Patrick Schleizer
|
51c7010e8f
|
bumped changelog version
|
2025-01-17 13:35:28 +00:00 |
|
Patrick Schleizer
|
876d596a07
|
comment
|
2025-01-17 07:55:54 -05:00 |
|
Patrick Schleizer
|
c9e2f82bd0
|
Merge remote-tracking branch 'ArrayBolt3/master'
|
2025-01-17 07:53:59 -05:00 |
|
Aaron Rainbolt
|
bf73f1f2b5
|
Avoid impossible-to-satisfy dependency on helper-scripts, improve string handling robustness in postinst
|
2025-01-15 19:11:01 -06:00 |
|
Patrick Schleizer
|
597186972e
|
bumped changelog version
|
2025-01-15 15:02:44 +00:00 |
|
Patrick Schleizer
|
ca25716410
|
improve permission hardener migration code
|
2025-01-15 09:44:48 -05:00 |
|
Patrick Schleizer
|
2dfd30a44a
|
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/more-permission-hardener'
|
2025-01-15 09:33:57 -05:00 |
|
Aaron Rainbolt
|
328f747179
|
Restore permission-hardener's notice about how to compare old and new states
|
2025-01-14 20:35:28 -06:00 |
|
Aaron Rainbolt
|
c6f09748f3
|
Handle de-corruption of new_mode a bit better
|
2025-01-14 20:27:53 -06:00 |
|
Aaron Rainbolt
|
a0f81958df
|
De-corrupt the new_mode permission-hardener statoverride database too
|
2025-01-14 19:25:15 -06:00 |
|
Aaron Rainbolt
|
396372c129
|
Avoid scanning unnecessary packages for modified permission-hardener config
|
2025-01-14 18:56:48 -06:00 |
|
Patrick Schleizer
|
a84d3ba732
|
bumped changelog version
|
2025-01-14 14:32:13 +00:00 |
|
Patrick Schleizer
|
709036c79f
|
debconf-updatepo
|
2025-01-14 09:31:58 -05:00 |
|
Patrick Schleizer
|
659c7037c6
|
bumped changelog version
|
2025-01-14 14:30:58 +00:00 |
|
Patrick Schleizer
|
86d3db15bf
|
output
|
2025-01-14 09:30:46 -05:00 |
|
Patrick Schleizer
|
876c0b6187
|
output
|
2025-01-14 09:29:35 -05:00 |
|
Patrick Schleizer
|
c46178dee4
|
output
|
2025-01-14 09:27:37 -05:00 |
|
Patrick Schleizer
|
f3c07a2451
|
update link
|
2025-01-14 09:24:06 -05:00 |
|
Patrick Schleizer
|
bbc4ad7c2a
|
bumped changelog version
|
2025-01-14 14:16:45 +00:00 |
|
Patrick Schleizer
|
9bb92e91a8
|
debhelper
|
2025-01-14 09:16:25 -05:00 |
|
Patrick Schleizer
|
95dd8f419f
|
bumped changelog version
|
2025-01-14 14:07:50 +00:00 |
|
Patrick Schleizer
|
0a2f06b456
|
use pre.bsh
|
2025-01-14 09:07:32 -05:00 |
|
Patrick Schleizer
|
6a4f9c1bd8
|
bumped changelog version
|
2025-01-14 14:06:50 +00:00 |
|
Patrick Schleizer
|
e60183ec07
|
output
|
2025-01-14 09:06:41 -05:00 |
|
Patrick Schleizer
|
a812961bea
|
verbose
|
2025-01-14 09:06:12 -05:00 |
|
Patrick Schleizer
|
0e4dfc59dd
|
bumped changelog version
|
2025-01-14 13:53:49 +00:00 |
|
Patrick Schleizer
|
cdf179f127
|
fix
|
2025-01-14 08:53:38 -05:00 |
|
Patrick Schleizer
|
41cd09933a
|
bumped changelog version
|
2025-01-14 09:26:05 +00:00 |
|
Patrick Schleizer
|
eec2e2c8ee
|
comment
|
2025-01-14 04:13:39 -05:00 |
|
Patrick Schleizer
|
6d282226ef
|
comment
|
2025-01-14 04:12:12 -05:00 |
|
Patrick Schleizer
|
466308e4f9
|
permission hardener: disable SUID for chrome-sandbox
|
2025-01-14 04:09:57 -05:00 |
|
Patrick Schleizer
|
7a5f8b87af
|
permission hardener: disable SUID for ssh-agent , ssh-keysign , /lib/openssh/*
This might break SSH host-based authentication.
|
2025-01-14 04:06:44 -05:00 |
|
Patrick Schleizer
|
d89ffcde30
|
comment
|
2025-01-14 04:04:09 -05:00 |
|
Patrick Schleizer
|
9f1759ba0e
|
comment
|
2025-01-14 03:56:55 -05:00 |
|
Patrick Schleizer
|
0ac85ea9f5
|
comment
|
2025-01-14 03:54:35 -05:00 |
|
Patrick Schleizer
|
fce6a5f830
|
comment
|
2025-01-14 03:51:43 -05:00 |
|
Patrick Schleizer
|
1e99404813
|
comment
|
2025-01-14 03:50:16 -05:00 |
|
Patrick Schleizer
|
b198591537
|
comment
|
2025-01-14 03:49:42 -05:00 |
|
Patrick Schleizer
|
7d44db2cb2
|
usrmerge
|
2025-01-14 03:49:15 -05:00 |
|
Patrick Schleizer
|
7e7632a553
|
bumped changelog version
|
2025-01-14 08:24:05 +00:00 |
|
Patrick Schleizer
|
420cb3f86f
|
refactoring
|
2025-01-14 03:19:21 -05:00 |
|
Patrick Schleizer
|
b7e7b2767e
|
refactoring
|
2025-01-14 03:18:17 -05:00 |
|
Patrick Schleizer
|
b2a1a0ec9f
|
refactoring
|
2025-01-14 03:17:00 -05:00 |
|
Patrick Schleizer
|
69ae2d9ea0
|
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/permission-hardener-migrate'
|
2025-01-14 03:15:45 -05:00 |
|
Aaron Rainbolt
|
de9ebabd46
|
Fix minor migration bugs, don't run the migration code on new image builds
|
2025-01-13 22:16:02 -06:00 |
|
Aaron Rainbolt
|
a9e87e9d30
|
Prevent installation failures when installing non-interactively
|
2025-01-12 21:13:43 -06:00 |
|
Aaron Rainbolt
|
5570d3e5b9
|
Add a forgotten set -e
|
2025-01-12 20:40:41 -06:00 |
|
Aaron Rainbolt
|
07786de039
|
Enable smooth migration from permission-hardener-v1 to permission-hardener-v2
|
2025-01-12 19:34:41 -06:00 |
|
Patrick Schleizer
|
de1f31e3df
|
bumped changelog version
|
2025-01-12 11:47:18 +00:00 |
|
Patrick Schleizer
|
b0baa8baa5
|
add link
|
2025-01-12 05:38:35 -05:00 |
|