Tommy
|
d9bd0f9563
|
Use secureblue hardenedmalloc
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-06 22:54:40 -07:00 |
|
Tommy
|
71d681ff8b
|
Use custom config and SecureBlue whenever possible
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-04 13:58:01 -07:00 |
|
Tommy
|
1a38e16151
|
Remove bind overrides
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-05-31 14:24:56 -07:00 |
|
Tommy
|
13a4d89a69
|
Better regex for kernel module blacklist
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-05-31 13:49:45 -07:00 |
|
Tommy
|
64efef581c
|
Add escapes for regex
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-05-31 13:37:30 -07:00 |
|
Tommy
|
d06e7489e9
|
Beter regex
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-05-31 13:16:38 -07:00 |
|
Tommy
|
f9823a43e4
|
Better regex
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-05-31 02:36:47 -07:00 |
|
Tommy
|
0eda27d343
|
Update overrides for F40
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-05-28 16:21:59 -07:00 |
|
Tommy
|
4906ea33d8
|
Update kargs
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-05-27 13:23:30 -07:00 |
|
Tommy
|
8d6447c67b
|
/etc/issue moved to Linux-Setup-Scripts
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-05-16 23:18:07 -07:00 |
|
Tommy
|
147945e752
|
Rearrange kargs
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-04-19 14:50:41 -07:00 |
|
Tommy
|
4b109fa93b
|
Disable msr
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-04-05 13:43:06 -07:00 |
|
Tommy
|
2f67145fd1
|
Update ptrace settings
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-03-24 14:38:07 -07:00 |
|
Tommy
|
c3481cbcc8
|
Disable coreos-cni-networking-check.service
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-03-24 14:00:46 -07:00 |
|
Tommy
|
2ecb5662fc
|
Enable module sig enforce and lockdown=confidentiality
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-03-05 14:52:54 -07:00 |
|
Tommy
|
f5411aab36
|
Add ARM hardened malloc
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-03-05 14:24:45 -07:00 |
|
Tommy
|
9ee6949e84
|
Fix rpm-ostree kargs --editor
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-03-05 14:06:08 -07:00 |
|
Tommy
|
652b549e71
|
FCOS has already fixed SELinux handling
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-29 11:39:21 -07:00 |
|
Tommy
|
0721f0d393
|
Fix /var labels
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-29 10:48:58 -07:00 |
|
Tommy
|
3f8465e696
|
Use systemd units section to disable kdump and debug-shell
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-27 21:56:58 -07:00 |
|
Tommy
|
3cb35c79d5
|
Remove extra_latent_entropy
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-26 21:00:56 -07:00 |
|
Tommy
|
e5f1e9d988
|
Move coredump.conf to Linux-Setup-Scripts
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-13 17:02:21 -07:00 |
|
Tommy
|
0ed3ff3b7f
|
Better regex for nullok
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-13 16:56:59 -07:00 |
|
Tommy
|
a6f5adde00
|
Space before nullok
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-13 16:50:28 -07:00 |
|
Tommy
|
bb9719eff6
|
Implement /etc/issue
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-13 16:01:42 -07:00 |
|
Tommy
|
baf5ca9334
|
Remove more packages
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-13 14:18:04 -07:00 |
|
Tommy
|
c8611cf3dd
|
Typo fix
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-11 04:27:32 -07:00 |
|
Tommy
|
6e0729b203
|
Remove more unneeded packages
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-11 04:21:48 -07:00 |
|
Tommy
|
34712aa7bf
|
Reconfigure Zincati
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-07 12:03:47 -07:00 |
|
Tommy
|
dc0a155c30
|
More typo fixes
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-07 11:20:52 -07:00 |
|
Tommy
|
dca71564e7
|
Typo fix
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-07 10:54:09 -07:00 |
|
Tommy
|
4bad3e63a0
|
Split out configs
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-07 10:02:45 -07:00 |
|
Tommy
|
89b9395dfe
|
Code cleanup
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-02-07 07:27:18 -07:00 |
|