Commit Graph

Select branches

Hide Pull Requests

Whonix13

gitconfig

master

permission-hardener-mount

#1

#10

#100

#101

#103

#104

#108

#109

#11

#110

#111

#112

#113

#114

#115

#118

#119

#12

#120

#121

#122

#124

#125

#126

#129

#13

#131

#133

#134

#135

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#16

#165

#166

#166

#167

#17

#170

#171

#176

#178

#18

#181

#182

#183

#19

#193

#194

#195

#197

#2

#20

#200

#202

#204

#21

#211

#216

#218

#219

#22

#220

#221

#222

#226

#227

#228

#228

#229

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#254

#255

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#268

#269

#27

#270

#272

#273

#276

#279

#28

#280

#282

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#3

#30

#31

#32

#33

#34

#35

#36

#37

#38

#39

#4

#40

#41

#42

#43

#44

#45

#46

#47

#48

#49

#5

#50

#51

#52

#53

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

#98

#99

0.4-1

0.6-1

0.7-1

0.8-1

1.3-1

1.4-1

1.5-1

1.6-1

1.7-1

1.8-1

1.9-1

10.1-1

10.2-1

10.3-1

10.4-1

10.5-1

10.6-1

10.7-1

10.8-1

10.9-1

11.0-1

11.1-1

11.2-1

11.3-1

11.4-1

11.5-1

11.6-1

11.7-1

11.8-1

11.9-1

12.0-1

12.1-1

12.2-1

12.3-1

12.4-1

12.5-1

12.6-1

12.7-1

12.8-1

12.9-1

13.0-1

13.1-1

13.2-1

13.3-1

13.4-1

13.5-1

13.6-1

13.7-1

13.8-1

13.9-1

14.0-1

14.1-1

14.2-1

14.3-1

14.4-1

14.5-1

14.6-1

14.7-1

14.8-1

14.9-1

15.0-1

15.1-1

15.2-1

15.3-1

15.4-1

15.5-1

15.6-1

15.7-1

15.8-1

15.9-1

16.0-1

16.1-1

16.2-1

16.3-1

16.4-1

16.5-1

16.6-1

16.7-1

16.8-1

16.9-1

17.0-1

17.1-1

17.2-1

17.3-1

17.4-1

17.5-1

17.6-1

17.7-1

17.8-1

17.9-1

18.0-1

18.1-1

18.2-1

18.3-1

18.4-1

18.5-1

18.6-1

18.7-1

18.8-1

18.9-1

19.0-1

19.1-1

19.2-1

19.3-1

19.4-1

19.5-1

19.6-1

19.7-1

19.8-1

19.9-1

2.0-1

2.1-1

2.2-1

2.3-1

2.4-1

2.5-1

2.6-1

2.7-1

2.8-1

2.9-1

20.0-1

20.1-1

20.2-1

20.3-1

20.4-1

20.5-1

20.6-1

20.7-1

20.8-1

20.9-1

21.0-1

21.1-1

21.2-1

21.3-1

21.4-1

21.5-1

21.6-1

21.7-1

21.8-1

21.9-1

22.0-1

22.1-1

22.2-1

22.3-1

22.4-1

22.5-1

22.6-1

22.7-1

22.8-1

22.9-1

23.0-1

23.1-1

23.2-1

23.3-1

23.4-1

23.5-1

23.6-1

23.7-1

23.8-1

23.9-1

24.0-1

24.1-1

24.2-1

24.3-1

24.4-1

24.5-1

24.6-1

24.7-1

24.8-1

24.9-1

25.0-1

25.1-1

25.2-1

25.3-1

25.4-1

25.5-1

25.6-1

25.7-1

25.8-1

25.9-1

26.0-1

26.1-1

26.2-1

26.3-1

26.4-1

26.5-1

26.6-1

26.7-1

26.8-1

26.9-1

27.0-1

27.1-1

27.2-1

27.3-1

27.4-1

27.5-1

