Commit graph

Select branches

Hide pull requests

Whonix13

gitconfig

master

permission-hardener-mount

#1

#10

#100

#101

#103

#104

#108

#109

#11

#110

#111

#112

#113

#114

#115

#118

#119

#12

#120

#121

#122

#124

#125

#126

#129

#13

#131

#133

#134

#135

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#16

#165

#166

#166

#167

#17

#170

#171

#176

#178

#18

#181

#182

#183

#19

#193

#194

#195

#197

#2

#20

#200

#202

#204

#21

#211

#216

#218

#219

#22

#220

#221

#222

#226

#227

#228

#228

#229

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#254

#255

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#268

#269

#27

#270

#272

#273

#276

#279

#28

#280

#282

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#3

#30

#301

#301

#302

#304

#305

#306

#307

#308

#309

#31

#310

#311

#311

#32

#33

#34

#35

#36

#37

#38

#39

#4

#40

#41

#42

#43

#44

#45

#46

#47

#48

#49

#5

#50

#51

#52

#53

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

#98

#99

0.4-1

0.6-1

0.7-1

0.8-1

1.3-1

1.4-1

1.5-1

1.6-1

1.7-1

1.8-1

1.9-1

10.1-1

10.2-1

10.3-1

10.4-1

10.5-1

10.6-1

10.7-1

10.8-1

10.9-1

11.0-1

11.1-1

11.2-1

11.3-1

11.4-1

11.5-1

11.6-1

11.7-1

11.8-1

11.9-1

12.0-1

12.1-1

12.2-1

12.3-1

12.4-1

12.5-1

12.6-1

12.7-1

12.8-1

12.9-1

13.0-1

13.1-1

13.2-1

13.3-1

13.4-1

13.5-1

13.6-1

13.7-1

13.8-1

13.9-1

14.0-1

14.1-1

14.2-1

14.3-1

14.4-1

14.5-1

14.6-1

14.7-1

14.8-1

14.9-1

15.0-1

15.1-1

15.2-1

15.3-1

15.4-1

15.5-1

15.6-1

15.7-1

15.8-1

15.9-1

16.0-1

16.1-1

16.2-1

16.3-1

16.4-1

16.5-1

16.6-1

16.7-1

16.8-1

16.9-1

17.0-1

17.1-1

17.2-1

17.3-1

17.4-1

17.5-1

17.6-1

17.7-1

17.8-1

17.9-1

18.0-1

18.1-1

18.2-1

18.3-1

18.4-1

18.5-1

18.6-1

18.7-1

18.8-1

18.9-1

19.0-1

19.1-1

19.2-1

19.3-1

19.4-1

19.5-1

19.6-1

19.7-1

19.8-1

19.9-1

2.0-1

2.1-1

2.2-1

2.3-1

2.4-1

2.5-1

2.6-1

2.7-1

2.8-1

2.9-1

20.0-1

20.1-1

20.2-1

20.3-1

20.4-1

20.5-1

20.6-1

20.7-1

20.8-1

20.9-1

21.0-1

21.1-1

21.2-1

21.3-1

21.4-1

21.5-1

21.6-1

21.7-1

21.8-1

21.9-1

22.0-1

22.1-1

22.2-1

22.3-1

22.4-1

22.5-1

22.6-1

22.7-1

22.8-1

22.9-1

23.0-1

23.1-1

23.2-1

23.3-1

23.4-1

23.5-1

23.6-1

23.7-1

23.8-1

23.9-1

24.0-1

24.1-1

24.2-1

24.3-1

24.4-1

24.5-1

24.6-1

24.7-1

24.8-1

24.9-1

25.0-1

25.1-1

25.2-1

25.3-1

25.4-1

25.5-1

25.6-1

25.7-1

25.8-1

25.9-1

26.0-1

26.1-1

26.2-1

26.3-1

26.4-1

26.5-1

26.6-1

26.7-1

