Commit Graph

2367 Commits

Author SHA1 Message Date
raja-grewal
9dbd200be4
Merge branch 'Kicksecure:master' into kspp_compliance 2024-08-26 11:08:21 +10:00
Patrick Schleizer
cf824ddb24
bumped changelog version 2024-08-25 15:34:55 +00:00
Patrick Schleizer
500568e322
Merge remote-tracking branch 'github-kicksecure/master' 2024-08-25 11:01:58 -04:00
Patrick Schleizer
73900b59db
Merge pull request #263 from raja-grewal/max_user_namespaces
Provide option to disable user namespaces
2024-08-25 11:00:51 -04:00
Patrick Schleizer
43d13b70f1
Merge remote-tracking branch 'raja/syntax' 2024-08-25 10:55:52 -04:00
Patrick Schleizer
835376418d
Merge remote-tracking branch 'raja/mod' 2024-08-25 10:48:25 -04:00
Patrick Schleizer
ae85fd5b4c
bumped changelog version 2024-08-25 14:33:40 +00:00
Raja Grewal
433b15f985
README.md: Organise sysctls 2024-08-25 09:56:53 -04:00
Raja Grewal
af87a84b4f
README.md: Organise kernel boot parameters 2024-08-25 09:56:24 -04:00
Raja Grewal
32de5e7c49
Add details on oopses and warnings 2024-08-25 12:57:22 +10:00
Raja Grewal
e4909b5e28
Add details on kernel panics 2024-08-25 12:47:04 +10:00
Raja Grewal
342caf82b2
README.md: Organise kernel boot parameters 2024-08-21 12:52:48 +10:00
Raja Grewal
b87a18d405
README.md: Organise sysctls 2024-08-21 12:51:51 +10:00
Raja Grewal
18ed77ecc9
Refactor modprobe.d to minimise potential future merge conflicts 2024-08-21 12:50:14 +10:00
Raja Grewal
56b28e3826
Typo 2024-08-19 11:50:08 +10:00
Raja Grewal
94dab1b7c5
Partial compliance with the KSPP on kernel panics 2024-08-19 10:53:05 +10:00
Raja Grewal
683110e7f0
Correction 2024-08-19 01:34:14 +10:00
Raja Grewal
1f51d4eeb2
Add details on user namespaces 2024-08-18 13:53:11 +10:00
Raja Grewal
248e094b8e
Include KSPP compliance notices 2024-08-17 01:06:21 +10:00
Raja Grewal
759aee8150
Provide option to disable user namespaces 2024-08-16 22:54:57 +10:00
Raja Grewal
fae586c3c5
Patch bug in existing rp_filter sysctl 2024-08-16 19:23:48 +10:00
Patrick Schleizer
e962153f84
bumped changelog version 2024-08-16 08:38:12 +00:00
Patrick Schleizer
40b12f5a2a
Merge remote-tracking branch 'github-kicksecure/master' 2024-08-16 04:30:29 -04:00
Patrick Schleizer
305467c652
Merge pull request #245 from raja-grewal/blacklist_to_disable
Update `/etc/modprobe.d/*`
2024-08-16 04:25:43 -04:00
Patrick Schleizer
12296c68dc
Merge remote-tracking branch 'github-kicksecure/master' 2024-08-16 04:22:43 -04:00
Patrick Schleizer
036bcea4e6
Merge pull request #262 from raja-grewal/docs
Miscellaneous updates to presentation
2024-08-16 04:20:32 -04:00
raja-grewal
81bf7a8f90
Merge branch 'Kicksecure:master' into docs 2024-08-16 16:57:01 +10:00
Patrick Schleizer
ef60c5b153
Merge pull request #249 from raja-grewal/binfmt_misc
Disallow registering interpreters for miscellaneous binary formats
2024-08-16 02:43:57 -04:00
Raja Grewal
cea8e75378
Consistent formating 2024-08-16 14:55:22 +10:00
Raja Grewal
84376d23fc
Add details on ASLR and move to user space section 2024-08-16 13:39:11 +10:00
Raja Grewal
a132980023
Update README.md 2024-08-16 13:24:25 +10:00
Raja Grewal
9212a4e937
Typos 2024-08-16 13:12:07 +10:00
Raja Grewal
23a77d4973
Simplify syntax of some network-related sysctl's 2024-08-16 12:46:51 +10:00
Raja Grewal
e3a3207a44
Clarify DMA hardening 2024-08-16 12:41:36 +10:00
raja-grewal
be9308e490
Merge branch 'Kicksecure:master' into docs 2024-08-16 11:45:43 +10:00
Patrick Schleizer
4bc12b07b4
bumped changelog version 2024-08-15 17:51:18 +00:00
Patrick Schleizer
9e61e37c17
Merge remote-tracking branch 'github-kicksecure/master' 2024-08-15 13:47:33 -04:00
Patrick Schleizer
dfd1c97168
Merge pull request #248 from raja-grewal/secure_redirects
Re-enable (default) `secure_redirects` for ICMP redirect messages
2024-08-15 13:46:30 -04:00
Raja Grewal
b552b92401
Add references on fs.binfmt_misc.status 2024-08-15 11:54:21 +10:00
Raja Grewal
326d82a9be
Revert "Provide optional sysctl fs.binfmt_misc.status=0"
This reverts commit debd7a7b7a.
2024-08-15 11:46:56 +10:00
Raja Grewal
73db68dbf9
Add details on KFENCE 2024-08-09 14:27:30 +10:00
Raja Grewal
f8fa89b245
Add details on tcp_timestamps 2024-08-09 14:21:59 +10:00
Raja Grewal
3456f1c1d7
Minor consistency update in README.md 2024-08-09 13:39:25 +10:00
Raja Grewal
15c638acad
Add reference on RDRAND 2024-08-09 13:36:47 +10:00
Raja Grewal
077bc48a26
Add reference on rp_filter 2024-08-09 13:35:33 +10:00
Raja Grewal
d8bcec881f
Add some notices for future Debian 13 rebase 2024-08-09 13:33:32 +10:00
Raja Grewal
0b0683499a
Consistent line length formatting 2024-08-09 13:30:39 +10:00
Raja Grewal
e5a38fc856
Typo 2024-08-09 13:30:15 +10:00
Raja Grewal
a5373afc55
Details on disabled fbdev kernel modules 2024-08-07 14:44:14 +10:00
Raja Grewal
e98dc8c4f8
Update notifications for disabled kernel modules 2024-08-07 14:14:47 +10:00