27.6-1

27.7-1

27.8-1

27.9-1

28.0-1

28.1-1

28.2-1

28.3-1

28.4-1

28.5-1

28.6-1

28.7-1

28.8-1

28.9-1

29.0-1

29.1-1

29.2-1

29.3-1

29.4-1

29.5-1

29.6-1

29.7-1

29.8-1

29.9-1

3.0-1

3.1-1

3.2-1

3.3-1

3.4-1

3.5-1

3.6-1

3.7-1

3.8-1

3.9-1

30.0-1

30.1-1

30.2-1

30.3-1

30.5-1

30.6-1

30.7-1

30.8-1

30.9-1

31.0-1

31.1-1

31.2-1

31.3-1

31.4-1

31.5-1

31.6-1

31.7-1

31.8-1

31.9-1

32.0-1

32.1-1

32.2-1

32.3-1

32.4-1

32.5-1

32.6-1

32.7-1

32.8-1

32.9-1

33.0-1

33.1-1

33.2-1

33.3-1

33.4-1

33.5-1

33.6-1

33.7-1

33.8-1

33.9-1

34.0-1

34.1-1

34.2-1

34.3-1

34.4-1

34.5-1

34.6-1

34.7-1

34.8-1

34.9-1

35.0-1

35.1-1

35.2-1

35.3-1

35.4-1

35.5-1

35.6-1

35.7-1

35.8-1

35.9-1

36.0-1

36.1-1

36.2-1

36.3-1

36.4-1

36.5-1

36.6-1

36.7-1

36.8-1

36.9-1

37.0-1

37.1-1

37.2-1

37.3-1

37.4-1

37.5-1

37.6-1

37.7-1

37.8-1

37.9-1

38.0-1

38.1-1

38.2-1

38.3-1

38.4-1

38.5-1

38.6-1

38.7-1

38.8-1

38.9-1

39.0-1

39.1-1

39.2-1

39.3-1

39.4-1

39.5-1

39.6-1

39.7-1

39.8-1

39.9-1

4.0-1

4.1-1

4.2-1

4.3-1

4.4-1

4.5-1

4.6-1

4.7-1

4.8-1

4.9-1

40.0-1

40.1-1

40.2-1

40.3-1

40.4-1

40.5-1

40.6-1

40.7-1

40.8-1

40.9-1

41.0-1

41.1-1

41.2-1

41.3-1

41.4-1

41.5-1

41.6-1

41.7-1

41.8-1

41.9-1

42.0-1

42.1-1

42.2-1

42.3-1

42.4-1

42.5-1

42.6-1

42.7-1

42.8-1

42.9-1

43.0-1

43.1-1

43.2-1

43.3-1

43.4-1

43.5-1

43.6-1

43.7-1

43.8-1

43.9-1

44.0-1

44.1-1

44.2-1

44.3-1

5.0-1

5.1-1

5.2-1

5.3-1

5.4-1

5.5-1

5.6-1

5.7-1

5.8-1

5.9-1

6.0-1

6.1-1

6.2-1

6.3-1

6.4-1

6.5-1

6.6-1

6.7-1

6.8-1

6.9-1

7.0-1

7.1-1

7.2-1

7.3-1

7.4-1

7.5-1

7.6-1

7.7-1

7.8-1

7.9-1

8.0-1

8.1-1

8.2-1

8.3-1

8.4-1

8.5-1

8.6-1

8.7-1

8.8-1

8.9-1

9.0-1

9.1-1

9.10-1

9.11-1

9.12-1

9.2-1

9.3-1

9.4-1

9.5-1

9.6-1

9.7-1

9.8-1

9.9-1

Mono Color

• ee9c5742da
  output Patrick Schleizer 2019-12-23 01:29:48 -05:00
• 6d05359abc
  output Patrick Schleizer 2019-12-23 01:21:52 -05:00
• a1e78e8515
  fix needlessly re-adding entries Patrick Schleizer 2019-12-23 01:20:56 -05:00
• 906b3d32e7
  output Patrick Schleizer 2019-12-23 01:09:57 -05:00
• 4f76867da6
  lower debugging Patrick Schleizer 2019-12-23 01:08:02 -05:00
• dc6e5d8508
  fix Patrick Schleizer 2019-12-23 01:06:38 -05:00
• 87b999f92a
  refactoring Patrick Schleizer 2019-12-23 00:59:43 -05:00
• 065ff4bd05
  sanity_tests Patrick Schleizer 2019-12-23 00:59:24 -05:00
• fef1469fe6
  exit non-zero if capability removal failed Patrick Schleizer 2019-12-23 00:51:14 -05:00
