security-misc

security-misc copied to clipboard

Blacklist other GPS modules like GNSS

2

## Blacklist other GPS modules like GNSS (Global Navigation Satellite System) `garmin_gps` is another gps driver but that is already blacklisted in *30_security-misc.conf* https://github.com/Kicksecure/security-misc/blob/a9886a3119f9b662b15fc26d28a7fedf316b72c4/etc/modprobe.d/30_security-misc.conf#L107 ``` ls /lib/modules/`uname -r`/kernel/drivers/gnss | sed...

souchikjoardar201

This pull request changes... ## Changes - Copy androids MAC address randomization behavior with NetworkManager in `80_randomize-mac.conf`: using `*mac-address-mask` settings to set the locally administered bit to 1, and the...

EclipseBazooka

This pull request changes... ## Changes - Disables Intel Platform Monitoring Technology Telemetry (Intel-PMT) in `/etc/modprobe.d/30_security-misc.conf` - Add `disabled-intelpmt-by-security-misc` to `/usr/bin/disabled-intelpmt-by-security-misc` > https://github.com/intel/Intel-PMT?tab=readme-ov-file#what-is-intel-pmt Intel PMT is a standardized way of...

EclipseBazooka

criteria for kernel module blacklisting / disabling / Suggestions for kernel modules blacklisted in /etc/modprobe.d/30_security-misc.conf

11

# Digital Video Broadcasting install dvb_core /bin/true # Core module for DVB devices install dvb_usb_rtl2832u /bin/true # DVB-T USB devices with RTL2832U chipset install dvb_usb_rtl28xxu /bin/true # DVB-T USB devices...

MikeHorn-git

add `/etc/gitconfig` for better git security

4

* https://github.com/git/git/security/advisories/GHSA-8prw-h3cq-mghm * https://forums.whonix.org/t/git-users-enable-fsck-by-default-for-better-security/2066

adrelanos

Protecting /sys and /proc

1

We know have our own services to change permissions. I have come across a better and more clean implementation. https://github.com/divestedcg/Brace/tree/master/brace/usr/lib/tmpfiles.d Can this approach be used here too for our purposes?

monsieuremre

https://github.com/divestedcg/Brace

adrelanos

file/folder permissions issue `d????????? ? ? ? ? ? .` | Firefox no longer starting (probably not not a Firefox issue) | caused by disallow registering interpreters for miscellaneous binary formats `sysctl fs.binfmt_misc.status=0`

2

`ls -la .mozilla` ``` ls: cannot access '.mozilla/..': Permission denied ls: cannot access '.mozilla/.': Permission denied total 0 d????????? ? ? ? ? ? . d????????? ? ? ? ?...

adrelanos