Commit Graph

Select branches

Hide Pull Requests

Whonix13

gitconfig

master

permission-hardener-mount

#1

#10

#100

#101

#103

#104

#108

#109

#11

#110

#111

#112

#113

#114

#115

#118

#119

#12

#120

#121

#122

#124

#125

#126

#129

#13

#131

#133

#134

#135

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#16

#165

#166

#166

#167

#17

#170

#171

#176

#178

#18

#181

#182

#183

#19

#193

#194

#195

#197

#2

#20

#200

#202

#204

#21

#211

#216

#218

#219

#22

#220

#221

#222

#226

#227

#228

#228

#229

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#254

#255

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#268

#269

#27

#270

#272

#273

#276

#279

#28

#280

#282

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#3

#30

#31

#32

#33

#34

#35

#36

#37

#38

#39

#4

#40

#41

#42

#43

#44

#45

#46

#47

#48

#49

#5

#50

#51

#52

#53

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

#98

#99

0.4-1

0.6-1

0.7-1

0.8-1

1.3-1

1.4-1

1.5-1

1.6-1

1.7-1

1.8-1

1.9-1

10.1-1

10.2-1

10.3-1

10.4-1

10.5-1

10.6-1

10.7-1

10.8-1

10.9-1

11.0-1

11.1-1

11.2-1

11.3-1

11.4-1

11.5-1

11.6-1

11.7-1

11.8-1

11.9-1

12.0-1

12.1-1

12.2-1

12.3-1

12.4-1

12.5-1

12.6-1

12.7-1

12.8-1

12.9-1

13.0-1

13.1-1

13.2-1

13.3-1

13.4-1

13.5-1

13.6-1

13.7-1

13.8-1

13.9-1

14.0-1

14.1-1

14.2-1

14.3-1

14.4-1

14.5-1

14.6-1

14.7-1

14.8-1

14.9-1

15.0-1

15.1-1

15.2-1

15.3-1

15.4-1

15.5-1

15.6-1

15.7-1

15.8-1

15.9-1

16.0-1

16.1-1

16.2-1

16.3-1

16.4-1

16.5-1

16.6-1

16.7-1

16.8-1

16.9-1

17.0-1

17.1-1

17.2-1

17.3-1

17.4-1

17.5-1

17.6-1

17.7-1

17.8-1

17.9-1

18.0-1

18.1-1

18.2-1

18.3-1

18.4-1

18.5-1

18.6-1

18.7-1

18.8-1

18.9-1

19.0-1

19.1-1

19.2-1

19.3-1

19.4-1

19.5-1

19.6-1

19.7-1

19.8-1

19.9-1

2.0-1

2.1-1

2.2-1

2.3-1

2.4-1

2.5-1

2.6-1

2.7-1

2.8-1

2.9-1

20.0-1

20.1-1

20.2-1

20.3-1

20.4-1

20.5-1

20.6-1

20.7-1

20.8-1

20.9-1

21.0-1

21.1-1

21.2-1

21.3-1

21.4-1

21.5-1

21.6-1

21.7-1

21.8-1

21.9-1

22.0-1

22.1-1

22.2-1

22.3-1

22.4-1

22.5-1

22.6-1

22.7-1

22.8-1

22.9-1

23.0-1

23.1-1

23.2-1

23.3-1

23.4-1

23.5-1

23.6-1

23.7-1

23.8-1

23.9-1

24.0-1

24.1-1

24.2-1

24.3-1

24.4-1

24.5-1

24.6-1

24.7-1

24.8-1

24.9-1

25.0-1

25.1-1

25.2-1

25.3-1

25.4-1

25.5-1

25.6-1

25.7-1

25.8-1

25.9-1

26.0-1

26.1-1

26.2-1

26.3-1

26.4-1

26.5-1

26.6-1

26.7-1

26.8-1

26.9-1

27.0-1

27.1-1

27.2-1

27.3-1

27.4-1

27.5-1

27.6-1

27.7-1

27.8-1

27.9-1

28.0-1

28.1-1

28.2-1

28.3-1

28.4-1

28.5-1

28.6-1

28.7-1

28.8-1

