Patrick Schleizer
|
bbe64a0b79
|
bumped changelog version
|
2024-05-28 12:04:53 +00:00 |
|
Patrick Schleizer
|
ae24a97d4d
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-05-28 08:02:21 -04:00 |
|
Patrick Schleizer
|
a735857852
|
Merge pull request #226 from Kicksecure/gitconfig
add `/etc/gitconfig` by default for better `git` security
|
2024-05-28 07:55:31 -04:00 |
|
Patrick Schleizer
|
4efa293f3b
|
add /etc/gitconfig by default for better git security
```
[core]
symlinks = false
[transfer]
fsckobjects = true
fsckobjects = true
[fetch]
fsckobjects = true
fsckobjects = true
[receive]
fsckobjects = true
fsckobjects = true
```
+ additional suggestions as comments
fixes https://github.com/Kicksecure/security-misc/issues/225
|
2024-05-28 07:51:06 -04:00 |
|
Patrick Schleizer
|
bfca98ea89
|
bumped changelog version
|
2024-05-18 20:45:12 +00:00 |
|
Patrick Schleizer
|
eb82884fb2
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-05-18 16:42:41 -04:00 |
|
Patrick Schleizer
|
12e006ef9c
|
Merge pull request #222 from raja-grewal/text
Update Readme and Copyright
|
2024-05-18 16:30:07 -04:00 |
|
raja-grewal
|
2f716050d1
|
Update README.md
|
2024-05-12 01:06:34 +00:00 |
|
Raja Grewal
|
1bb843ec38
|
Update Copyright (C) to 2024
|
2024-05-11 13:18:36 +10:00 |
|
Raja Grewal
|
dddac1dc40
|
Update README.md
|
2024-05-11 13:15:42 +10:00 |
|
Patrick Schleizer
|
5867b1b014
|
bumped changelog version
|
2024-05-10 11:20:36 +00:00 |
|
Patrick Schleizer
|
9b589bc311
|
comment
|
2024-05-10 06:49:34 -04:00 |
|
Patrick Schleizer
|
8d01fc2d35
|
chmod +x
|
2024-05-10 06:48:26 -04:00 |
|
Patrick Schleizer
|
8a28c1bc38
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-05-10 06:48:04 -04:00 |
|
Patrick Schleizer
|
0f1119f326
|
Merge pull request #221 from raja-grewal/firewire
Disable Firewire Module
|
2024-05-10 06:45:57 -04:00 |
|
Patrick Schleizer
|
547757f451
|
Merge pull request #220 from raja-grewal/block_gps
Block Several GPS-related Modules
|
2024-05-10 06:45:34 -04:00 |
|
Patrick Schleizer
|
7b9fe44a20
|
Merge pull request #219 from raja-grewal/logging_martians
Revert Logging of Martians
|
2024-05-10 06:43:43 -04:00 |
|
Patrick Schleizer
|
62ea4dc176
|
Merge pull request #218 from raja-grewal/secure_cpu
More CPU Mitigations and Additional References
|
2024-05-10 06:43:15 -04:00 |
|
raja-grewal
|
677f75ae8e
|
Disable firewire-net module
|
2024-05-09 02:34:02 +00:00 |
|
raja-grewal
|
06f13bb766
|
Disable GPS modules like GNSS
|
2024-05-09 02:28:53 +00:00 |
|
raja-grewal
|
f3800a4e2b
|
Create disabled-gps-by-security-misc
|
2024-05-09 02:25:46 +00:00 |
|
raja-grewal
|
132b41ae73
|
Revert logging of martians
|
2024-05-09 02:16:50 +00:00 |
|
raja-grewal
|
4694268b8f
|
Remove a word
|
2024-05-05 12:52:51 +00:00 |
|
raja-grewal
|
8f7768ce96
|
Add vendor links
|
2024-05-05 12:50:39 +00:00 |
|
raja-grewal
|
0c031a29d3
|
RFDS mitigation on Intel Atom CPUs (including E-cores)
|