26.8-1

26.9-1

27.0-1

27.1-1

27.2-1

27.3-1

27.4-1

27.5-1

27.6-1

27.7-1

27.8-1

27.9-1

28.0-1

28.1-1

28.2-1

28.3-1

28.4-1

28.5-1

28.6-1

28.7-1

28.8-1

28.9-1

29.0-1

29.1-1

29.2-1

29.3-1

29.4-1

29.5-1

29.6-1

29.7-1

29.8-1

29.9-1

3.0-1

3.1-1

3.2-1

3.3-1

3.4-1

3.5-1

3.6-1

3.7-1

3.8-1

3.9-1

30.0-1

30.1-1

30.2-1

30.3-1

30.5-1

30.6-1

30.7-1

30.8-1

30.9-1

31.0-1

31.1-1

31.2-1

31.3-1

31.4-1

31.5-1

31.6-1

31.7-1

31.8-1

31.9-1

32.0-1

32.1-1

32.2-1

32.3-1

32.4-1

32.5-1

32.6-1

32.7-1

32.8-1

32.9-1

33.0-1

33.1-1

33.2-1

33.3-1

33.4-1

33.5-1

33.6-1

33.7-1

33.8-1

33.9-1

34.0-1

34.1-1

34.2-1

34.3-1

34.4-1

34.5-1

34.6-1

34.7-1

34.8-1

34.9-1

35.0-1

35.1-1

35.2-1

35.3-1

35.4-1

35.5-1

35.6-1

35.7-1

35.8-1

35.9-1

36.0-1

36.1-1

36.2-1

36.3-1

36.4-1

36.5-1

36.6-1

36.7-1

36.8-1

36.9-1

37.0-1

37.1-1

37.2-1

37.3-1

37.4-1

37.5-1

37.6-1

37.7-1

37.8-1

37.9-1

38.0-1

38.1-1

38.2-1

38.3-1

38.4-1

38.5-1

38.6-1

38.7-1

38.8-1

38.9-1

39.0-1

39.1-1

39.2-1

39.3-1

39.4-1

39.5-1

39.6-1

39.7-1

39.8-1

39.9-1

4.0-1

4.1-1

4.2-1

4.3-1

4.4-1

4.5-1

4.6-1

4.7-1

4.8-1

4.9-1

40.0-1

40.1-1

40.2-1

40.3-1

40.4-1

40.5-1

40.6-1

40.7-1

40.8-1

40.9-1

41.0-1

41.1-1

41.2-1

41.3-1

41.4-1

41.5-1

41.6-1

41.7-1

41.8-1

41.9-1

42.0-1

42.1-1

42.2-1

42.3-1

42.4-1

42.5-1

42.6-1

42.7-1

42.8-1

42.9-1

43.0-1

43.1-1

43.2-1

43.3-1

43.4-1

43.5-1

43.6-1

43.7-1

43.8-1

43.9-1

44.0-1

44.1-1

44.2-1

44.3-1

44.4-1

44.5-1

44.6-1

44.7-1

44.8-1

44.9-1

45.0-1

45.1-1

45.2-1

45.3-1

45.4-1

45.5-1

45.6-1

45.7-1

45.8-1

45.9-1

46.0-1

46.1-1

46.2-1

46.3-1

46.4-1

46.5-1

46.6-1

5.0-1

5.1-1

5.2-1

5.3-1

5.4-1

5.5-1

5.6-1

5.7-1

5.8-1

5.9-1

6.0-1

6.1-1

6.2-1

6.3-1

6.4-1

6.5-1

6.6-1

6.7-1

6.8-1

6.9-1

7.0-1

7.1-1

7.2-1

7.3-1

7.4-1

7.5-1

7.6-1

7.7-1

7.8-1

7.9-1

8.0-1

8.1-1

8.2-1

8.3-1

8.4-1

8.5-1

8.6-1

8.7-1

8.8-1

8.9-1

9.0-1

9.1-1

9.10-1

9.11-1

9.12-1

9.2-1

9.3-1

9.4-1

9.5-1

9.6-1

9.7-1

9.8-1

9.9-1

Mono Color

• 486027a4d7
  fix Patrick Schleizer 2019-12-21 05:15:38 -05:00
• 1fd26be864
  fix Patrick Schleizer 2019-12-21 05:14:51 -05:00
• 0fc97c37be
  fix Patrick Schleizer 2019-12-21 05:14:39 -05:00
• 1018d5b3b0
  output Patrick Schleizer 2019-12-21 05:11:51 -05:00
• 4388fc4d5a
  refactoring Patrick Schleizer 2019-12-21 05:11:19 -05:00
• ed20980f4c
  refactoring Patrick Schleizer 2019-12-21 05:07:10 -05:00
• 315ce86b9a
