Commit Graph

  • aa34d86598
    Enable slab_debug=FZ Raja Grewal 2024-08-05 14:27:17 +1000
  • 4f7f820160
    Add reference Raja Grewal 2024-08-05 14:16:33 +1000
  • fa9091869d
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-08-04 16:20:36 -0400
  • 725118c575
    Merge pull request #243 from raja-grewal/namespaces Patrick Schleizer 2024-08-04 16:19:52 -0400
  • 06f0c27128
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-08-04 16:15:01 -0400
  • 6d97408a6d
    Merge pull request #255 from raja-grewal/SLUB Patrick Schleizer 2024-08-04 16:11:46 -0400
  • 8abc5ae8f0
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-08-04 16:09:52 -0400
  • eab66dad09
    Merge pull request #254 from raja-grewal/patch Patrick Schleizer 2024-08-04 16:08:32 -0400
  • 6f14d68cdc
    Update legacy name slub_debug -> slab_debug Raja Grewal 2024-08-03 15:12:15 +1000
  • 22b6cee80c
    Add details about slub_debug Raja Grewal 2024-08-03 15:11:14 +1000
  • b77d1a2b98
    Revert "Remove the optional slub_debug parameter since it is no longer recommended" Raja Grewal 2024-08-03 14:49:48 +1000
  • ca2179bb6a
    Provide the option to disable legacy TIOCSTI operation Raja Grewal 2024-08-03 00:25:49 +1000
  • 52aeacb4da
    Provide option to disable 32 bit vDSO mappings Raja Grewal 2024-08-03 00:13:38 +1000
  • 9099ecce8a
    Provide option to enable the kernel Electric-Fence Raja Grewal 2024-08-03 00:12:50 +1000
  • f6a16258a1
    Add references to KSPP Raja Grewal 2024-08-03 00:11:06 +1000
  • e53d24fc48
    Add missing GRUB command lines for disabled boot parameters Raja Grewal 2024-08-03 00:09:42 +1000
  • be28c79be2
    Create tar Rodney 2024-07-31 01:13:05 +0000
  • de6f3ea74a
    bumped changelog version 38.7-1 Patrick Schleizer 2024-07-28 20:50:22 +0000
  • d036094089
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-07-28 15:44:40 -0400
  • 0f86fbd8ce
    Merge pull request #242 from raja-grewal/ptrace Patrick Schleizer 2024-07-28 15:43:54 -0400
  • 9cabaa1bd1
    Typo Raja Grewal 2024-07-28 22:04:30 +1000
  • d2d024ebe9
    Typo Raja Grewal 2024-07-28 22:03:33 +1000
  • 9fbee9fc82
    Clarify Raja Grewal 2024-07-28 21:57:25 +1000
  • e60ce50d30
    bumped changelog version 38.6-1 Patrick Schleizer 2024-07-27 16:13:35 +0000
  • e86b2e7f8f
    output Patrick Schleizer 2024-07-27 12:13:18 -0400
  • 1445457626
    Show details regarding secure_redirects (again) Raja Grewal 2024-07-27 14:00:30 +1000
  • 73979d4342
    Link to ptrace() discussion Raja Grewal 2024-07-27 13:28:59 +1000
  • 1c9f33f906
    Revert "Disable the usage of ptrace() by all processes" Raja Grewal 2024-07-27 13:24:08 +1000
  • 330cf14eab
    bumped changelog version 38.5-1 Patrick Schleizer 2024-07-26 15:40:24 +0000
  • 62bb4bc626
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-07-26 11:10:25 -0400
  • 886f6095db
    Merge pull request #250 from raja-grewal/Panik-Kalm Patrick Schleizer 2024-07-26 11:08:30 -0400
  • 7969e86071
    Merge remote-tracking branch 'github-kicksecure/master' Patrick Schleizer 2024-07-26 11:06:13 -0400
  • 0318f577ab
