Commit graph

Select branches

Hide pull requests

Whonix13

bookworm

gitconfig

master

permission-hardener-mount

#1

#10

#100

#101

#103

#104

#108

#109

#11

#110

#111

#112

#113

#114

#115

#118

#119

#12

#120

#121

#122

#124

#125

#126

#129

#13

#131

#133

#134

#135

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#16

#165

#166

#167

#17

#170

#171

#176

#178

#18

#181

#182

#183

#19

#193

#194

#195

#197

#2

#20

#200

#202

#204

#21

#211

#216

#218

#219

#22

#220

#221

#222

#226

#227

#228

#228

#229

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#254

#255

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#268

#269

#27

#270

#272

#273

#276

#279

#28

#280

#282

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#3

#30

#301

#302

#304

#305

#306

#307

#308

#309

#31

#310

#311

#312

#313

#314

#316

#317

#318

#319

#32

#320

#320

#322

#323

#325

#326

#327

#327

#33

#331

#331

#332

#332

#333

#333

#334

#334

#335

#335

#336

#336

#337

#337

#338

#338

#339

#339

#34

#340

#340

#35

#36

#37

#38

#39

#4

#40

#41

#42

#43

#44

#45

#46

#47

#48

#49

#5

#50

#51

#52

#53

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

#98

#99

0.4-1

0.6-1

0.7-1

0.8-1

1.3-1

1.4-1

1.5-1

1.6-1

1.7-1

1.8-1

1.9-1

10.1-1

10.2-1

10.3-1

10.4-1

10.5-1

10.6-1

10.7-1

10.8-1

10.9-1

11.0-1

11.1-1

11.2-1

11.3-1

11.4-1

11.5-1

11.6-1

11.7-1

11.8-1

11.9-1

12.0-1

12.1-1

12.2-1

12.3-1

12.4-1

12.5-1

12.6-1

12.7-1

12.8-1

12.9-1

13.0-1

13.1-1

13.2-1

13.3-1

13.4-1

13.5-1

13.6-1

13.7-1

13.8-1

13.9-1

14.0-1

14.1-1

14.2-1

14.3-1

14.4-1

14.5-1

14.6-1

14.7-1

14.8-1

14.9-1

15.0-1

15.1-1

15.2-1

15.3-1

15.4-1

15.5-1

15.6-1

15.7-1

15.8-1

15.9-1

16.0-1

16.1-1

16.2-1

16.3-1

16.4-1

16.5-1

16.6-1

16.7-1

16.8-1

16.9-1

17.0-1

17.1-1

17.2-1

17.3-1

17.4-1

17.5-1

17.6-1

17.7-1

17.8-1

17.9-1

18.0-1

18.1-1

18.2-1

18.3-1

18.4-1

18.5-1

18.6-1

18.7-1

18.8-1

18.9-1

19.0-1

19.1-1

19.2-1

19.3-1

19.4-1

19.5-1

19.6-1

19.7-1

19.8-1

19.9-1

2.0-1

2.1-1

2.2-1

2.3-1

2.4-1

2.5-1

2.6-1

2.7-1

2.8-1

2.9-1

20.0-1

20.1-1

20.2-1

20.3-1

20.4-1

20.5-1

20.6-1

20.7-1

20.8-1

20.9-1

21.0-1

21.1-1

21.2-1

21.3-1

21.4-1

21.5-1

21.6-1

21.7-1

21.8-1

21.9-1

22.0-1

22.1-1

22.2-1

22.3-1

22.4-1

22.5-1

22.6-1

22.7-1

22.8-1

22.9-1

23.0-1

23.1-1

23.2-1

23.3-1

23.4-1

23.5-1

23.6-1

23.7-1

23.8-1

23.9-1

24.0-1

24.1-1

24.2-1

24.3-1

24.4-1

24.5-1

24.6-1

24.7-1

24.8-1

24.9-1

25.0-1

25.1-1

25.2-1

25.3-1

25.4-1

25.5-1

25.6-1

25.7-1

25.8-1

25.9-1

26.0-1

26.1-1

26.2-1

26.3-1

26.4-1

26.5-1

26.6-1

26.7-1

26.8-1

26.9-1

27.0-1

27.1-1

27.2-1

27.3-1

27.4-1

27.5-1

27.6-1

27.7-1

27.8-1

27.9-1

28.0-1

28.1-1

28.2-1

28.3-1

28.4-1

28.5-1

28.6-1