  refactoring Patrick Schleizer 2019-12-21 04:33:03 -05:00
• 0c5848494b
  do not remount if already has intended mount options Patrick Schleizer 2019-12-21 04:21:26 -05:00
• 203f4ad46e
  refactoring Patrick Schleizer 2019-12-21 04:17:10 -05:00
• e7fd0dadb0
  output Patrick Schleizer 2019-12-21 04:09:35 -05:00
• e6ea21c775
  record existing modes in separate dpkg-statoverwrite databases Patrick Schleizer 2019-12-21 04:08:35 -05:00
• 89be5f2ecb
  bumped changelog version 12.0-1 Patrick Schleizer 2019-12-21 02:05:39 -05:00
• c28ddf5c4d
  Delete usr.lib.security-misc.pam_tally2-info madaidan 2019-12-20 22:44:31 +00:00
• cfe69dd669
  Delete usr.lib.security-misc.permission-lockdown madaidan 2019-12-20 22:44:27 +00:00
• d220bb3bc4
  suid /usr/lib/chromium/chrome-sandbox whitelist Patrick Schleizer 2019-12-20 13:07:01 -05:00
• 77b3dd5d6b
  comments Patrick Schleizer 2019-12-20 13:02:33 -05:00
• d7bd477e73
  add "/usr/lib/xorg/Xorg.wrap whitelist" Patrick Schleizer 2019-12-20 12:59:27 -05:00
• 17e8605119
  add matchwhitelist feature Patrick Schleizer 2019-12-20 12:57:24 -05:00
• 3fab387669
  suid /usr/bin/firejail whitelist Patrick Schleizer 2019-12-20 12:50:35 -05:00
• d3f16a5bf4
  sgid /usr/lib/qubes/qfile-unpacker whitelist Patrick Schleizer 2019-12-20 12:47:10 -05:00
• 508ec0c6fa
  comment Patrick Schleizer 2019-12-20 12:34:07 -05:00
• 1b569ea790
  comment Patrick Schleizer 2019-12-20 12:32:36 -05:00
• f88ca25889
  fix terminology, sguid -> sgid Patrick Schleizer 2019-12-20 11:58:07 -05:00
• 1cd5fb6a00
  bumped changelog version 11.9-1 Patrick Schleizer 2019-12-20 11:50:25 -05:00
• ff0a26fb5d
  comment Patrick Schleizer 2019-12-20 11:49:19 -05:00
• 71496a33ab
  skip folders are these are not suid / guid Patrick Schleizer 2019-12-20 11:47:53 -05:00
• 9321ecff41
  no more need to add/remove / Patrick Schleizer 2019-12-20 11:43:53 -05:00
• b95225b6a6
  pipefail Patrick Schleizer 2019-12-20 11:37:05 -05:00
• cad6f328f4
  minor Patrick Schleizer 2019-12-20 11:34:44 -05:00
• 3265f9894d
  output Patrick Schleizer 2019-12-20 11:27:43 -05:00
• 28d12c3966
  bumped changelog version 11.8-1 Patrick Schleizer 2019-12-20 11:09:22 -05:00
• 1615ebec58
  output Patrick Schleizer 2019-12-20 11:07:44 -05:00
• 1e11b775cf
  output Patrick Schleizer 2019-12-20 11:05:05 -05:00
• 731f802895
  output Patrick Schleizer 2019-12-20 11:04:12 -05:00
• cd8efe5800
  output Patrick Schleizer 2019-12-20 11:03:22 -05:00
• c0ddb76d74
  bumped changelog version 11.7-1 Patrick Schleizer 2019-12-20 10:50:51 -05:00
• b31abea0af