2024-05-01 13:55:09 +10:00 |
|
raja-grewal
|
1122b3402c
|
GDS mitigation for CPUs
|
2024-05-01 13:50:42 +10:00 |
|
raja-grewal
|
c002bd62e8
|
Clarify use of mitigations=auto
|
2024-05-01 13:49:34 +10:00 |
|
raja-grewal
|
d89d7e8ef8
|
Add reference for RETBleed
|
2024-05-01 13:49:00 +10:00 |
|
raja-grewal
|
015dcc4212
|
Add reference for SSB
|
2024-05-01 13:48:13 +10:00 |
|
raja-grewal
|
de4f4be947
|
Merge spectre mitigations
|
2024-05-01 13:47:40 +10:00 |
|
raja-grewal
|
965c8641fd
|
Update BHI mitigation reference
|
2024-05-01 13:47:02 +10:00 |
|
Patrick Schleizer
|
a9886a3119
|
bumped changelog version
|
2024-04-12 06:56:39 +00:00 |
|
Patrick Schleizer
|
5cbdf3c126
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-04-12 02:54:17 -04:00 |
|
Patrick Schleizer
|
ab8b6da484
|
Merge pull request #216 from raja-grewal/spectre_bhi
BHI mitigation on Intel CPUs
|
2024-04-12 02:53:08 -04:00 |
|
raja-grewal
|
493576836c
|
BHI mitigation on Intel CPUs
|
2024-04-12 00:17:06 +10:00 |
|
Patrick Schleizer
|
7fba04d148
|
bumped changelog version
|
2024-04-01 06:56:45 +00:00 |
|
Patrick Schleizer
|
7dba3fb7be
|
no longer disable MSR by default
fixes https://github.com/Kicksecure/security-misc/issues/215
|
2024-04-01 02:56:27 -04:00 |
|
Patrick Schleizer
|
d9ac01ba5c
|
bumped changelog version
|
2024-03-18 15:10:10 +00:00 |
|
Patrick Schleizer
|
ecaa024f22
|
lower debugging
|
2024-03-18 11:01:56 -04:00 |
|
Patrick Schleizer
|
357ea5deab
|
bumped changelog version
|
2024-03-11 15:07:50 +00:00 |
|
Patrick Schleizer
|
0a018bdebc
|
Merge remote-tracking branch 'github-kicksecure/master'
|
2024-03-11 10:13:57 -04:00 |
|
Patrick Schleizer
|
0b81316300
|
Merge pull request #211 from wryMitts/patch-1
Create proc group on install
|
2024-03-11 10:12:46 -04:00 |
|
wryMitts
|
03ed546cd8
|
Create proc group on install
Fixes https://github.com/Kicksecure/security-misc/issues/210
|
2024-03-10 16:55:10 -04:00 |
|
Patrick Schleizer
|
57fc487e5e
|
bumped changelog version
|
2024-03-10 13:19:26 +00:00 |
|
Patrick Schleizer
|
a5206bde33
|
proc-hidepid.service add gid=proc
This allows users that are a member of the `proc` group to be excluded from `hidepid` protections.
https://github.com/Kicksecure/security-misc/issues/208
|
2024-03-10 08:44:53 -04:00 |
|
Patrick Schleizer
|
0f0d9ca2a4
|
bumped changelog version
|
2024-03-04 11:48:30 +00:00 |
|
Patrick Schleizer
|
6b76373395
|
fix panic-on-oops started every 10s in Qubes-Whonix
by changing from a /etc/profile.d etc. related mechanism to start to a systemd unit file based approach
Thanks to @marmarek for the bug report!
https://forums.whonix.org/t/panic-on-oops-started-every-10s/19450
|
2024-03-04 06:44:26 -05:00 |
|
Patrick Schleizer
|
af6c6971a7
|
comment
|
2024-03-04 06:33:51 -05:00 |
|
Patrick Schleizer
|
e013070e0b
|
newline
|
2024-03-04 06:33:21 -05:00 |
|
Patrick Schleizer
|
a5cc1774f2
|
bumped changelog version
|
2024-02-26 13:32:44 +00:00 |
|