Kicksecure / security-misc

Kernel Hardening; Protect Linux User Accounts against Brute Force Attacks; Improve Entropy Collection; Strong Linux User Account Separation; Enhances Misc Security Settings - https://www.kicksecure.com/wiki/Security-misc

https://www.kicksecure.com/wiki/Impressum

Kicksecure/security-misc Issues

Wayland Default DE for Real Security
Updated a month ago32
disable enforcement of user being in group sudo
Closed a month ago5
Suggestions for kernel modules blacklisted in /etc/modprobe.d/30_security-misc.conf
Updated a month ago8
Implement MAC randomization to copy Androids behavior
Updated a month ago4
Proposing openSUSE as a security-focused base operating system for Kicksecure and by extension Whonix
Closed 8 months ago18
add `/etc/gitconfig` for better git security
Updated 2 months ago4
improve GnuPG configuration file `/etc/skel/.gnupg/gpg.conf`
Updated 2 months ago6
Redundant kernel args
Updated 2 months ago11
Kicksecure Default Browser Discussion
Closed 3 months ago82
Serious Question - Porting to new distro - Procedure
Closed 8 months ago8
Blacklist other GPS modules like GNSS
Updated 2 months ago2
/lib/sysctl.d/990-security-misc.conf - log_martians
Closed 2 months ago2
allow MSR kernel module being load / move from security-misc to vm-config-dist
Closed 4 months ago
Split the `security-misc` into `security-misc-shared`, `security-misc-desktop` and `security-misc-server`
Updated 4 months ago18
test remount-secure script and systemd unit
Updated 4 months ago3
Harden all system services by default
Updated 4 months ago8
`proc-hidepid.service`: Fixing Systemd related issues
Updated 4 months ago7
why remount-secure even needed? fix insecure mount options at the root, not here
Updated 4 months ago74
`proc-hidepid.service`: Fixing `pkexec` related issues
Updated 4 months ago
`remount-secure`: use `procfs` mount option `subset` (`hide-hardware-info.service`)
Updated 4 months ago5
improve hide-hardware-info.service, make `/sys` hiding optional
Closed 4 months ago20
`proc-hidepid.service` fails if proc user does not exist
Closed 4 months ago
`hide-hardware-info.service`: hide `/sys/kernel/notes` due to accidental pointer leaks on xen systems. Leak defeats KASLR
Closed 4 months ago1
qfile-unpacker permission-hardener whitelist security issue
Closed 6 months ago10
RPM packaging
Updated 4 months ago12
`hide-hardware-info.service`: hide `/proc/dynamic_debug/`
Updated 4 months ago1
`hide-hardware-info.service`: hide `/proc/kallsyms`
Updated 5 months ago1
sgid (set-group-ID) pkexec to fix hidepid
Closed 5 months ago2
Restrict umask to 027 except for sudo/root broken
Updated 5 months ago19
pam-tmpdir-helper breaks certain initramfs-update actions on systems with noexec on the /tmp mount
Updated 5 months ago4
use SRSO spec_rstack_overflow kernel setting?
Closed 5 months ago16
automatic trigger of permission-hardener after APT package installation broken
Closed 6 months ago
allow only loading signed kernel modules / module.sig_enforce=1
Updated 6 months ago4
MAC randomization breaks root server and VirtualBox DHCP / IPv6PrivacyExtensions might be problematic
Updated 6 months ago17
`flatpak remote-add` TOFU and TLS security issue / use stronger authentication than TLS
Closed 6 months ago1
Harden Network
Closed 6 months ago1
usrmerge
Closed 6 months ago
run permission-hardener after APT package installation
Closed 6 months ago1
fix Bluetooth readme
Closed 7 months ago4
consider excluding hardened malloc from SUID Disabler
Closed 7 months ago
cannot mount options harden separate /home volume?
Closed 7 months ago2
test Remount Secure in Qubes
Closed 7 months ago3
Force IOMMU
Closed 7 months ago6
`Depends:` vs `Recommends:` vs none
Closed 7 months ago8
Scope of application-specific hardening?
Closed 8 months ago3
systemd-coredump
Updated 7 months ago2
Hide Proc | New Approach
Closed 8 months ago13
Backport Firmware and Kernel | Protect against spectre/meltdown and various hardware vulnurabilities
Closed 8 months ago4
harden modules load broken
Updated 8 months ago13
improve output by permission-hardener
Closed 8 months ago1