Commit Graph

1037 Commits

Author SHA1 Message Date
qoijjj
1ce0246761 docs: include link to fedora atomic 2024-10-07 14:27:46 -07:00
Rubiginosa
59f7b10415 fix: misuse of SYSCTL_TEST_STRING (#442) 2024-10-07 13:18:41 -07:00
qoijjj
4a8c4193cb chore: change server to securecore in the iso script 2024-10-06 14:46:38 -07:00
qoijjj
1511cf4ac5 chore: update iso script to reflect recent deprecations 2024-10-06 14:45:35 -07:00
qoijjj
59c397fcc9 docs: various cleanup 2024-10-05 22:56:04 -07:00
qoijjj
7867bb22a1 docs: formatting cleanup 2024-10-05 22:43:15 -07:00
qoijjj
6a63952f07 docs: remove no longer relevant section 2024-10-05 12:28:05 -07:00
qoijjj
de054f68d3 feat: disable sssd daemons by default 2024-10-05 12:22:51 -07:00
qoijjj
73d5425db8 chore: cleanup unused links 2024-10-05 11:59:34 -07:00
qoijjj
bff9eb66fe chore: bluefin/aurora deprecation timeline announcement 2024-10-05 11:57:04 -07:00
qoijjj
1a395452ba chore: fix typo 2024-10-05 01:32:37 -07:00
qoijjj
e52f013007 fix: include missing script in gui-scripts 2024-10-05 00:51:04 -07:00
qoijjj
5a448ddcfc docs: add informational links 2024-10-05 00:31:14 -07:00
qoijjj
ef31725665 fix: disable nfs daemons instead of removing packages due to postuninstall bug in nfs-utils 2024-10-05 00:09:53 -07:00
qoijjj
7d8c9dcf98 feat: disable auxiliary services by default 2024-10-04 23:50:14 -07:00
qoijjj
e21578e6ba chore: remove nfs-utils to remove numerous unused daemons 2024-10-04 23:44:30 -07:00
qoijjj
a6d3d23539 chore: include avahi script 2024-10-04 23:08:09 -07:00
qoijjj
24a005ce99 chore: disable avahi-daemon by default 2024-10-04 23:07:27 -07:00
Rubiginosa
7ae972e095 feat: Add audit-secureblue checks for flatpak bluetooth and ptrace access (#438)
* Add check for bluetooth and ptrace

* Add check for flatpak bluetooth and ptrace access
2024-10-04 10:18:14 -07:00
Rubiginosa
5deb22e35b feat: Add audit-secureblue check for system bluetooth and ptrace 2024-10-04 10:12:22 -07:00
qoijjj
8dc96b57ec chore: remove guestfs-tools from dx images due to fuse dependency 2024-10-04 00:14:58 -07:00
qoijjj
3a6ef0ef3f chore: remove libguestfs-xfs from dx images due to fuse dependency 2024-10-03 23:00:11 -07:00
qoijjj
0c3a33b2b1 chore: remove virt-v2v due to fuse dependency 2024-10-03 15:10:48 -07:00
qoijjj
60d0329cbf chore: remove additional package from dx images for fuse removal 2024-10-03 14:49:46 -07:00
qoijjj
3dbbf761a8 docs: add more details to recommended.md 2024-09-30 23:51:38 -07:00
qoijjj
99e1a8f17b docs: formatting improvements 2024-09-30 23:46:02 -07:00
qoijjj
c1a6df74e6 fix: clashing quotes 2024-09-30 13:58:39 -07:00
qoijjj
4a1dd61a31 fix: import brew justfile 2024-09-30 13:07:27 -07:00
qoijjj
eab9aa1894 docs: update FAQ and Sponsor sections 2024-09-30 09:32:53 -07:00
qoijjj
288d6fe236 chore: move rechunked scripts after the files module 2024-09-29 00:31:39 -07:00
qoijjj
989389e8da chore: switch rechunked images to hardened_malloc-light and demote them to experimental 2024-09-29 00:13:44 -07:00
qoijjj
e0554019bb chore: update nvidia postinstall kargs 2024-09-28 21:38:57 -07:00
Rubiginosa
c1ec422eab feat: add check for D-Bus access (#432) 2024-09-28 20:29:13 -07:00
qoijjj
c68039132a fix: add brew justfile due to upstream move 2024-09-20 23:41:28 -07:00
qoijjj
318cb00ce4 docs: improve accuracy of recommended.md 2024-09-18 12:21:44 -07:00
qoijjj
c5e4a253f1 docs: formatting for recommended.md 2024-09-16 14:03:00 -07:00
qoijjj
333cb2a559 chore: remove deprecated server images 2024-09-16 13:40:48 -07:00
graphenelover
32c65bd66e docs: Add source links to RECOMMENDED.md (#427)
* futher clarify why mv2 won't be enabled

* add link explaining mv3 superior security over mv2

* add space

* Update RECOMMENDED.md

* add missing punctuation.

* changes as requested

* fix wording

* Update RECOMMENDED.md

* remove unnecessary word
2024-09-15 23:10:22 -07:00
Bruno
66d8b731e6 fix: check for gnome-shell instead of gsettings in one test (#424) 2024-09-11 09:56:52 -07:00
Bruno
99ccbb20ff fix: broken link in readme file (#423)
* fix: broken link in readme file

* fix: stop checking for GNOME extensions on securecore

* fix: revert undue (last) commit
2024-09-10 18:52:46 -07:00
Rubiginosa
8333bcf2f5 feat: add check for hardened_malloc flatpak preload (#412)
* updated has_permission to use regex matching

* added flatpak check for hardened_malloc

* changed hasPermission to maintain old behavior for strings
2024-09-10 10:33:14 -07:00
qoijjj
8a0e957c8d docs: add additional details 2024-09-03 01:59:08 -07:00
qoijjj
99bc82ccf5 fix: fuse removal only required for non-server images 2024-09-03 01:57:33 -07:00
qoijjj
8a2c5ce0ef docs: formatting fix 2024-08-31 14:37:35 -07:00
qoijjj
86fe2b6ae8 docs: add FAQ about fuse2 and AppImages 2024-08-31 14:36:40 -07:00
Rubiginosa
b5f5d2afa0 feat: refactor flatpak audit for readability and extensibility (#414)
* refactored flatpak audit to be more extensible

* fixed old typo

* added warning string array for flatpak audit
2024-08-30 15:28:56 -07:00
Bruno
79471e2141 fix: audit script improvements (GHNS test, order of tests) (#415)
* only test GHNS if kdeglobals exist

* place faster tests before the slower flatpak audit
2024-08-30 13:45:15 -07:00
qoijjj
2a3c5fe79e fix: typo in rpm-ostreed.conf 2024-08-29 22:23:12 -07:00
Bruno
e143c48e26 chore: several audit script improvements 2024-08-29 21:01:40 -07:00
Ivo Damjanović
fefc64baba feat: stop overwriting 60-custom.just for better compatibility with upstream bluebuild and downstream user builds (#409)
* feat: create addjustconfig.sh to include custom commands at buildtime

* fix: 60-custom.just.readme.md to 61-custom.just.readme.md

* fix: Rename 60-custom.just to 61-custom.just

* feat: add just config script to enabled scripts

* fix: rename to 70-secureblue.just

* fix: Rename 61-custom.just.readme.md to 70-secureblue.just.readme.md

* fix: rename to 70-secureblue.just
2024-08-29 11:53:56 -07:00