• 3670fcf48b
  depend on libcap2-bin for setcap / getcap / capsh Patrick Schleizer 2019-12-23 00:49:33 -05:00
• 17a8c29470
  fix capability removal error handling Patrick Schleizer 2019-12-23 00:47:49 -05:00
• b631e2ecd8
  refactoring Patrick Schleizer 2019-12-23 00:36:41 -05:00
• 7aea304549
  comment Patrick Schleizer 2019-12-23 00:26:15 -05:00
• f4b1df02ee
  Remove suid / gid and execute permission for 'group' and 'others'. Patrick Schleizer 2019-12-22 19:42:40 -05:00
• 58a4e0bc7d
  dbus-daemon-launch-helper matchwhitelist Patrick Schleizer 2019-12-22 19:12:10 -05:00
• 15e3a2832d
  comment Patrick Schleizer 2019-12-22 18:57:23 -05:00
• 6eb8fd257a
  suid utempter/utempter matchwhitelist Patrick Schleizer 2019-12-22 18:56:36 -05:00
• 9409209b48
  Merge remote-tracking branch 'origin/master' Patrick Schleizer 2019-12-22 10:29:08 -05:00
• bce02ffdc0
  Merge pull request #47 from madaidan/msr Patrick Schleizer 2019-12-22 15:26:07 +00:00
• 8f11a520f4
  Update control madaidan 2019-12-22 13:54:16 +00:00
• dd93b11321
  Blacklist CPU MSRs madaidan 2019-12-22 13:52:43 +00:00
• 008ce4817c
  bumped changelog version 12.9-1 Patrick Schleizer 2019-12-21 14:55:03 -05:00
• d300db3cde
  output Patrick Schleizer 2019-12-21 14:45:11 -05:00
• 3921846df6
  comment Patrick Schleizer 2019-12-21 14:36:42 -05:00
• 1213415ce6
  bumped changelog version 12.8-1 Patrick Schleizer 2019-12-21 14:23:35 -05:00
• 2ddf7b5db5
  /lib/ nosuid Patrick Schleizer 2019-12-21 14:06:51 -05:00
• 1e8457ea47
  no longer remount /lib Patrick Schleizer 2019-12-21 14:06:10 -05:00
• 10c19d6a8f
  Merge remote-tracking branch 'origin/master' Patrick Schleizer 2019-12-21 13:00:41 -05:00
• fffdf5090c
  Merge pull request #46 from madaidan/remount-secure Patrick Schleizer 2019-12-21 17:59:56 +00:00
• f5a52aeddc
  Don't remount /sys/kernel/security madaidan 2019-12-21 14:55:28 +00:00
• b2260f48f4
  add support for /etc/exec / /usr/local/etc/exec Patrick Schleizer 2019-12-21 08:03:33 -05:00
• 1c99b56c9b
  bumped changelog version 12.7-1 Patrick Schleizer 2019-12-21 07:49:55 -05:00
• 161b6f6b88
  readme Patrick Schleizer 2019-12-21 07:49:29 -05:00
• b74e5ca972
  comment Patrick Schleizer 2019-12-21 07:47:00 -05:00
• 8fb17624bc
  comment Patrick Schleizer 2019-12-21 07:44:51 -05:00
• aef796a524
  disable debugging Patrick Schleizer 2019-12-21 07:44:23 -05:00
• 1fe83d683f
  comment Patrick Schleizer 2019-12-21 07:43:55 -05:00
• 7c3da38bd5
  comment Patrick Schleizer 2019-12-21 07:42:25 -05:00
• 9050058bc2
