qoijjj
2a3c5fe79e
fix: typo in rpm-ostreed.conf
2024-08-29 22:23:12 -07:00
Bruno
e143c48e26
chore: several audit script improvements
2024-08-29 21:01:40 -07:00
Ivo Damjanović
fefc64baba
feat: stop overwriting 60-custom.just for better compatibility with upstream bluebuild and downstream user builds ( #409 )
...
* feat: create addjustconfig.sh to include custom commands at buildtime
* fix: 60-custom.just.readme.md to 61-custom.just.readme.md
* fix: Rename 60-custom.just to 61-custom.just
* feat: add just config script to enabled scripts
* fix: rename to 70-secureblue.just
* fix: Rename 61-custom.just.readme.md to 70-secureblue.just.readme.md
* fix: rename to 70-secureblue.just
2024-08-29 11:53:56 -07:00
qoijjj
b442fccee6
feat: add back Recommends=false to rpm-ostreed.conf
...
due to upstream reversion
2024-08-28 15:22:02 -07:00
qoijjj
d5be94b441
fix: ensure all relevant firstboot files are removed
2024-08-28 15:04:26 -07:00
qoijjj
73ed50b4d4
feat: remove unused binaries from setcaps function
2024-08-27 16:54:28 -07:00
qoijjj
a329524441
fix: justfile typo
2024-08-26 10:44:49 -07:00
qoijjj
e41d963841
feat: multiple securecore improvements
2024-08-26 09:45:20 -07:00
qoijjj
185f539364
fix: securecore build
2024-08-26 00:32:31 -07:00
qoijjj
8eb959669a
feat: begin server->securecore migration
2024-08-25 23:27:36 -07:00
qoijjj
967c7551ad
feat: sgid reduction ( #392 )
...
* feat: also remove sgid bit
* Update yafti.yml
* Update yafti.yml
2024-08-23 14:13:22 -07:00
qoijjj
c526c770ba
feat: additional setuid reduction and removal of unused packages ( #388 )
...
* feat: additional setuid reduction and removal of unused packages
* leave packages but keep suid removal
2024-08-23 00:00:54 -07:00
qoijjj
c711b3c398
feat: include brew autoupdate services
2024-08-22 22:38:00 -07:00
qoijjj
1b5e539ec2
fix: audit script cleanup
2024-08-22 12:03:22 -07:00
Rubiginosa
51ad84b1ad
feat: Add flatpak auditing to audit-secureblue ( #377 )
...
* increase spacing on print_status
* Merged audit-flatpak into audit-secureblue
* print flatpak remote success
---------
Co-authored-by: qoijjj <129108030+qoijjj@users.noreply.github.com >
2024-08-21 13:22:11 -07:00
qoijjj
aaf3e4d344
fix: set Recommends=false while waiting for upstream
2024-08-21 13:12:51 -07:00
qoijjj
7ff130f248
fix: typo in audit script
2024-08-20 18:43:21 -07:00
qoijjj
1c38cc7ce7
fix: use alternate delimiter for motd tip
2024-08-20 16:00:04 -07:00
qoijjj
38cbf7715a
feat: add audit-secureblue just command ( #382 )
2024-08-20 15:08:18 -07:00
qoijjj
8c9d2e341c
chore: remove patch merged upstream
2024-08-20 11:33:20 -07:00
qoijjj
3b2b1dbd93
fix: url in motd
2024-08-20 10:36:00 -07:00
qoijjj
d6e18573ae
feat: add link to release notifications FAQ in motd
2024-08-20 10:34:51 -07:00
qoijjj
327eb2279d
docs: add a note to motd to check the latest release notes
2024-08-20 10:28:53 -07:00
qoijjj
06c2883bb1
fix: improve usbguard just command
2024-08-19 18:21:50 -07:00
qoijjj
9d929fb087
chore: adjust patch in response to upstream changes
2024-08-19 15:20:41 -07:00
qoijjj
dd10a99f93
fix: cleanup motd variables
2024-08-18 22:44:35 -07:00
qoijjj
5d4d755b96
chore: remove unusable toggle-nvk just command
2024-08-18 22:04:23 -07:00
qoijjj
49b8ad6efb
fix: parse epoch time directly from json for motd
2024-08-18 21:41:21 -07:00
qoijjj
0d3869bbb5
fix: use json format for rpm-ostree in motd
2024-08-18 21:35:05 -07:00
qoijjj
4c04c11b90
fix: typo in justfile script
2024-08-18 20:21:41 -07:00
qoijjj
357ce2934e
feat: add tpm2 unlock improvements
2024-08-18 20:00:33 -07:00
qoijjj
78198f4e5a
feat: patch brew installation just command to not require wheel
2024-08-18 18:35:56 -07:00
qoijjj
31b1339fa5
chore: disable yafti run on config change as it causes user confusion
2024-08-11 04:49:00 -07:00
Ivo Damjanović
94eca70c71
fix: container policy hardening script for cosmic images ( #367 )
2024-08-10 20:54:31 -07:00
qoijjj
3b927dc8ed
fix: check only the first string token when searching lsattr
2024-08-10 03:56:35 -07:00
qoijjj
872cb784ef
feat: add ujust command to lock bash environment files to mitigate LD… ( #365 )
2024-08-09 16:14:44 -07:00
qoijjj
0104d6a697
fix: revert container policy hardening migration to /etc until upstream migrates
2024-08-08 17:28:44 -07:00
fiftydinar
378caba43f
docs: clarify disablement of GNOME user extensions better ( #364 )
2024-08-08 15:59:25 -07:00
qoijjj
3fb96ece10
chore: move /usr/etc to /etc per upstream rpm-ostree recommendation
2024-08-08 15:48:30 -07:00
SnuggleCovenant
4c85413563
remove gnome videos (totem) from yafti.yml ( #363 )
...
the totem app is abandoned
2024-08-07 14:53:34 -07:00
fiftydinar
e1a130f6f9
feat: Disable user Gnome extensions & user-installation of them ( #361 )
2024-08-06 17:14:30 -07:00
qoijjj
78b531846d
chore: fix build by isolating silverblue-only package
2024-08-06 10:39:05 -07:00
qoijjj
2318f83a9a
chore: ensure package consistency across images
2024-08-06 10:01:13 -07:00
qoijjj
f75215cfdf
fix: set permissions for xwayland file in ujust command
2024-08-03 12:19:43 -07:00
spaceoden
c21a697252
Update 60-custom.just.readme.md to put new kargs in the correct section ( #357 )
...
the new kargs were added to set-kargs-hardening, not set-kargs-hardening-unstable
2024-08-02 13:01:52 -07:00
qoijjj
9f56f2ff06
feat: set additional kargs to override suboptimal defaults
2024-08-01 22:43:23 -07:00
qoijjj
084fe1a40c
fix: remove usbguard-dbus due to insufficient systemd sandboxing ( #352 )
2024-07-31 14:20:49 -07:00
qoijjj
eea350af56
fix: remove comments from harden-flatpak ujust command to fix just parsing
2024-07-30 16:26:34 -07:00
spaceoden
7c0976da7e
feat: add to harden-flatpak logic that applies the highest supported hwcap ( #346 )
2024-07-30 15:31:43 -07:00
qoijjj
b31aff0994
fix: prevent bluefin yafti from starting
2024-07-30 00:22:30 -07:00
