Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-10-01 08:25:45 -04:00
Code Issues Packages Projects Releases Wiki Activity
1,816 Commits 2 Branches 291 Tags 8.2 MiB
978e3e4abd
Commit Graph

1816 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Patrick Schleizer
978e3e4abd
readme 2023-11-03 14:53:40 -04:00
Patrick Schleizer
0242c04dc2
port to DKMS drop-in folder 
undisplace /etc/dkms/framework.conf.security-misc
moved to /etc/dkms/framework.conf.d/30_security-misc.conf
 2023-11-03 14:51:14 -04:00
Patrick Schleizer
d1b5a3ffd5
/usr/sbin/pam-tmpdir-helper exactwhitelist 
https://github.com/Kicksecure/security-misc/pull/147
 2023-11-03 12:55:34 -04:00
Patrick Schleizer
48adb44c6f
bumped changelog version 2023-11-03 12:17:24 -04:00
Patrick Schleizer
b6d53f698d
Revert "allow loading unsigned modules due to issues" 
This reverts commit 661bcd8603.
 2023-11-03 12:17:00 -04:00
Patrick Schleizer
04b210ee88
bumped changelog version 2023-11-03 12:10:48 -04:00
Patrick Schleizer
5e73f78ed9
Merge remote-tracking branch 'github-kicksecure/master' 2023-11-03 12:10:33 -04:00
Patrick Schleizer
8e66a41778
Merge pull request #147 from monsieuremre/PAM-tmp-files-hardening 
Depend on libpam-tmpdir for very solid extra security
 2023-11-03 12:10:00 -04:00
Patrick Schleizer
7dc99d54c0
fix 2023-11-03 12:09:39 -04:00
Patrick Schleizer
2a602e78d6
Merge branch 'master' into PAM-tmp-files-hardening 2023-11-03 12:08:50 -04:00
Patrick Schleizer
ceffd2b3ee
bumped changelog version 2023-11-03 12:06:43 -04:00
Patrick Schleizer
cdd66ee376
wrap-and-sort 2023-11-03 10:48:46 -04:00
Patrick Schleizer
c33a3d9aad
readme 2023-11-03 10:44:48 -04:00
Patrick Schleizer
d71ac03d96
comment 2023-11-03 10:36:15 -04:00
Patrick Schleizer
8326aecdb4
bumped changelog version 2023-11-03 10:33:02 -04:00
Patrick Schleizer
b85d48eb83
do not change default umask for root 
since this causes permission issues in `/etc/`

https://github.com/Kicksecure/security-misc/pull/151
 2023-11-03 10:31:59 -04:00
Patrick Schleizer
07540db90d
Revert "Revert "set default umask to 027"" 
This reverts commit f8913ceb2e.
 2023-11-03 09:45:12 -04:00
Patrick Schleizer
f8913ceb2e
Revert "set default umask to 027" 
This reverts commit cd216095eb.
 2023-11-03 09:43:44 -04:00
Patrick Schleizer
43bd789c30
bumped changelog version 2023-11-03 09:28:08 -04:00
Patrick Schleizer
cd216095eb
set default umask to 027 
using package libpam-umask

https://www.debian.org/doc/manuals/securing-debian-manual/ch04s11.en.html#id-1.5.14.19

https://github.com/Kicksecure/security-misc/pull/151
 2023-11-03 09:12:24 -04:00
monsieuremre
3ee4be652b
depend on libpam-tmpdir 2023-11-02 09:36:58 +00:00
Patrick Schleizer
a768f1f1eb
bumped changelog version 2023-11-01 12:26:21 -04:00
Patrick Schleizer
bb14a05852
Merge remote-tracking branch 'github-kicksecure/master' 2023-11-01 11:11:54 -04:00
Patrick Schleizer
44906e8f39
Merge pull request #142 from monsieuremre/patch-5 
ssh config
 2023-11-01 11:11:27 -04:00
Patrick Schleizer
5ed2a5ce4a
bumped changelog version 2023-11-01 11:10:36 -04:00
Patrick Schleizer
bb1161986b
Merge remote-tracking branch 'github-kicksecure/master' 2023-11-01 10:31:04 -04:00
Patrick Schleizer
b7cddd6e55
Merge pull request #143 from monsieuremre/patch-6 
new lines 990-security-misc.conf
 2023-11-01 10:30:26 -04:00
monsieuremre
c975c3c0ff
new lines 990-security-misc.conf 
added new recommended hardening settings with comments
 2023-10-27 11:07:53 +00:00
monsieuremre
f2c23a2831
ssh config 2023-10-27 10:53:45 +00:00
Patrick Schleizer
7d576842fb
bumped changelog version 2023-10-26 20:08:41 -04:00
Patrick Schleizer
7cff267002
remove duplicates 2023-10-26 19:31:14 -04:00
Patrick Schleizer
928cdb81d4
Merge remote-tracking branch 'github-kicksecure/master' 2023-10-26 19:29:55 -04:00
Patrick Schleizer
39fed058f4
Merge pull request #140 from monsieuremre/patch-3 
New lines in default permission config
 2023-10-26 19:27:41 -04:00
Patrick Schleizer
a330a9fd75
refactor permission-lockdown 2023-10-26 19:20:21 -04:00
Patrick Schleizer
8bf5ff82be
Merge remote-tracking branch 'github-kicksecure/master' 2023-10-26 19:15:04 -04:00
Patrick Schleizer
92a6ecc40a
Merge pull request #141 from monsieuremre/patch-4 
New permission-lockdown
 2023-10-26 19:13:34 -04:00
Patrick Schleizer
1123d23114
remount-secure: disable debugging to save space in initrd 2023-10-26 18:45:07 -04:00
monsieuremre
91c445244c
actually we do it once indeed 2023-10-26 19:41:07 +00:00
monsieuremre
88f396264c
avoiding /etc/passwd 2023-10-26 19:35:59 +00:00
monsieuremre
b5ba03247a
readability 2023-10-26 19:31:25 +00:00
monsieuremre
f487752ba1
not limiting ourselves. we do not do this not just once. 2023-10-26 19:30:58 +00:00
monsieuremre
88cd5a905d
strip unnecessary 2023-10-26 19:25:24 +00:00
monsieuremre
d9f10c221a
new permission-lockdown 2023-10-26 18:17:50 +00:00
monsieuremre
99355c6169
new lines 30_default.conf 2023-10-26 17:45:28 +00:00
Patrick Schleizer
ca9603af17
bumped changelog version 2023-10-26 12:23:48 -04:00
Patrick Schleizer
5f4222c1c3
enable SUID Disabler and Permission Hardener by default 
https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener

https://forums.whonix.org/t/suid-disabler-and-permission-hardener/7706
 2023-10-26 12:20:48 -04:00
Patrick Schleizer
e5d989af5a
comment 2023-10-26 12:04:13 -04:00
Patrick Schleizer
8557e0963e
bumped changelog version 2023-10-25 17:55:37 -04:00
Patrick Schleizer
b7e2d49f5f
comment 2023-10-25 17:41:05 -04:00
Patrick Schleizer
5d71217e59
Merge remote-tracking branch 'github-kicksecure/master' 2023-10-25 17:40:13 -04:00