Package - security-misc-shared
Primary informations
Download package: https://deb.kicksecure.com/pool/main/s/security-misc/security-misc-shared_51.8-1_all.deb (Size: 266.8KiB)| Property | Value |
|---|---|
| Package | security-misc-shared |
| Source | security-misc |
| Version | 3:51.8-1 |
| Architecture | all |
| Maintainer | Patrick Schleizer |
| Installed-Size | 807 |
| Depends | adduser, apparmor-profile-dist, build-essential, dmsetup, helper-scripts, libcap2-bin, libdbus-1-dev, libglib2.0-bin, libpam-modules-bin, libpam-runtime, libpam-umask, libsystemd-dev, memlockd, pkgconf, python3, secure-delete, dconf-gsettings-backend | gsettings-backend, debconf (>= 0.5) | debconf-2.0, init-system-helpers (>= 1.52) |
| Conflicts | security-misc |
| Replaces | anon-gpg-tweaks, security-misc, swappiness-lowest, tcp-timestamps-disable |
| Provides | security-misc |
| Homepage | https://www.kicksecure.com/wiki/Security-misc |
| Priority | optional |
| Section | misc |
| Filename | pool/main/s/security-misc/security-misc-shared_51.8-1_all.deb |
| Size | 273164 |
| SHA256 | bfcceb390d6c0a1fa0ef6233b46c5d3f5525e36802c5259af12c8484db0de5f8 |
| SHA1 | 15d071cd69423621cf79d4bf24d995a93ed2b9d4 |
| MD5sum | fcffe0fa46370a0a19c838bf04997d08 |
| Description | Enhances Miscellaneous Security Settings https://github.com/Kicksecure/security-misc/blob/master/README.md . https://www.kicksecure.com/wiki/Security-misc . Package security-misc-desktop and/or security-misc-server may also be useful. . Discussion: . Happening primarily in Whonix forums. https://forums.whonix.org/t/kernel-hardening-security-misc/7296 |
| Description-md5 |
Files in package
- /etc/X11/Xsession.d/30_security-misc
- /etc/apparmor.d/tunables/home.d/security-misc
- /etc/apt/apt.conf.d/40error-on-any
- /etc/apt/apt.conf.d/40sandbox
- /etc/default/grub.d/40_cpu_mitigations.cfg
- /etc/default/grub.d/40_kernel_hardening.cfg
- /etc/default/grub.d/40_remount_secure.cfg
- /etc/default/grub.d/40_signed_modules.cfg
- /etc/default/grub.d/41_quiet_boot.cfg
- /etc/default/grub.d/41_recovery_restrict.cfg
- /etc/dracut.conf.d/30-security-misc.conf
- /etc/gitconfig
- /etc/hide-hardware-info.d/30_default.conf
- /etc/kernel/postinst.d/30_remove-system-map
- /etc/modprobe.d/30_security-misc_blacklist.conf
- /etc/modprobe.d/30_security-misc_conntrack.conf
- /etc/modprobe.d/30_security-misc_disable.conf
- /etc/profile.d/30_security-misc.sh
- /etc/securetty.security-misc
- /etc/security-misc/emerg-shutdown/30_security_misc.conf
- /etc/security/access-security-misc.conf
- /etc/security/faillock.conf.security-misc
- /etc/security/limits.d/30_security-misc.conf
- /etc/skel/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml
- /etc/skel/.gnupg/gpg.conf
- /etc/ssh/ssh_config.d/30_security-misc.conf
- /etc/ssh/sshd_config.d/30_security-misc.conf
- /etc/sudoers.d/security-misc
- /etc/systemd/system/emergency.service.d/override.conf
- /etc/systemd/system/rescue.service.d/override.conf
- /etc/usbguard/IPCAccessControl.d/:qubes
- /etc/usbguard/IPCAccessControl.d/:sudo
- /etc/usbguard/rules.d/30_security-misc.conf
- /etc/usbguard/usbguard-daemon.conf.security-misc
- /etc/zprofile.d/30_security-misc.zsh
- /usr/bin/disabled-bluetooth-by-security-misc
- /usr/bin/disabled-cdrom-by-security-misc
- /usr/bin/disabled-cpumsr-by-security-misc
- /usr/bin/disabled-filesys-by-security-misc
- /usr/bin/disabled-firewire-by-security-misc
- /usr/bin/disabled-framebuffer-by-security-misc
- /usr/bin/disabled-gps-by-security-misc
- /usr/bin/disabled-intelme-by-security-misc
- /usr/bin/disabled-intelpmt-by-security-misc
- /usr/bin/disabled-miscellaneous-by-security-misc
- /usr/bin/disabled-netfilesys-by-security-misc
- /usr/bin/disabled-network-by-security-misc
- /usr/bin/disabled-thunderbolt-by-security-misc
- /usr/bin/fm-shim-frontend
- /usr/bin/permission-hardener
- /usr/bin/remount-secure
- /usr/lib/dracut/modules.d-disabled/20remount-secure/module-setup.sh
- /usr/lib/dracut/modules.d-disabled/20remount-secure/remount-secure.sh
- /usr/lib/dracut/modules.d/99emerg-shutdown/module-setup.sh
- /usr/lib/issue.d/20_security-misc.issue
