Commit graph

2989 commits

Author SHA1 Message Date
Aaron Rainbolt
e54cb007f9
Merge remote-tracking branch 'raja/limit_bdev_writes' into arraybolt3/trixie 2025-11-29 19:54:10 -06:00
Aaron Rainbolt
84e193c44e
Merge remote-tracking branch 'raja/stop_tw_reuse' into arraybolt3/trixie 2025-11-28 14:21:59 -06:00
Aaron Rainbolt
65c45fc3d7
Minor fixes to NMI panic docs 2025-11-28 00:13:45 -06:00
Aaron Rainbolt
37b1d055f1
Merge remote-tracking branch 'raja/panic_nmi' into arraybolt3/trixie 2025-11-28 00:09:43 -06:00
Aaron Rainbolt
7280d8867d
Merge remote-tracking branch 'raja/amd_encrypt_ram' into arraybolt3/trixie 2025-11-27 23:28:53 -06:00
Patrick Schleizer
2089b3a9b8
bumped changelog version 2025-11-24 08:44:10 +00:00
Patrick Schleizer
cbd35502f1
comment 2025-11-24 03:18:25 -05:00
Patrick Schleizer
cac73c3154
minor 2025-11-24 03:17:38 -05:00
Patrick Schleizer
d68988e76c
comments 2025-11-24 03:17:25 -05:00
Patrick Schleizer
c1ca36d758
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie' 2025-11-24 03:11:19 -05:00
Aaron Rainbolt
a3417e997d
Add pkexec remembered permissions fix for permission-hardener, fix some postinst bugs 2025-11-23 16:27:59 -06:00
Aaron Rainbolt
edda37809f
Remove obsolete migration code for permission-hardener, add initial permission-hardener state installation code 2025-11-23 14:54:02 -06:00
Patrick Schleizer
ec11679514
bumped changelog version 2025-11-23 10:26:13 +00:00
Patrick Schleizer
5c4d3162ab
fix 2025-11-23 05:25:13 -05:00
Patrick Schleizer
9f85a78c99
bumped changelog version 2025-11-19 07:02:14 +00:00
Patrick Schleizer
4e7cfb0d06
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie' 2025-11-19 01:55:10 -05:00
Aaron Rainbolt
936c799cb5
Don't break passwordless sudo in unrestricted admin mode 2025-11-18 23:53:03 -06:00
raja-grewal
ebc011e67b
Typo 2025-11-19 11:35:04 +11:00
raja-grewal
62dc2d4483
Add note about Intel TME 2025-11-18 20:31:46 +11:00
raja-grewal
99e993b885
Provide options to enable AMD SME and SEV 2025-11-15 03:16:07 +00:00
Patrick Schleizer
d267cf6761
bumped changelog version 2025-11-14 06:21:34 +00:00
Patrick Schleizer
efa06a1eae
port to package-installed-check 2025-11-14 00:44:50 -05:00
Patrick Schleizer
abf5852eba
bumped changelog version 2025-11-12 06:13:05 +00:00
Patrick Schleizer
3af8916455
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie' 2025-11-11 23:59:50 -05:00
raja-grewal
d891313d57
Provide options to panic upon receiving NMIs 2025-11-11 11:39:21 +00:00
Aaron Rainbolt
3070aa5d1f
Fix passwordless login for sensitive accounts, only deny passwordless privilege escalation 2025-11-10 22:40:15 -06:00
Patrick Schleizer
fb587f78fd
bumped changelog version 2025-11-10 08:00:06 +00:00
Patrick Schleizer
fc1b865dd7
debugging 2025-11-10 02:21:27 -05:00
Patrick Schleizer
45126cede6
end-of-options 2025-11-10 02:19:29 -05:00
Patrick Schleizer
61637a5ff0
refactoring 2025-11-10 02:15:30 -05:00
Patrick Schleizer
ddb59a3b01
comment 2025-11-10 02:13:48 -05:00
Patrick Schleizer
ae1e2e3b52
output 2025-11-10 02:10:25 -05:00
Patrick Schleizer
f2b7658542
use long option names 2025-11-10 02:09:54 -05:00
Patrick Schleizer
71ca68bd4a
end-of-options 2025-11-10 02:09:00 -05:00
Patrick Schleizer
e9e6c12b03
output 2025-11-10 02:08:04 -05:00
Patrick Schleizer
f5db916bf7
fix 2025-11-10 02:06:55 -05:00
Patrick Schleizer
bb0a23fcc8
chmod +x 2025-11-10 02:05:47 -05:00
Patrick Schleizer
39a6ce002e
genmkfile debinstfile 2025-11-10 02:05:03 -05:00
Patrick Schleizer
94de949a47
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie' 2025-11-10 02:04:15 -05:00
raja-grewal
5ac02d2d52
Set net.ipv4.tcp_tw_reuse=0 2025-11-10 06:13:35 +00:00
Aaron Rainbolt
5fbd42bbec
Add kill-vboxdrmclient-on-shutdown.service 2025-11-09 18:38:54 -06:00
Aaron Rainbolt
9d86379f56
Prevent non-sysmaint logins in sysmaint mode and unsafe passwordless logins in user mode 2025-11-09 17:50:28 -06:00
Patrick Schleizer
0939883f0b
bumped changelog version 2025-11-09 10:47:45 +00:00
Patrick Schleizer
0391411885
revert Force immediate kernel panic on OOM.
https://github.com/Kicksecure/security-misc/issues/324#issuecomment-3507949741
2025-11-09 05:47:00 -05:00
Patrick Schleizer
26b96ce280
bumped changelog version 2025-11-09 08:12:42 +00:00
Patrick Schleizer
1ef974300a
readme 2025-11-08 04:00:47 -05:00
Patrick Schleizer
48ce12eba3
bumped changelog version 2025-11-08 07:44:43 +00:00
Patrick Schleizer
69419357e1
genmkfile debinstfile 2025-11-08 02:42:25 -05:00
Patrick Schleizer
d50e6afc8f
sanity test 2025-11-08 01:34:32 -05:00
Patrick Schleizer
1267960842
comments 2025-11-08 01:32:45 -05:00