28.9-1

29.0-1

29.1-1

29.2-1

29.3-1

29.4-1

29.5-1

29.6-1

29.7-1

29.8-1

29.9-1

3.0-1

3.1-1

3.2-1

3.3-1

3.4-1

3.5-1

3.6-1

3.7-1

3.8-1

3.9-1

30.0-1

30.1-1

30.2-1

30.3-1

30.5-1

30.6-1

30.7-1

30.8-1

30.9-1

31.0-1

31.1-1

31.2-1

31.3-1

31.4-1

31.5-1

31.6-1

31.7-1

31.8-1

31.9-1

32.0-1

32.1-1

32.2-1

32.3-1

32.4-1

32.5-1

32.6-1

32.7-1

32.8-1

32.9-1

33.0-1

33.1-1

33.2-1

33.3-1

33.4-1

33.5-1

33.6-1

33.7-1

33.8-1

33.9-1

34.0-1

34.1-1

34.2-1

34.3-1

34.4-1

34.5-1

34.6-1

34.7-1

34.8-1

34.9-1

35.0-1

35.1-1

35.2-1

35.3-1

35.4-1

35.5-1

35.6-1

35.7-1

35.8-1

35.9-1

36.0-1

36.1-1

36.2-1

36.3-1

36.4-1

36.5-1

36.6-1

36.7-1

36.8-1

36.9-1

37.0-1

37.1-1

37.2-1

37.3-1

37.4-1

37.5-1

37.6-1

37.7-1

37.8-1

37.9-1

38.0-1

38.1-1

38.2-1

38.3-1

38.4-1

38.5-1

38.6-1

38.7-1

38.8-1

38.9-1

39.0-1

39.1-1

39.2-1

39.3-1

39.4-1

39.5-1

39.6-1

39.7-1

39.8-1

39.9-1

4.0-1

4.1-1

4.2-1

4.3-1

4.4-1

4.5-1

4.6-1

4.7-1

4.8-1

4.9-1

40.0-1

40.1-1

40.2-1

40.3-1

40.4-1

40.5-1

40.6-1

40.7-1

40.8-1

40.9-1

41.0-1

41.1-1

41.2-1

41.3-1

41.4-1

41.5-1

41.6-1

41.7-1

41.8-1

41.9-1

42.0-1

42.1-1

42.2-1

42.3-1

42.4-1

42.5-1

42.6-1

42.7-1

42.8-1

42.9-1

43.0-1

43.1-1

43.2-1

43.3-1

43.4-1

43.5-1

43.6-1

43.7-1

43.8-1

43.9-1

44.0-1

44.1-1

44.2-1

44.3-1

5.0-1

5.1-1

5.2-1

5.3-1

5.4-1

5.5-1

5.6-1

5.7-1

5.8-1

5.9-1

6.0-1

6.1-1

6.2-1

6.3-1

6.4-1

6.5-1

6.6-1

6.7-1

6.8-1

6.9-1

7.0-1

7.1-1

7.2-1

7.3-1

7.4-1

7.5-1

7.6-1

7.7-1

7.8-1

7.9-1

8.0-1

8.1-1

8.2-1

8.3-1

8.4-1

8.5-1

8.6-1

8.7-1

8.8-1

8.9-1

9.0-1

9.1-1

9.10-1

9.11-1

9.12-1

9.2-1

9.3-1

9.4-1

9.5-1

9.6-1

9.7-1

9.8-1

9.9-1

Mono Color

• 9df7407286
  Remove SUID bits madaidan 2019-12-19 17:01:33 +00:00
• 3c2ca0257f
  Support for removing SUID bits madaidan 2019-12-19 17:01:08 +00:00
• a2f5cfe05f
  Update control madaidan 2019-12-18 20:47:47 +00:00
• cd9c602925
  More kernel hardening madaidan 2019-12-18 20:43:01 +00:00
• 62eb462920
  skip console_users_check for Qubes users Patrick Schleizer 2019-12-16 06:46:48 -05:00
• ab68182e11
  bumped changelog version 11.4-1 Patrick Schleizer 2019-12-16 06:27:51 -05:00
• 2cab38a8b3
  readme Patrick Schleizer 2019-12-16 06:24:14 -05:00
• 4ca9fc5920
  fix Patrick Schleizer 2019-12-16 03:53:10 -05:00
• f68efd53cf
  remount /sys/kernel/security with nodev,nosuid[,noexec] Patrick Schleizer 2019-12-16 03:52:09 -05:00
• 2c4170e6f3
  description Patrick Schleizer 2019-12-12 09:47:58 -05:00
• 2d5ef378f3
  description Patrick Schleizer 2019-12-12 09:39:39 -05:00