28.7-1

28.8-1

28.9-1

29.0-1

29.1-1

29.2-1

29.3-1

29.4-1

29.5-1

29.6-1

29.7-1

29.8-1

29.9-1

3.0-1

3.1-1

3.2-1

3.3-1

3.4-1

3.5-1

3.6-1

3.7-1

3.8-1

3.9-1

30.0-1

30.1-1

30.2-1

30.3-1

30.5-1

30.6-1

30.7-1

30.8-1

30.9-1

31.0-1

31.1-1

31.2-1

31.3-1

31.4-1

31.5-1

31.6-1

31.7-1

31.8-1

31.9-1

32.0-1

32.1-1

32.2-1

32.3-1

32.4-1

32.5-1

32.6-1

32.7-1

32.8-1

32.9-1

33.0-1

33.1-1

33.2-1

33.3-1

33.4-1

33.5-1

33.6-1

33.7-1

33.8-1

33.9-1

34.0-1

34.1-1

34.2-1

34.3-1

34.4-1

34.5-1

34.6-1

34.7-1

34.8-1

34.9-1

35.0-1

35.1-1

35.2-1

35.3-1

35.4-1

35.5-1

35.6-1

35.7-1

35.8-1

35.9-1

36.0-1

36.1-1

36.2-1

36.3-1

36.4-1

36.5-1

36.6-1

36.7-1

36.8-1

36.9-1

37.0-1

37.1-1

37.2-1

37.3-1

37.4-1

37.5-1

37.6-1

37.7-1

37.8-1

37.9-1

38.0-1

38.1-1

38.2-1

38.3-1

38.4-1

38.5-1

38.6-1

38.7-1

38.8-1

38.9-1

39.0-1

39.1-1

39.2-1

39.3-1

39.4-1

39.5-1

39.6-1

39.7-1

39.8-1

39.9-1

4.0-1

4.1-1

4.2-1

4.3-1

4.4-1

4.5-1

4.6-1

4.7-1

4.8-1

4.9-1

40.0-1

40.1-1

40.2-1

40.3-1

40.4-1

40.5-1

40.6-1

40.7-1

40.8-1

40.9-1

41.0-1

41.1-1

41.2-1

41.3-1

41.4-1

41.5-1

41.6-1

41.7-1

41.8-1

41.9-1

42.0-1

42.1-1

42.2-1

42.3-1

42.4-1

42.5-1

42.6-1

42.7-1

42.8-1

42.9-1

43.0-1

43.1-1

43.2-1

43.3-1

43.4-1

43.5-1

43.6-1

43.7-1

43.8-1

43.9-1

44.0-1

44.1-1

44.2-1

44.3-1

44.4-1

44.5-1

44.6-1

44.7-1

44.8-1

44.9-1

45.0-1

45.1-1

45.2-1

45.3-1

45.4-1

45.5-1

45.6-1

45.7-1

45.8-1

45.9-1

46.0-1

46.1-1

46.2-1

46.3-1

46.4-1

46.5-1

46.6-1

46.7-1

46.8-1

46.9-1

47.0-1

47.1-1

47.2-1

47.3-1

47.4-1

47.5-1

47.6-1

47.7-1

47.8-1

47.9-1

48.0-1

48.1-1

48.2-1

48.3-1

48.4-1

48.5-1

48.6-1

48.7-1

48.8-1

48.9-1

49.0-1

49.1-1

49.2-1

49.3-1

49.4-1

49.5-1

49.6-1

49.7-1

49.8-1

49.9-1

5.0-1

5.1-1

5.2-1

5.3-1

5.4-1

5.5-1

5.6-1

5.7-1

5.8-1

5.9-1

50.0-1

50.1-1

50.2-1

50.3-1

6.0-1

6.1-1

6.2-1

6.3-1

6.4-1

6.5-1

6.6-1

6.7-1

6.8-1

6.9-1

7.0-1

7.1-1

7.2-1

7.3-1

7.4-1

7.5-1

7.6-1

7.7-1

7.8-1

7.9-1

8.0-1

8.1-1

8.2-1

8.3-1

8.4-1

8.5-1

8.6-1

8.7-1

8.8-1

8.9-1

9.0-1

9.1-1

9.10-1

9.11-1

9.12-1

9.2-1

9.3-1

9.4-1

9.5-1

9.6-1

9.7-1

9.8-1

9.9-1

Mono Color

• a0d4e868fa
  Merge 5ac02d2d52 into 2089b3a9b8 raja-grewal 2025-11-24 14:30:49 -05:00
• 2089b3a9b8
  bumped changelog version master 50.3-1 Patrick Schleizer 2025-11-24 08:44:10 +00:00
• cbd35502f1
  comment Patrick Schleizer 2025-11-24 03:18:25 -05:00
• cac73c3154
  minor Patrick Schleizer 2025-11-24 03:17:38 -05:00
• d68988e76c
  comments Patrick Schleizer 2025-11-24 03:17:25 -05:00
• c1ca36d758
  Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie' Patrick Schleizer 2025-11-24 03:11:19 -05:00
• c508204397
  Merge ebc011e67b into ec11679514 raja-grewal 2025-11-24 03:31:53 +01:00
• a3417e997d
