Peter Müller b7b65e736e sysctl.conf: prevent unintentional writes into attacker-controlled files and FIFOs ...

Similar to hard- and symlink protection introduced a while ago, this
patch enables protections against unintentional writes into
attacker-controlled regular files or FIFOs, where a program expected to
create new ones. This makes exploiting TOCTOU flaws harder.

See also: https://www.kernel.org/doc/Documentation/sysctl/fs.txt

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2020-10-05 15:07:47 +00:00

..

modprobe.d

Enhance the security of the netfilter conntrack helpers

2015-04-22 18:10:59 +02:00

bashrc

Import bash startfiles from IPFire 3.x.

2012-11-11 23:28:52 +01:00

certparams

git-svn-id: http://svn.ipfire.org/svn/ipfire/IPFire/source@16 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8

2006-02-15 21:15:54 +00:00

e2fsck.conf

Added e2fsck.conf, this should fix manual superblock correction.

2010-04-22 07:07:58 +02:00

group

dhcpcd: create dhcpcd user and chroot folder

2020-04-19 17:27:23 +00:00

hddtemp.db

Hddtemp DB angepasst frcon logging deaktiviert

2007-10-04 20:18:49 +00:00

host.conf

git-svn-id: http://svn.ipfire.org/svn/ipfire/IPFire/source@16 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8

2006-02-15 21:15:54 +00:00

inittab

inittab: change tty1 to console

2018-03-24 13:26:32 +01:00

inputrc

Import bash startfiles from IPFire 3.x.

2012-11-11 23:28:52 +01:00

ipsec.user.conf

Add ipsec.user.conf & secrets for user defined connections (e.g. XAUTH).

2010-06-26 19:44:02 +02:00

ipsec.user.secrets

fix typo in ipsec.user.secrets

2015-08-25 22:06:30 +01:00

ld.so.conf

Hinzugefügt:

2006-06-14 21:19:05 +00:00

logrotate.conf

Added Mail log file to '/etc/logrotate.conf'

2019-10-08 18:17:06 +00:00

mime.types

apache / WPAD: Add correct MIME type for wpad.dat and proxy.pac

2019-04-23 20:19:43 +01:00

modules.conf

git-svn-id: http://svn.ipfire.org/svn/ipfire/IPFire/source@16 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8

2006-02-15 21:15:54 +00:00

nsswitch.conf

nsswitch.conf: Use nss-myhostname to resolve local hostname

2018-06-30 19:56:56 +01:00

passwd

dhcpcd: create dhcpcd user and chroot folder

2020-04-19 17:27:23 +00:00

profile

bash startfiles: Add /sbin.

2012-11-15 13:49:51 +01:00

resolv.conf

git-svn-id: http://svn.ipfire.org/svn/ipfire/IPFire/source@16 ea5c0bd1-69bd-2848-81d8-4f18e57aeed8

2006-02-15 21:15:54 +00:00

securetty

inittab: change tty1 to console

2018-03-24 13:26:32 +01:00

sysctl-x86_64.conf

sysctl: add seperate sysctl-x86_64.conf and move x86_64 only parameters

2019-08-08 09:30:49 +02:00

sysctl.conf

sysctl.conf: prevent unintentional writes into attacker-controlled files and FIFOs

2020-10-05 15:07:47 +00:00

syslog.conf

suricata: Log to syslog

2019-03-01 17:56:46 +01:00