• 300f010fc2
  increase priority of pam-abort-on-locked-password-security-misc Patrick Schleizer 2019-12-12 09:29:00 -05:00
• a10597de92
  bumped changelog version 11.3-1 Patrick Schleizer 2019-12-12 09:04:15 -05:00
• 729fa26eca
  use pam_acccess only for /etc/pam.d/login remove "Allow members of group 'ssh' to login." remove "+:ssh:ALL EXCEPT LOCAL" Patrick Schleizer 2019-12-12 09:00:08 -05:00
• 22b6480bc4
  bumped changelog version 11.2-1 Patrick Schleizer 2019-12-10 11:44:02 -05:00
• 88bea2a6ef
  comment Patrick Schleizer 2019-12-10 03:53:10 -05:00
• 7d8001ddc9
  refactoring Patrick Schleizer 2019-12-10 03:51:39 -05:00
• d2f6ac0491
  fix, do user/group modifications in preinst rather than postinst Patrick Schleizer 2019-12-10 03:50:23 -05:00
• 64ae53edb9
  bumped changelog version 11.1-1 Patrick Schleizer 2019-12-09 08:25:30 -05:00
• d80bf036f3
  Disable permission hardening now until development finished / tested. Patrick Schleizer 2019-12-09 03:50:43 -05:00
• b72eb30056
  quotes Patrick Schleizer 2019-12-09 02:32:05 -05:00
• c258376b7e
  use read (built-in) rather than awk (external) Patrick Schleizer 2019-12-09 02:31:10 -05:00
• 02165201ab
  read -r; refactoring Patrick Schleizer 2019-12-09 02:23:43 -05:00
• 7467252122
  quotes Patrick Schleizer 2019-12-09 02:22:16 -05:00
• 9bea996017
  Merge remote-tracking branch 'origin/master' Patrick Schleizer 2019-12-09 02:21:47 -05:00
• af62da3445
  Merge pull request #42 from madaidan/permission-hardening Patrick Schleizer 2019-12-08 20:45:16 +00:00
• d7e2deae92
  Create permission-hardening.service madaidan 2019-12-08 16:50:54 +00:00
• 6c564f6e95
  Create permission-hardening.conf madaidan 2019-12-08 16:50:11 +00:00
• 61e19fa5f1
  Create permission-hardening madaidan 2019-12-08 16:49:28 +00:00
• 6f944234a9
  bumped changelog version 11.0-1 Patrick Schleizer 2019-12-08 05:26:29 -05:00
• e64741c01e
  readme Patrick Schleizer 2019-12-08 05:25:19 -05:00
• c192644ee3
  security-misc /usr/share/pam-configs/permission-lockdown-security-misc is no longer required, removed. Patrick Schleizer 2019-12-08 05:21:35 -05:00
• edcc2de71d
  bumped changelog version 10.9-1 Patrick Schleizer 2019-12-08 04:38:33 -05:00
• 1227ccd1f7
  After=qubes-sysinit.service Patrick Schleizer 2019-12-08 04:37:53 -05:00
• 17d81d0083
  bumped changelog version 10.8-1 Patrick Schleizer 2019-12-08 04:27:01 -05:00
• ebae9eef38
  skip sudo_users_check in Qubes Patrick Schleizer 2019-12-08 04:25:19 -05:00
• 53e4717c62
  bumped changelog version 10.7-1 Patrick Schleizer 2019-12-08 04:05:29 -05:00
• bc45ed385e
  readme Patrick Schleizer 2019-12-08 04:03:02 -05:00
• ac96708b24