  fix Patrick Schleizer 2019-12-21 07:42:01 -05:00
• 0c4db8c2b0
  bumped changelog version 12.6-1 Patrick Schleizer 2019-12-21 07:38:25 -05:00
• 6b13a644df
  add /usr/lib/security-misc/permission-hardening-undo Patrick Schleizer 2019-12-21 07:37:41 -05:00
• af8b04b73d
  rm_conffile /etc/apparmor.d/usr.lib.security-misc.pam_tally2-info rm_conffile /etc/apparmor.d/usr.lib.security-misc.permission-lockdown Patrick Schleizer 2019-12-21 06:58:01 -05:00
• 2350e0f5d0
  Merge remote-tracking branch 'origin/master' Patrick Schleizer 2019-12-21 06:57:10 -05:00
• efd65a3f15
  Merge pull request #45 from madaidan/apparmor Patrick Schleizer 2019-12-21 11:56:31 +00:00
• 3ea587187e
  no need to exclude xorg nosuid on Debian Patrick Schleizer 2019-12-21 06:53:07 -05:00
• c336bc4fd2
  comment Patrick Schleizer 2019-12-21 06:39:13 -05:00
• fac17a963d
  bumped changelog version 12.5-1 Patrick Schleizer 2019-12-21 06:28:19 -05:00
• b5f88efe20
  fix Patrick Schleizer 2019-12-21 06:27:01 -05:00
• 2088628c8d
  debugging Patrick Schleizer 2019-12-21 06:24:08 -05:00
• 2dca031527
  debugging Patrick Schleizer 2019-12-21 06:22:46 -05:00
• 195e00cc87
  output Patrick Schleizer 2019-12-21 06:16:38 -05:00
• 78d33d8b57
  bumped changelog version 12.4-1 Patrick Schleizer 2019-12-21 06:12:20 -05:00
• 4b21b6df41
  fix Patrick Schleizer 2019-12-21 06:11:44 -05:00
• ff48b672a8
  bumped changelog version 12.3-1 Patrick Schleizer 2019-12-21 06:00:17 -05:00
• 8436da2b7b
  output Patrick Schleizer 2019-12-21 05:58:50 -05:00
• da15265e1c
  fix Patrick Schleizer 2019-12-21 05:55:23 -05:00
• 2a248fe0de
  fix Patrick Schleizer 2019-12-21 05:54:39 -05:00
• 4f12664362
  output Patrick Schleizer 2019-12-21 05:54:07 -05:00
• e3355843c8
  fix Patrick Schleizer 2019-12-21 05:51:22 -05:00
• 234ec5fe93
  fix Patrick Schleizer 2019-12-21 05:47:35 -05:00
• 65b5adb2d7
  bumped changelog version 12.2-1 Patrick Schleizer 2019-12-21 05:38:39 -05:00
• 7ff900c204
  fix Patrick Schleizer 2019-12-21 05:37:43 -05:00
• 2b5a49a61b
  bumped changelog version 12.1-1 Patrick Schleizer 2019-12-21 05:31:55 -05:00
• e1a5ee4bcf
  output Patrick Schleizer 2019-12-21 05:26:55 -05:00
• 66aaf3e22c
  output Patrick Schleizer 2019-12-21 05:25:54 -05:00
• 7aa7d0b5a0
  improve error handling Patrick Schleizer 2019-12-21 05:22:27 -05:00
• 8919d38de9
  disable debugging Patrick Schleizer 2019-12-21 05:21:46 -05:00
• cf5dee64fd
  refactoring Patrick Schleizer 2019-12-21 05:18:34 -05:00
• 29cd9a0c38
  fix Patrick Schleizer 2019-12-21 05:17:35 -05:00
• 486027a4d7
  fix Patrick Schleizer 2019-12-21 05:15:38 -05:00