    Merge pull request #246 from raja-grewal/cfi Patrick Schleizer 2024-07-26 11:04:29 -0400
  • e2ae93a957
    port to safe_echo Patrick Schleizer 2024-07-26 10:30:45 -0400
  • 8ec23ed712
    echo does not support end-of-options Patrick Schleizer 2024-07-26 10:28:57 -0400
  • 6096ed1109
    comment Patrick Schleizer 2024-07-26 10:26:43 -0400
  • ac41d1cfff
    comment Patrick Schleizer 2024-07-26 10:25:59 -0400
  • 3b033ceba2
    shellcheck Patrick Schleizer 2024-07-26 10:17:24 -0400
  • 04d9ca1ebe
    use find with safe_echo_nonewline Patrick Schleizer 2024-07-26 10:16:20 -0400
  • 20454fb811
    Merge branch 'Kicksecure:master' into blacklist_to_disable raja-grewal 2024-07-27 00:09:30 +1000
  • 6bbf176e3b
    consider end-of-options for find Patrick Schleizer 2024-07-26 09:33:45 -0400
  • 794f6a25fa
    comment Patrick Schleizer 2024-07-26 09:08:29 -0400
  • 7e0f1a8701
    dpkg-statoverride can actually handle '--file-name'. Patrick Schleizer 2024-07-26 09:08:04 -0400
  • ee037c01a1
    Skip file names starting with '--', Patrick Schleizer 2024-07-26 08:58:44 -0400
  • 82d401a7de
    sanity test Patrick Schleizer 2024-07-26 08:52:42 -0400
  • 0e661bc688
    output Patrick Schleizer 2024-07-26 08:49:14 -0400
  • d144f68d1a
    output Patrick Schleizer 2024-07-26 08:46:08 -0400
  • 05504b9ab2
    minor Patrick Schleizer 2024-07-26 08:40:10 -0400
  • d96c0633d4
    more use of end of options Patrick Schleizer 2024-07-26 08:39:11 -0400
  • 8e40c10c31
    comment Patrick Schleizer 2024-07-26 08:31:17 -0400
  • f2c9c2f5d1
    output Patrick Schleizer 2024-07-26 08:26:16 -0400
  • 2b40ea75e9
    cleanup Patrick Schleizer 2024-07-26 08:24:23 -0400
  • 6f0551b944
    refactoring Patrick Schleizer 2024-07-26 08:23:54 -0400
  • aac450f808
    refactoring Patrick Schleizer 2024-07-26 08:22:04 -0400
  • 30f46790a4
    use end of options whenever possible Patrick Schleizer 2024-07-26 08:21:21 -0400
  • 95722d6d79
    use long option name Patrick Schleizer 2024-07-26 08:13:33 -0400
  • 19f131c742
    code simplification Patrick Schleizer 2024-07-26 08:07:08 -0400
  • 9694cf0cd1
    output Patrick Schleizer 2024-07-26 07:43:59 -0400
  • bdfe764f9d
    Merge remote-tracking branch 'ben-grande/stat-dedup' Patrick Schleizer 2024-07-26 07:19:05 -0400
  • 9f135231cc
    no longer disable Intel ME related kernel modules Patrick Schleizer 2024-07-26 06:43:01 -0400
  • f616da7c06
    bumped changelog version 38.4-1 Patrick Schleizer 2024-07-26 09:40:59 +0000
  • 4397de0138
    Update description of cfi=kcfi kerenel parameter Raja Grewal 2024-07-26 11:30:46 +1000
  • 652a06c8e9
    Only print SUID or SGID values when set Ben Grande 2024-07-25 12:37:21 +0200
  • 3b8a3f9b83
    Unduplicate stat call Ben Grande 2024-07-25 12:20:16 +0200
  • 28b25bda3f
    Partial inclusion of GrapheneOS infrastructure blacklist Raja Grewal 2024-07-25 15:51:32 +1000
  • ed3336694c
    Provide the option to immediately reboot on a kernel panics Raja Grewal 2024-07-25 10:28:27 +1000
  • 3926b91dcf
    Add documentation on sysctl kernel.panic_on_oops=1 Raja Grewal 2024-07-25 10:26:23 +1000
