25 Commits

Author	SHA1	Message	Date
qoijjj	6bc46d51d6	improve: switch to drop-ins instead of full overrides	2024-01-25 21:30:47 -08:00
trytomakeyouprivate	1f8f69ab8e	docs: fix formatting for chromium readme (#178) ... docs: fix formatting for chromium readme (#178)	2024-01-25 12:31:43 -08:00
qoijjj	0e7f763d61	docs: fix formatting	2024-01-25 11:37:38 -08:00
qoijjj	2f416b62b3	improve: add additional chromium hardening via policy	2024-01-25 11:31:31 -08:00
qoijjj	1ac1165238	improve: remove hardened_malloc-light override for wireplumber after upstream fix	2024-01-23 10:02:39 -08:00
qoijjj	6cbd0280a8	fix: resolved config	2024-01-22 21:54:30 -08:00
qoijjj	06f6aa788d	fix: switch to a resolved drop-in	2024-01-22 13:43:25 -08:00
qoijjj	e85fd07756	cleanup: login.defs file	2024-01-05 10:21:39 -08:00
Sadoon Al-Bader	24caa87dab	chromium: Disable VAAPI and enable wayland	2023-12-24 13:59:11 -08:00
qoijjj	38999d4123	Add userns-enabled variant to give the users choice on the tradeoff between userns and non-userns	2023-12-16 13:11:41 -08:00
qoijjj	5dd011c078	Disable io_uring, see inline comment for details	2023-12-11 10:49:16 -08:00
qoijjj	822f4f0277	Update ld.so.preload according to #119 ... https://github.com/secureblue/secureblue/issues/119	2023-12-11 09:04:49 -08:00
qoijjj	f24704397a	move jitless flag for chromium to the correct location for fedora	2023-12-10 00:47:48 -08:00
qoijjj	6c13b8293b	chronyd hardening	2023-12-09 23:30:23 -08:00
qoijjj	a3ddde977b	Hardened chromium config	2023-12-09 23:22:53 -08:00
34n0	3685fa6daa	feat: 🔒 harden and enable pam faillock, password encryption & quality suggestions	2023-12-08 13:40:46 -08:00
qoijjj	baf53da8b8	Add sericea images, add separate laptop images for tlp, and refactor	2023-12-07 16:06:50 -08:00
qoijjj	719016a526	Add chrony config to enable NTS.	2023-12-04 22:43:44 -08:00
qoijjj	dadc1ece43	Add warning about removing userns setting	2023-12-04 18:28:27 -08:00
qoijjj	25ac909ef8	Fix wireplumber issue with hardened malloc #92	2023-12-04 16:31:58 -08:00
qoijjj	28cb192d43	Fix upowerd for use without unprivileged usernamespaces	2023-11-30 14:35:35 -08:00
34n0	0b1c932fe8	feat: ✨ add per network mac randomization	2023-11-30 13:58:50 -08:00
qoijjj	b940ca7cf5	Rename sudoers timeout file (#50)	2023-11-26 19:49:25 -08:00
qoijjj	7d89b54264	Require sudo password every time	2023-11-26 18:46:37 -08:00
qoijjj	cb11fbcaae	Rebase secureblue with a new, clean commit history	2023-11-26 16:42:27 -08:00