  improve usr/bin/hardening-enable Patrick Schleizer 2019-12-08 04:01:11 -05:00
• a345a0fb64
  abort installation if ssh.service is enabled but no user is member of group ssh Patrick Schleizer 2019-12-08 03:27:12 -05:00
• 50ac03363f
  output Patrick Schleizer 2019-12-08 03:18:32 -05:00
• c7c65fe4e7
  higher priority usr/share/pam-configs/tally2-security-misc Patrick Schleizer 2019-12-08 03:15:53 -05:00
• 3bd0b3f837
  notify when attempting to use ssh but user is member of group ssh Patrick Schleizer 2019-12-08 03:10:41 -05:00
• cea598dc1a
  refactoring Patrick Schleizer 2019-12-08 02:43:05 -05:00
• 54f5e02c21
  comment Patrick Schleizer 2019-12-08 02:42:30 -05:00
• b4265195f4
  refactoring Patrick Schleizer 2019-12-08 02:41:36 -05:00
• 0f65b2e85c
  abort installation if no user is a member of group "console"; output Patrick Schleizer 2019-12-08 02:38:19 -05:00
• 1dbca1ea2d
  add usr/bin/hardening-enable Patrick Schleizer 2019-12-08 02:27:09 -05:00
• 19cc6d7555
  pam description Patrick Schleizer 2019-12-08 02:10:43 -05:00
• 24423b42f0
  description Patrick Schleizer 2019-12-08 02:03:05 -05:00
• 6b01e5be14
  comment Patrick Schleizer 2019-12-08 02:01:22 -05:00
• 66bebefc9f
  description Patrick Schleizer 2019-12-08 02:00:23 -05:00
• 52e0f104cc
  comment Patrick Schleizer 2019-12-08 01:59:55 -05:00
• 731d486fa0
  refactoring Patrick Schleizer 2019-12-08 01:58:58 -05:00
• 221a2df2a2
  refactoring Patrick Schleizer 2019-12-08 01:58:37 -05:00
• b871421a54
  usr/share/pam-configs/console-lockdown -> usr/share/pam-configs/console-lockdown-security-misc Patrick Schleizer 2019-12-08 01:57:43 -05:00
• d36669596f
  comment Patrick Schleizer 2019-12-08 01:56:30 -05:00
• 1a0f353708
  comment Patrick Schleizer 2019-12-08 01:47:40 -05:00
• eed1f0a462
  comment Patrick Schleizer 2019-12-08 01:46:32 -05:00
• 2491b62393
  refactoring, add all groups first before adding any users to any groups Patrick Schleizer 2019-12-08 01:43:45 -05:00
• 1464f01d19
  description Patrick Schleizer 2019-12-08 01:30:42 -05:00
• 491dd4d93d
  Merge remote-tracking branch 'origin/master' Patrick Schleizer 2019-12-08 01:22:16 -05:00
• a78a7e5571
  Merge pull request #41 from madaidan/system.map Patrick Schleizer 2019-12-08 06:21:44 +00:00
• 6846a94327
  Check for more locations of System.map madaidan 2019-12-07 19:38:12 +00:00
• 9432d16378
  /usr/bin/cat mrix, Patrick Schleizer 2019-12-07 12:13:42 -05:00
• 373e8733d3
  Merge remote-tracking branch 'origin/master' Patrick Schleizer 2019-12-07 11:34:42 -05:00
• 447eb14432
  Merge pull request #40 from madaidan/system.map Patrick Schleizer 2019-12-07 16:34:21 +00:00
• c1800b13fe