  improve error handling Patrick Schleizer 2019-12-20 10:49:31 -05:00
• 79cd3b86b6
  comment Patrick Schleizer 2019-12-20 10:47:23 -05:00
• b3458cc6ee
  fix checking existing entries to avoid needless calls to dpkg-statoverride Patrick Schleizer 2019-12-20 10:45:59 -05:00
• 370f3c5e54
  comment Patrick Schleizer 2019-12-20 10:35:05 -05:00
• 133d09f298
  output Patrick Schleizer 2019-12-20 10:33:16 -05:00
• 1ffa8e197e
  speed up setuid removal by using find with '-perm /u=s,g=s' Patrick Schleizer 2019-12-20 10:31:26 -05:00
• 4cfdf2c65b
  fix, re-enforce nosuid even if changed on the disk Patrick Schleizer 2019-12-20 10:21:27 -05:00
• e36868e675
  output Patrick Schleizer 2019-12-20 10:02:46 -05:00
• 50b8f65490
  add sanity test: count if we really processed all files Patrick Schleizer 2019-12-20 09:59:28 -05:00
• e28da89253
  /bin/sudo whitelist / /bin/bwrap whitelist Patrick Schleizer 2019-12-20 09:48:06 -05:00
• 55faa7b997
  fix missing processing files bug Patrick Schleizer 2019-12-20 09:43:23 -05:00
• fbe2479f48
  count processed file system objects Patrick Schleizer 2019-12-20 08:54:56 -05:00
• 195ea522f5
  fix Patrick Schleizer 2019-12-20 08:52:14 -05:00
• 6f8231be70
  debugging Patrick Schleizer 2019-12-20 08:51:55 -05:00
• ed50f98010
  output Patrick Schleizer 2019-12-20 08:47:22 -05:00
• 089c40135f
  bumped changelog version 11.6-1 Patrick Schleizer 2019-12-20 08:15:00 -05:00
• 6d30e3b4a2
  do not remove suid from whitelisted binaries ever Patrick Schleizer 2019-12-20 08:13:23 -05:00
• d5f1bd8dd2
  fix mode sanity check Patrick Schleizer 2019-12-20 08:02:30 -05:00
• ddc0eec63d
  bumped changelog version 11.5-1 Patrick Schleizer 2019-12-20 07:12:36 -05:00
• 65248a94ef
  readme Patrick Schleizer 2019-12-20 07:06:50 -05:00
• 8e112c3423
  description Patrick Schleizer 2019-12-20 06:53:24 -05:00
• 24ea70384b
  description Patrick Schleizer 2019-12-20 06:53:03 -05:00
• 0ae3e689b5
  comment Patrick Schleizer 2019-12-20 06:35:02 -05:00
• 050f4d8b94
  comment Patrick Schleizer 2019-12-20 06:34:37 -05:00
• 36043fe5cc
  comment Patrick Schleizer 2019-12-20 06:33:41 -05:00
• fb4254547b
  comment Patrick Schleizer 2019-12-20 06:32:04 -05:00
• cca0908d9a
  fix Patrick Schleizer 2019-12-20 06:11:38 -05:00
• e254b8b52d
  fix Patrick Schleizer 2019-12-20 06:09:17 -05:00
• 7f8b3c76de
  output Patrick Schleizer 2019-12-20 06:02:17 -05:00
• 071c64dc41
  enable 'set -e' Patrick Schleizer 2019-12-20 06:01:49 -05:00
• b97c66707c
  minor Patrick Schleizer 2019-12-20 05:59:05 -05:00
• 17b4f12276
  output Patrick Schleizer 2019-12-20 05:58:42 -05:00