• 1fd26be864
  fix Patrick Schleizer 2019-12-21 05:14:51 -05:00
• 0fc97c37be
  fix Patrick Schleizer 2019-12-21 05:14:39 -05:00
• 1018d5b3b0
  output Patrick Schleizer 2019-12-21 05:11:51 -05:00
• 4388fc4d5a
  refactoring Patrick Schleizer 2019-12-21 05:11:19 -05:00
• ed20980f4c
  refactoring Patrick Schleizer 2019-12-21 05:07:10 -05:00
• 315ce86b9a
  refactoring Patrick Schleizer 2019-12-21 04:33:03 -05:00
• 0c5848494b
  do not remount if already has intended mount options Patrick Schleizer 2019-12-21 04:21:26 -05:00
• 203f4ad46e
  refactoring Patrick Schleizer 2019-12-21 04:17:10 -05:00
• e7fd0dadb0
  output Patrick Schleizer 2019-12-21 04:09:35 -05:00
• e6ea21c775
  record existing modes in separate dpkg-statoverwrite databases Patrick Schleizer 2019-12-21 04:08:35 -05:00
• 89be5f2ecb
  bumped changelog version 12.0-1 Patrick Schleizer 2019-12-21 02:05:39 -05:00
• c28ddf5c4d
  Delete usr.lib.security-misc.pam_tally2-info madaidan 2019-12-20 22:44:31 +00:00
• cfe69dd669
  Delete usr.lib.security-misc.permission-lockdown madaidan 2019-12-20 22:44:27 +00:00
• d220bb3bc4
  suid /usr/lib/chromium/chrome-sandbox whitelist Patrick Schleizer 2019-12-20 13:07:01 -05:00
• 77b3dd5d6b
  comments Patrick Schleizer 2019-12-20 13:02:33 -05:00
• d7bd477e73
  add "/usr/lib/xorg/Xorg.wrap whitelist" Patrick Schleizer 2019-12-20 12:59:27 -05:00
• 17e8605119
  add matchwhitelist feature Patrick Schleizer 2019-12-20 12:57:24 -05:00
• 3fab387669
  suid /usr/bin/firejail whitelist Patrick Schleizer 2019-12-20 12:50:35 -05:00
• d3f16a5bf4
  sgid /usr/lib/qubes/qfile-unpacker whitelist Patrick Schleizer 2019-12-20 12:47:10 -05:00
• 508ec0c6fa
  comment Patrick Schleizer 2019-12-20 12:34:07 -05:00
• 1b569ea790
  comment Patrick Schleizer 2019-12-20 12:32:36 -05:00
• f88ca25889
  fix terminology, sguid -> sgid Patrick Schleizer 2019-12-20 11:58:07 -05:00
• 1cd5fb6a00
  bumped changelog version 11.9-1 Patrick Schleizer 2019-12-20 11:50:25 -05:00
• ff0a26fb5d
  comment Patrick Schleizer 2019-12-20 11:49:19 -05:00
• 71496a33ab
  skip folders are these are not suid / guid Patrick Schleizer 2019-12-20 11:47:53 -05:00
• 9321ecff41
  no more need to add/remove / Patrick Schleizer 2019-12-20 11:43:53 -05:00
• b95225b6a6
  pipefail Patrick Schleizer 2019-12-20 11:37:05 -05:00
• cad6f328f4
  minor Patrick Schleizer 2019-12-20 11:34:44 -05:00
• 3265f9894d
  output Patrick Schleizer 2019-12-20 11:27:43 -05:00
• 28d12c3966
  bumped changelog version 11.8-1 Patrick Schleizer 2019-12-20 11:09:22 -05:00