Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-23 22:29:40 -05:00
Code Issues Packages Projects Releases Wiki Activity
Kernel Hardening; Protect Linux User Accounts against Brute Force Attacks; Improve Entropy Collection; Strong Linux User Account Separation; Enhances Misc Security Settings - https://www.kicksecure.com/wiki/Security-misc
9 Commits 2 Branches 291 Tags 8.2 MiB
Shell 99%
JavaScript 0.9%
Ruby 0.1%
c7d88571e4
Go to file
HulaHoopWhonix c7d88571e4 Update control
2016-03-31 03:16:10 +00:00
debian Update control 2016-03-31 03:16:10 +00:00
etc Create nf_conntrack_helper.conf 2016-03-31 02:53:12 +00:00
usr/share/security-misc/share/config initial commit 2015-12-15 02:00:24 +00:00
changelog.upstream bumped changelog version 2015-12-15 04:16:14 +00:00
CONTRIBUTING.md initial commit 2015-12-15 02:00:24 +00:00
COPYING initial commit 2015-12-15 02:00:24 +00:00
GPLv3 initial commit 2015-12-15 02:00:24 +00:00
Makefile initial commit 2015-12-15 02:00:24 +00:00
README.md Update README.md 2016-03-31 02:57:15 +00:00

README.md

enhances misc security settings

  • deactivates previews in Dolphin
  • deactivates previews in Nautilus
  • deactivates TCP timestamps
  • deactivates Netfilter's connection tracking helper

Changes to the file browser only take effect for newly created user accounts. Not for existing user accounts. This package is most useful to help Linux distribution maintainers setting divergent defaults.

(This package description has been automatically extracted and mirrored from debian/control.)

Generic Readme

Readme Version

Generic Readme Version 0.3

Cooperating Anonymity Distributions

Generic Readme beings here. Have a look into the man sub folder (if available).

The functionality of this package was once exclusively available in the Whonix (github) anonymity distribution.

Because multiple projects and individuals stated interest in various of Whonix's functionality (examples: Qubes OS (discussion); piratelinux (discussion)), it's best to share as much source code as possible, it's best to share certain characteristics (such as /etc/hostname etc.) among all anonymity distributions) Whonix has been split into multiple separate packages.

Generic Packaging

Files in etc/... in root source folder will be installed to /etc/..., files in usr/... will be installed to /usr/... and so forth. This should make renaming, moving files around, packaging, etc. very simple. Packaging of most packages looks very similar.

How to use outside of Debian or derivatives

Although probably due to generic packaging not very hard. Still, this requires developer skills. Ports welcome!

How to Build deb Package

See comments below and instructions.

  • Replace apparmor-profile-torbrowser with the actual name of this package (equals the root source folder name of this package after you git cloned it).
  • You only need config-package-dev, when it is listed in the Build-Depends: field in debian/control.
  • Many packages do not have signed git tags yet. You may request them if desired.
  • We might later use a documentation template.

How to install in Debian using apt-get

Binary packages are available in Whonix's APT repository. By no means you are required to use the binary version of this package. This might be interesting for users of Debian and derivatives. Note, that usage of this package outside of Whonix is untested and there is no maintainer that supports this use case.

1. Get Whonix's Signing Key.

2. Add Whonix's Signing Key to apt-key.

gpg --export 916B8D99C38EAF5E8ADC7A2A8D66066A2EEACCDA | sudo apt-key add -

3. Add Whonix's APT repository.

echo "deb http://sourceforge.net/projects/whonixdevelopermetafiles/files/internal/ wheezy main" > /etc/apt/sources.list.d/whonix.list

4. Update your package lists.

sudo apt-get update

5. Install this package. Replace package-name with the actual name of this package.

sudo apt-get install package-name

Cooperation

Most welcome. Ports, distribution maintainers, developers, patches, forks, testers, comments, etc. all welcome.

Contact

Donate