  Add pkexec remembered permissions fix for permission-hardener, fix some postinst bugs Aaron Rainbolt 2025-11-23 16:27:59 -06:00
• edda37809f
  Remove obsolete migration code for permission-hardener, add initial permission-hardener state installation code Aaron Rainbolt 2025-11-23 14:54:02 -06:00
• 1f1d2b5bee
  Merge ab98da957c into ec11679514 raja-grewal 2025-11-23 16:41:02 +00:00
• ec11679514
  bumped changelog version 50.2-1 Patrick Schleizer 2025-11-23 10:26:13 +00:00
• 5c4d3162ab
  fix Patrick Schleizer 2025-11-23 05:25:13 -05:00
• 6fed89c1d0
  Merge 30068ec8cd into 9f85a78c99 raja-grewal 2025-11-22 04:01:58 +00:00
• 30068ec8cd
  Correct bitmask raja-grewal 2025-11-22 15:01:47 +11:00
• 8e86fe5c1c
  Merge f75e987337 into 9f85a78c99 raja-grewal 2025-11-21 13:55:17 +00:00
• f75e987337
  Relabel some disabled module headings raja-grewal 2025-11-21 13:06:42 +00:00
• 79be87ec5f
  Move (optional) CPU MSR module disable list raja-grewal 2025-11-21 13:05:13 +00:00
• 1a7b0a9122
  Disable more file systems raja-grewal 2025-11-21 12:43:05 +00:00
• 1865cafe44
  Move joydev from blacklist to disable raja-grewal 2025-11-21 12:42:10 +00:00
• 28476d3d53
  Update docs on GrapheneOS blacklisted modules raja-grewal 2025-11-21 12:40:12 +00:00
• 446d3771bf
  Update docs on CD-ROM/DVD blacklisting raja-grewal 2025-11-21 12:38:44 +00:00
• 3646a2fefe
  Move superseded brcm80211 to disabled Split and replaced by brcmsmac and brcmfmac in kernel 2.6.39 raja-grewal 2025-11-21 12:37:57 +00:00
• 66ba273d44
  Add CPU MSR modules raja-grewal 2025-11-21 12:36:57 +00:00
• e6aa648d54
  Update docs on CPU MSR disabling raja-grewal 2025-11-21 12:36:32 +00:00
• 59869979bb
  Update docs on Vivid disabling raja-grewal 2025-11-21 12:35:51 +00:00
• 4597fd16a9
  Sort RDNIS disabling and add docs raja-grewal 2025-11-21 12:35:03 +00:00
• 5adc007536
  Update docs on Intel PMT disabling raja-grewal 2025-11-21 12:33:15 +00:00
• 31e3aa0c3a
  Update docs on Bluetooth disabling raja-grewal 2025-11-21 12:32:30 +00:00
• 849ba156af
  Merge 3fdfebc464 into 9f85a78c99 raja-grewal 2025-11-21 02:52:38 +09:00
• a12262d06c
  Merge 62dc2d4483 into 9f85a78c99 raja-grewal 2025-11-20 18:07:36 +11:00
• 26aebe94f2
  Merge c5f91eb33a into 9f85a78c99 raja-grewal 2025-11-20 01:23:09 -05:00
• 9f85a78c99
  bumped changelog version 50.1-1 Patrick Schleizer 2025-11-19 07:02:14 +00:00
• 4e7cfb0d06
  Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie' Patrick Schleizer 2025-11-19 01:55:10 -05:00
• 936c799cb5
  Don't break passwordless sudo in unrestricted admin mode Aaron Rainbolt 2025-11-18 23:53:03 -06:00
• 68025d3624
  Provide option to panic_on_taint raja-grewal 2025-11-19 01:16:46 +00:00
• ebc011e67b
  Typo raja-grewal 2025-11-19 11:35:04 +11:00
• 62dc2d4483
  Add note about Intel TME raja-grewal 2025-11-18 20:31:46 +11:00
• 033f8ada74
  Merge 29176d2ed2 into d267cf6761 raja-grewal 2025-11-15 17:30:43 +11:00
• 29176d2ed2