• 48fe7312bf
  update config Patrick Schleizer 2019-12-20 05:57:41 -05:00
• 87d820d84c
  comment Patrick Schleizer 2019-12-20 05:54:16 -05:00
• 918cbb4e25
  output Patrick Schleizer 2019-12-20 05:51:25 -05:00
• c8cf09a4cb
  output Patrick Schleizer 2019-12-20 05:50:16 -05:00
• 46466c12ad
  parse drop-in config folder rather than only one config file Patrick Schleizer 2019-12-20 05:49:11 -05:00
• 66fd31189d
  improve output if set-user-id / set-group-id is set Patrick Schleizer 2019-12-20 05:37:33 -05:00
• 6dd6530fa5
  remove hardening-enable Patrick Schleizer 2019-12-20 05:32:26 -05:00
• 6c8127e3cd
  remove "/lib/ nosuid" from permission hardening Patrick Schleizer 2019-12-20 05:29:37 -05:00
• af0f074987
  remount /lib with nosuid,nodev Patrick Schleizer 2019-12-20 05:27:11 -05:00
• 7f20160477
  comment Patrick Schleizer 2019-12-20 05:24:00 -05:00
• a135ae9400
  use must manually enable permission-hardening.service Patrick Schleizer 2019-12-20 05:22:59 -05:00
• fa6f1e1568
  output Patrick Schleizer 2019-12-20 05:19:39 -05:00
• a26cb94bfd
  globstar no longer required Patrick Schleizer 2019-12-20 04:49:21 -05:00
• c66e9abe18
  comment Patrick Schleizer 2019-12-20 04:48:57 -05:00
• d1d0afff34
  fix Patrick Schleizer 2019-12-20 04:48:02 -05:00
• e74d2e4f94
  output Patrick Schleizer 2019-12-20 04:23:14 -05:00
• eb86359033
  refactoring Patrick Schleizer 2019-12-20 04:20:05 -05:00
• bb84fca184
  refactoring Patrick Schleizer 2019-12-20 04:08:46 -05:00
• f92b414195
  refactoring Patrick Schleizer 2019-12-20 04:06:28 -05:00
• 4c44871e9d
  comment Patrick Schleizer 2019-12-20 04:02:05 -05:00
• 6876a2eaa8
  comment Patrick Schleizer 2019-12-20 04:01:40 -05:00
• 35c4fce61b
  fix "dpkg-statoverride: warning: stripping trailing /" Patrick Schleizer 2019-12-20 03:54:46 -05:00
• 9bd9012ab1
  refactoring Patrick Schleizer 2019-12-20 03:46:50 -05:00
• 788a2c1ba3
  comment Patrick Schleizer 2019-12-20 03:45:01 -05:00
• 55933f8876
  refactoring Patrick Schleizer 2019-12-20 03:43:36 -05:00
• 9e493a9f48
  refactoring Patrick Schleizer 2019-12-20 03:42:09 -05:00
• b92a690c16
  refactoring Patrick Schleizer 2019-12-20 03:40:47 -05:00
• 98535e3a2b
  refactoring Patrick Schleizer 2019-12-20 03:39:25 -05:00
• ecbba2fd61
  refactoring Patrick Schleizer 2019-12-20 03:38:39 -05:00
• 20b8a407ac
  refactoring Patrick Schleizer 2019-12-20 03:25:17 -05:00
• 6cd9eb44fb
  refactoring Patrick Schleizer 2019-12-20 03:24:07 -05:00
• 706dba104d
  code simplification Patrick Schleizer 2019-12-20 03:19:12 -05:00