  • f699eb02a2
    Set sysctl fs.binfmt_misc.status=0 Raja Grewal 2024-07-25 10:11:33 +1000
  • 9231f05891
    todo Patrick Schleizer 2024-07-24 13:31:49 -0400
  • 4cc1289e89
    output Patrick Schleizer 2024-07-24 13:30:30 -0400
  • 10c73b326f
    fix delimiter parsing Patrick Schleizer 2024-07-24 12:07:26 -0400
  • a16dd8474b
    sanity test Patrick Schleizer 2024-07-24 11:50:30 -0400
  • cc2b335ee6
    cleanup Patrick Schleizer 2024-07-24 11:48:32 -0400
  • 6cadc70a96
    output Patrick Schleizer 2024-07-24 11:47:52 -0400
  • cda0d26af7
    cannot use NULL inside a bash variable Patrick Schleizer 2024-07-24 11:45:13 -0400
  • 4a5312b3a9
    output Patrick Schleizer 2024-07-24 11:27:51 -0400
  • 3bf1f26c0b
    downgrade warning of non-existing folders to info Patrick Schleizer 2024-07-24 11:20:26 -0400
  • 151ca659a9
    output Patrick Schleizer 2024-07-24 11:19:15 -0400
  • c9fd2ceb61
    downgrade warning of non-existing files to info Patrick Schleizer 2024-07-24 11:13:35 -0400
  • 721392901b
    remove duplicate test Patrick Schleizer 2024-07-24 11:12:39 -0400
  • 9712b5b4e3
    output Patrick Schleizer 2024-07-24 11:12:18 -0400
  • 00911df5c1
    modify call of stat to use NUL delimiter Patrick Schleizer 2024-07-24 11:10:56 -0400
  • d536683511
    local clean_output_prefix clean_output Patrick Schleizer 2024-07-24 11:03:28 -0400
  • a6e517736b
    local stat_output Patrick Schleizer 2024-07-24 11:02:25 -0400
  • ced02fb9e0
    add sanity test for file_name output from stat Patrick Schleizer 2024-07-24 11:01:24 -0400
  • b9dfe70a01
    check first if file_name is empty Patrick Schleizer 2024-07-24 10:58:05 -0400
  • 1cbda79981
    check first if array is empty before parsing further Patrick Schleizer 2024-07-24 10:57:13 -0400
  • a077ae54ea
    modify call of stat to use NUL delimiter Patrick Schleizer 2024-07-24 10:56:08 -0400
  • 1135d34ab3
    Reword description of cfi=kcfi kerenel parameter Raja Grewal 2024-07-24 23:33:36 +1000
  • 7200e9bd8c
    output Patrick Schleizer 2024-07-24 09:15:02 -0400
  • 1b6161c2dc
    Merge remote-tracking branch 'ben-grande/fuzz' Patrick Schleizer 2024-07-24 09:13:48 -0400
  • 88c88187f2
    Re-enable (default) secure_redirects for ICMP redirect messages Raja Grewal 2024-07-24 17:26:50 +1000
  • 8be21b6eff
    Handle newlines in file names Ben Grande 2024-07-23 19:36:12 +0200
  • aa99de68d3
    Log output with defined levels Ben Grande 2024-07-23 18:46:47 +0200
  • 06fbcdac1d
    Prettify log messages Ben Grande 2024-07-23 09:55:02 +0200
  • fb494c2ba5
    Update docs relating to the cfi=kcfi kernel parameter Raja Grewal 2024-07-23 13:12:13 +1000
  • 7ee1ea2cc7
    Unify functions that evaluate commands Ben Grande 2024-07-22 17:06:07 +0200
  • 9c3566f524
    Delimit file names with null terminator Ben Grande 2024-07-22 16:01:14 +0200
  • d6fc71dba7
    Add option to switch (back) to using kCFI in the future Raja Grewal 2024-07-22 17:26:00 +1000
  • f582e54343
    Merge branch 'Kicksecure:master' into blacklist_to_disable raja-grewal 2024-07-22 15:12:00 +1000