  separate group "ssh" for incoming ssh console permission Patrick Schleizer 2019-12-07 11:26:39 -05:00
• 668b6420de
  Remove hyphen madaidan 2019-12-07 14:15:02 +00:00
• 55225aa30e
  description Patrick Schleizer 2019-12-07 07:16:07 -05:00
• 34a2bc16c8
  description Patrick Schleizer 2019-12-07 07:15:58 -05:00
• d823f06c78
  description Patrick Schleizer 2019-12-07 07:13:42 -05:00
• 9ba84f34c6
  comment Patrick Schleizer 2019-12-07 06:51:59 -05:00
• dc1dfc8c20
  output Patrick Schleizer 2019-12-07 06:51:16 -05:00
• 8636d2f629
  add securetty Patrick Schleizer 2019-12-07 06:51:10 -05:00
• 532a1525c2
  comment Patrick Schleizer 2019-12-07 06:26:55 -05:00
• 14aa6c5077
  comment Patrick Schleizer 2019-12-07 06:26:23 -05:00
• 8b3f5a555b
  add console lockdown to pam info output Patrick Schleizer 2019-12-07 06:25:45 -05:00
• 021b06dac9
  add hvc0 to hvc9 Patrick Schleizer 2019-12-07 06:04:45 -05:00
• 8a59662a44
  comment Patrick Schleizer 2019-12-07 06:02:45 -05:00
• 090ddbe96a
  description Patrick Schleizer 2019-12-07 06:00:41 -05:00
• cda6724755
  add pts/0 to pts/9 Patrick Schleizer 2019-12-07 05:56:57 -05:00
• 218cbddba9
  comment Patrick Schleizer 2019-12-07 05:52:06 -05:00
• 6479c883bf
  Console Lockdown. Patrick Schleizer 2019-12-07 05:40:20 -05:00
• 52934c9288
  bumped changelog version 10.6-1 Patrick Schleizer 2019-12-07 02:02:32 -05:00
• 6faa977cd7
  readme Patrick Schleizer 2019-12-07 02:02:06 -05:00
• 6d92d03b31
  description Patrick Schleizer 2019-12-07 01:54:50 -05:00
• 5a4eda0d05
  also support /usr/local/etc/remount-disable and /usr/local/etc/noexec Patrick Schleizer 2019-12-07 01:53:33 -05:00
• 0afcc5e798
  bumped changelog version 10.5-1 Patrick Schleizer 2019-12-06 12:43:21 -05:00
• 2954dcbccf
  minor Patrick Schleizer 2019-12-06 12:24:55 -05:00
• f3647e7478
  RemainAfterExit=yes Patrick Schleizer 2019-12-06 12:18:18 -05:00
• af0cf058e7
  bumped changelog version 10.4-1 Patrick Schleizer 2019-12-06 11:18:20 -05:00
• 9b14f24d5e
  refactoring Patrick Schleizer 2019-12-06 11:17:32 -05:00
• a6133f5912
  output Patrick Schleizer 2019-12-06 11:16:43 -05:00
• c1ea35e2ef
  output Patrick Schleizer 2019-12-06 11:15:54 -05:00
• 4bec41379d
  fix remount with noexec if /etc/noexec exists Patrick Schleizer 2019-12-06 11:15:13 -05:00
• bff425fec2
  bumped changelog version 10.3-1 Patrick Schleizer 2019-12-06 09:32:18 -05:00
• b22289f2a8
  readme Patrick Schleizer 2019-12-06 09:30:05 -05:00
• 470cad6e91
  remount /home /tmp /dev/shm /run with nosuid,nodev (default) and noexec (opt-in) Patrick Schleizer 2019-12-06 05:14:02 -05:00
• 8cf5ed990a
  comment Patrick Schleizer 2019-12-05 15:52:24 -05:00