  Remove the option to reduce the MCE tolerance level raja-grewal 2025-11-15 06:30:11 +00:00
• 9f897c5ccd
  Update docs on reducing the MCE tolerance level raja-grewal 2025-11-15 05:48:33 +00:00
• b6fe1a5a6e
  Make panic related settings consistent Ensures the sysctl and boot parameters are equivalent in settings and in description. This should prevent future questions regarding having omitted boot parameters that were actually redundant. raja-grewal 2025-11-15 04:51:01 +00:00
• 99e993b885
  Provide options to enable AMD SME and SEV raja-grewal 2025-11-15 03:16:07 +00:00
• d267cf6761
  bumped changelog version 50.0-1 Patrick Schleizer 2025-11-14 06:21:34 +00:00
• efa06a1eae
  port to package-installed-check Patrick Schleizer 2025-11-14 00:44:50 -05:00
• abf5852eba
  bumped changelog version 49.9-1 Patrick Schleizer 2025-11-12 06:13:05 +00:00
• 3af8916455
  Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie' Patrick Schleizer 2025-11-11 23:59:50 -05:00
• d891313d57
  Provide options to panic upon receiving NMIs raja-grewal 2025-11-11 11:39:21 +00:00
• 0b9b9ffb1e
  Improve clarity for panic on OOM raja-grewal 2025-11-11 11:32:47 +00:00
• 3070aa5d1f
  Fix passwordless login for sensitive accounts, only deny passwordless privilege escalation Aaron Rainbolt 2025-11-10 22:40:15 -06:00
• ab98da957c
  Re-set net.ipv4.conf.*.log_martians=1 raja-grewal 2025-11-11 04:28:56 +00:00
• f5d6aad792
  Merge e43d4d7f71 into fb587f78fd raja-grewal 2025-11-10 23:15:50 +01:00
• fb587f78fd
  bumped changelog version 49.8-1 Patrick Schleizer 2025-11-10 08:00:06 +00:00
• fc1b865dd7
  debugging Patrick Schleizer 2025-11-10 02:21:27 -05:00
• 45126cede6
  end-of-options Patrick Schleizer 2025-11-10 02:19:29 -05:00
• 61637a5ff0
  refactoring Patrick Schleizer 2025-11-10 02:15:30 -05:00
• ddb59a3b01
  comment Patrick Schleizer 2025-11-10 02:13:48 -05:00
• ae1e2e3b52
  output Patrick Schleizer 2025-11-10 02:10:25 -05:00
• f2b7658542
  use long option names Patrick Schleizer 2025-11-10 02:09:54 -05:00
• 71ca68bd4a
  end-of-options Patrick Schleizer 2025-11-10 02:09:00 -05:00
• e9e6c12b03
  output Patrick Schleizer 2025-11-10 02:08:04 -05:00
• f5db916bf7
  fix Patrick Schleizer 2025-11-10 02:06:55 -05:00
• bb0a23fcc8
  chmod +x Patrick Schleizer 2025-11-10 02:05:47 -05:00
• 39a6ce002e
  genmkfile debinstfile Patrick Schleizer 2025-11-10 02:05:03 -05:00
• 94de949a47
  Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie' Patrick Schleizer 2025-11-10 02:04:15 -05:00
• 5ac02d2d52
  Set net.ipv4.tcp_tw_reuse=0 raja-grewal 2025-11-10 06:13:35 +00:00
• b89aaea61e
  Add docs on logging martian packets raja-grewal 2025-11-10 06:03:33 +00:00
• 5fbd42bbec
  Add kill-vboxdrmclient-on-shutdown.service Aaron Rainbolt 2025-11-09 18:38:54 -06:00
• 9d86379f56
  Prevent non-sysmaint logins in sysmaint mode and unsafe passwordless logins in user mode Aaron Rainbolt 2025-11-09 17:46:22 -06:00
