2595 Commits

Author SHA1 Message Date
Aaron Rainbolt
a97620a2e4
Add print-diagnostics command to permission-hardener 2025-01-20 22:43:55 -06:00
Patrick Schleizer
f1b6bff30b
bumped changelog version 2025-01-20 11:35:08 +00:00
Patrick Schleizer
df9d058ed9
usrmerge 2025-01-20 06:28:16 -05:00
Patrick Schleizer
8ff5f3b221
bumped changelog version 2025-01-20 10:11:43 +00:00
Patrick Schleizer
4e0d5a196c
delete comment only configuration file (moved to user-sysmaint-split) 2025-01-20 04:30:26 -05:00
Patrick Schleizer
1b4d1edfc3
comments 2025-01-20 04:29:42 -05:00
Patrick Schleizer
51c7010e8f
bumped changelog version 2025-01-17 13:35:28 +00:00
Patrick Schleizer
876d596a07
comment 2025-01-17 07:55:54 -05:00
Patrick Schleizer
c9e2f82bd0
Merge remote-tracking branch 'ArrayBolt3/master' 2025-01-17 07:53:59 -05:00
Aaron Rainbolt
bf73f1f2b5
Avoid impossible-to-satisfy dependency on helper-scripts, improve string handling robustness in postinst 2025-01-15 19:11:01 -06:00
Patrick Schleizer
597186972e
bumped changelog version 2025-01-15 15:02:44 +00:00
Patrick Schleizer
ca25716410
improve permission hardener migration code 2025-01-15 09:44:48 -05:00
Patrick Schleizer
2dfd30a44a
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/more-permission-hardener' 2025-01-15 09:33:57 -05:00
Aaron Rainbolt
328f747179
Restore permission-hardener's notice about how to compare old and new states 2025-01-14 20:35:28 -06:00
Aaron Rainbolt
c6f09748f3
Handle de-corruption of new_mode a bit better 2025-01-14 20:27:53 -06:00
Aaron Rainbolt
a0f81958df
De-corrupt the new_mode permission-hardener statoverride database too 2025-01-14 19:25:15 -06:00
Aaron Rainbolt
396372c129
Avoid scanning unnecessary packages for modified permission-hardener config 2025-01-14 18:56:48 -06:00
Patrick Schleizer
a84d3ba732
bumped changelog version 2025-01-14 14:32:13 +00:00
Patrick Schleizer
709036c79f
debconf-updatepo 2025-01-14 09:31:58 -05:00
Patrick Schleizer
659c7037c6
bumped changelog version 2025-01-14 14:30:58 +00:00
Patrick Schleizer
86d3db15bf
output 2025-01-14 09:30:46 -05:00
Patrick Schleizer
876c0b6187
output 2025-01-14 09:29:35 -05:00
Patrick Schleizer
c46178dee4
output 2025-01-14 09:27:37 -05:00
Patrick Schleizer
f3c07a2451
update link 2025-01-14 09:24:06 -05:00
Patrick Schleizer
bbc4ad7c2a
bumped changelog version 2025-01-14 14:16:45 +00:00
Patrick Schleizer
9bb92e91a8
debhelper 2025-01-14 09:16:25 -05:00
Patrick Schleizer
95dd8f419f
bumped changelog version 2025-01-14 14:07:50 +00:00
Patrick Schleizer
0a2f06b456
use pre.bsh 2025-01-14 09:07:32 -05:00
Patrick Schleizer
6a4f9c1bd8
bumped changelog version 2025-01-14 14:06:50 +00:00
Patrick Schleizer
e60183ec07
output 2025-01-14 09:06:41 -05:00
Patrick Schleizer
a812961bea
verbose 2025-01-14 09:06:12 -05:00
Patrick Schleizer
0e4dfc59dd
bumped changelog version 2025-01-14 13:53:49 +00:00
Patrick Schleizer
cdf179f127
fix 2025-01-14 08:53:38 -05:00
Patrick Schleizer
41cd09933a
bumped changelog version 2025-01-14 09:26:05 +00:00
Patrick Schleizer
eec2e2c8ee
comment 2025-01-14 04:13:39 -05:00
Patrick Schleizer
6d282226ef
comment 2025-01-14 04:12:12 -05:00
Patrick Schleizer
466308e4f9
permission hardener: disable SUID for chrome-sandbox 2025-01-14 04:09:57 -05:00
Patrick Schleizer
7a5f8b87af
permission hardener: disable SUID for ssh-agent, ssh-keysign, /lib/openssh/*
This might break SSH host-based authentication.
2025-01-14 04:06:44 -05:00
Patrick Schleizer
d89ffcde30
comment 2025-01-14 04:04:09 -05:00
Patrick Schleizer
9f1759ba0e
comment 2025-01-14 03:56:55 -05:00
Patrick Schleizer
0ac85ea9f5
comment 2025-01-14 03:54:35 -05:00
Patrick Schleizer
fce6a5f830
comment 2025-01-14 03:51:43 -05:00
Patrick Schleizer
1e99404813
comment 2025-01-14 03:50:16 -05:00
Patrick Schleizer
b198591537
comment 2025-01-14 03:49:42 -05:00
Patrick Schleizer
7d44db2cb2
usrmerge 2025-01-14 03:49:15 -05:00
Patrick Schleizer
7e7632a553
bumped changelog version 2025-01-14 08:24:05 +00:00
Patrick Schleizer
420cb3f86f
refactoring 2025-01-14 03:19:21 -05:00
Patrick Schleizer
b7e7b2767e
refactoring 2025-01-14 03:18:17 -05:00
Patrick Schleizer
b2a1a0ec9f
refactoring 2025-01-14 03:17:00 -05:00
Patrick Schleizer
69ae2d9ea0
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/permission-hardener-migrate' 2025-01-14 03:15:45 -05:00