	99355c6169	new lines 30_default.conf	2023-10-26 17:45:28 +00:00
Patrick Schleizer	ca9603af17	bumped changelog version	2023-10-26 12:23:48 -04:00
Patrick Schleizer	5f4222c1c3	enable SUID Disabler and Permission Hardener by default ... https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener https://forums.whonix.org/t/suid-disabler-and-permission-hardener/7706	2023-10-26 12:20:48 -04:00
Patrick Schleizer	e5d989af5a	comment	2023-10-26 12:04:13 -04:00
Patrick Schleizer	8557e0963e	bumped changelog version	2023-10-25 17:55:37 -04:00
Patrick Schleizer	b7e2d49f5f	comment	2023-10-25 17:41:05 -04:00
Patrick Schleizer	5d71217e59	Merge remote-tracking branch 'github-kicksecure/master'	2023-10-25 17:40:13 -04:00
Patrick Schleizer	6a22351d29	renamed: usr/lib/sysctl.d/30_security-misc.conf -> usr/lib/sysctl.d/990-security-misc.conf	2023-10-25 17:30:07 -04:00
Patrick Schleizer	b7c52800f4	renamed: etc/sysctl.d/30_security-misc.conf -> usr/lib/sysctl.d/30_security-misc.conf ... renamed: etc/sysctl.d/30_security-misc_kexec-disable.conf -> usr/lib/sysctl.d/30_security-misc_kexec-disable.conf renamed: etc/sysctl.d/30_silent-kernel-printk.conf -> usr/lib/sysctl.d/30_silent-kernel-printk.conf	2023-10-25 17:28:43 -04:00
Patrick Schleizer	a2f811aff0	Merge pull request #135 from monsieuremre/kernel-fix ... Kernel hardening fix	2023-10-25 17:26:46 -04:00
monsieuremre	ee6716e178	security-misc.maintscript	2023-10-24 20:43:10 +00:00
Patrick Schleizer	3317332cb4	bumped changelog version	2023-10-24 05:51:11 -04:00
Patrick Schleizer	42c802cd1e	Merge remote-tracking branch 'github-kicksecure/master'	2023-10-24 05:30:15 -04:00
Patrick Schleizer	5320c11f3f	Merge pull request #134 from monsieuremre/patch-1 ... Fix double mount issue for /var/log and /var/tmp	2023-10-24 05:22:33 -04:00
monsieuremre	1f489719ef	rename	2023-10-23 16:38:58 +00:00
monsieuremre	9dda6f69a7	more rename	2023-10-23 16:38:40 +00:00
monsieuremre	89381fe7ab	rename	2023-10-23 16:38:23 +00:00
monsieuremre	f0857fd560	Fix double mount issue for /var/log and /var/tmp ... Mounting var with bind and mounting a subdirectory causes /var/tmp and /var/log bind mounted twice each. can be checked with lsblk. When we bind mount var only after having mounted the subdirectories, everything is mounted only one.	2023-10-23 15:33:05 +00:00
Patrick Schleizer	f3b40f12cb	bumped changelog version	2023-10-22 19:23:22 -04:00
Patrick Schleizer	d2e8a6dad3	debugging	2023-10-22 19:21:51 -04:00