• a3830db09e
  Update docs relating to panic on OOM raja-grewal 2025-11-09 13:42:31 +00:00
• 0aa0b67df6
  Merge branch 'master' into docs raja-grewal 2025-11-10 00:20:48 +11:00
• 0939883f0b
  bumped changelog version 49.7-1 Patrick Schleizer 2025-11-09 10:47:45 +00:00
• 0391411885
  revert Force immediate kernel panic on OOM. Patrick Schleizer 2025-11-09 05:47:00 -05:00
• 26b96ce280
  bumped changelog version 49.6-1 Patrick Schleizer 2025-11-09 08:12:42 +00:00
• e7310467df
  Merge 635c216d4e into 1ef974300a raja-grewal 2025-11-09 15:42:06 +11:00
• 1ef974300a
  readme Patrick Schleizer 2025-11-08 04:00:47 -05:00
• 48ce12eba3
  bumped changelog version 49.5-1 Patrick Schleizer 2025-11-08 07:44:43 +00:00
• 69419357e1
  genmkfile debinstfile Patrick Schleizer 2025-11-08 02:42:25 -05:00
• d50e6afc8f
  sanity test Patrick Schleizer 2025-11-08 01:34:32 -05:00
• 1267960842
  comments Patrick Schleizer 2025-11-08 01:32:45 -05:00
• 1e48886c7e
  long option name Patrick Schleizer 2025-11-08 01:31:02 -05:00
• d6c949c791
  Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie' Patrick Schleizer 2025-11-08 01:29:48 -05:00
• fa32ba6c4f
  Suppress usbguard startup unless a USB controller is visible to lspci Aaron Rainbolt 2025-11-07 17:09:22 -06:00
• 635c216d4e
  Update docs on CPU mitigations raja-grewal 2025-11-05 01:44:36 +00:00
• a46f678c7f
  Update docs on latent entropy raja-grewal 2025-11-05 00:05:17 +00:00
• 37b493826e
  Spit distrusting entropy settings for clarity raja-grewal 2025-11-05 00:03:54 +00:00
• 019a0cf72c
  Update docs on entropy raja-grewal 2025-11-05 00:03:19 +00:00
• 4c88b91141
  Merge branch 'Kicksecure:master' into docs raja-grewal 2025-11-05 10:10:10 +11:00
• e43d4d7f71
  Set bdev_allow_write_mounted=0 raja-grewal 2025-11-03 05:46:07 +00:00
• b89e92c89f
  Merge 53d90b1128 into 5b97e7bd27 raja-grewal 2025-11-03 15:44:42 +11:00
• 53d90b1128
  Update docs on ssbd=force-on raja-grewal 2025-11-03 04:32:49 +00:00
• 322584db33
  Update docs on pti=on raja-grewal 2025-11-03 04:31:59 +00:00
• 5e87c9bea4
  Set kpti=1 raja-grewal 2025-11-03 04:30:58 +00:00
• 3fdfebc464
  Set proc_mem.force_override=ptrace raja-grewal 2025-11-03 00:48:49 +00:00
• 5b97e7bd27
  bumped changelog version 49.4-1 Patrick Schleizer 2025-11-02 11:41:51 +00:00
• 58d5f738e6
  Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie' Patrick Schleizer 2025-11-02 06:08:46 -05:00
• 5121f80f28
  comment Patrick Schleizer 2025-11-02 06:00:24 -05:00
• 29685938bd
  move usbguard reject rules to the top Patrick Schleizer 2025-11-02 05:57:52 -05:00
• c5f91eb33a
  Add another method to disable 32-bit legacy vsyscalls raja-grewal 2025-11-02 06:15:06 +00:00
• d175d1be52
  Add doc on entropy related failure on AMD Zen 5 CPUs raja-grewal 2025-11-02 15:54:34 +11:00
• 7beb19b64a
  Update README.md with info about flatpak auth hardening Aaron Rainbolt 2025-11-01 22:06:44 -05:00