- /usr/lib/modules-load.d/30_security-misc.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_bubblewrap.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_chromium.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_dbus.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_firejail.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_fuse.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_hardened_malloc.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_mount.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_pam.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_passwd.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_policykit.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_postfix.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_qubes.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_selinux.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_spice.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_ssh.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_sudo.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_unix_chkpwd.conf
- /usr/lib/permission-hardener.d/25_default_whitelist_virtualbox.conf
- /usr/lib/permission-hardener.d/30_default.conf
- /usr/lib/python3/dist-packages/fm_shim_frontend/__init__.py
- /usr/lib/python3/dist-packages/fm_shim_frontend/fm_shim_frontend.py
- /usr/lib/sysctl.d/30_security-misc_kexec-disable.conf
- /usr/lib/sysctl.d/30_security-misc_ptrace-disable.conf
- /usr/lib/sysctl.d/30_silent-kernel-printk.conf
- /usr/lib/sysctl.d/990-security-misc.conf
- /usr/lib/systemd/coredump.conf.d/30_security-misc.conf
- /usr/lib/systemd/pstore.conf.d/30_security-misc.conf
- /usr/lib/systemd/system-preset/50-security-misc.preset
- /usr/lib/systemd/system/block-shutdown.service
- /usr/lib/systemd/system/emerg-shutdown.service
- /usr/lib/systemd/system/ensure-shutdown-trigger.service
- /usr/lib/systemd/system/ensure-shutdown.service
- /usr/lib/systemd/system/harden-module-loading.service
- /usr/lib/systemd/system/haveged.service.d/30_security-misc.conf
- /usr/lib/systemd/system/hide-hardware-info.service
- /usr/lib/systemd/system/kill-vboxdrmclient-on-shutdown.service
- /usr/lib/systemd/system/panic-on-oops.service
- /usr/lib/systemd/system/permission-hardener.service
- /usr/lib/systemd/system/proc-hidepid.service
- /usr/lib/systemd/system/remount-secure.service
- /usr/lib/systemd/system/remove-system-map.service
- /usr/lib/systemd/system/sysinit-post.target
- /usr/lib/systemd/system/usbguard.service.d/30_security-misc.conf
- /usr/lib/systemd/system/user@.service.d/sysfs.conf
- /usr/lib/systemd/user/fm-shim.service
- /usr/lib/systemd/user/usbguard-notifier.service.d/30_security-misc.conf
- /usr/lib/udev/rules.d/95-emerg-shutdown.rules
- /usr/libexec/security-misc/askpass
- /usr/libexec/security-misc/block-unsafe-logins
- /usr/libexec/security-misc/build-fm-shim-backend
- /usr/libexec/security-misc/check-for-usb-controller
- /usr/libexec/security-misc/disable-kernel-module-loading
- /usr/libexec/security-misc/echo-path
- /usr/libexec/security-misc/emerg-shutdown
- /usr/libexec/security-misc/ensure-shutdown
- /usr/libexec/security-misc/hide-hardware-info
- /usr/libexec/security-misc/kill-vboxdrmclient-on-shutdown
- /usr/libexec/security-misc/mmap-rnd-bits
- /usr/libexec/security-misc/pam-abort-on-locked-password
- /usr/libexec/security-misc/pam-info
- /usr/libexec/security-misc/pam_faillock_not_if_x
- /usr/libexec/security-misc/pam_only_if_login
- /usr/libexec/security-misc/pam_only_if_su
- /usr/libexec/security-misc/panic-on-oops
- /usr/libexec/security-misc/permission-lockdown
- /usr/libexec/security-misc/remove-system.map
- /usr/libexec/security-misc/virusforget
- /usr/share/doc/security-misc-shared/changelog.Debian.gz
- /usr/share/doc/security-misc-shared/changelog.gz
- /usr/share/doc/security-misc-shared/copyright
- /usr/share/doc/security-misc/fstab-vm
- /usr/share/glib-2.0/schemas/30_security-misc.gschema.override
- /usr/share/lintian/overrides/security-misc-shared
- /usr/share/pam-configs/block-unsafe-logins-security-misc
- /usr/share/pam-configs/console-lockdown-security-misc
- /usr/share/pam-configs/faillock-preauth-security-misc
- /usr/share/pam-configs/mkhomedir-security-misc
- /usr/share/pam-configs/pam-abort-on-locked-password-security-misc
- /usr/share/pam-configs/umask-security-misc
- /usr/share/pam-configs/unix-faillock-security-misc
- /usr/share/pam-configs/wheel-security-misc
- /usr/share/polkit-1/actions/org.freedesktop.Flatpak.policy.security-misc
- /usr/share/security-misc/dolphinrc
- /usr/share/security-misc/emerg-shutdown-initramfs.service
- /usr/share/security-misc/lkrg/30-lkrg-virtualbox.conf
- /usr/share/security-misc/lkrg/lkrg-virtualbox
- /usr/share/security-misc/permission-hardener-existing-mode-legacy-hardcoded
- /usr/share/security-misc/permission-hardener-new-mode-legacy-hardcoded
- /usr/share/security-misc/security-misc-memlockd.cfg
- /usr/src/security-misc/emerg-shutdown.c
- /usr/src/security-misc/fm-shim-backend.c
- /var/cache/security-misc/state-files/placeholder