-
Notifications
You must be signed in to change notification settings - Fork 55
Expand file tree
/
Copy pathchangelog.upstream
More file actions
20828 lines (13861 loc) · 595 KB
/
changelog.upstream
File metadata and controls
20828 lines (13861 loc) · 595 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
commit 92f6f30f565b1b8598199ac7d1bc35e01bf5a082
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Mar 22 05:45:45 2026 -0400
comment
commit 140c9cbc8a487585a92eca7acbbdfe18b92e0da9
Merge: c913e3be 8a81ab4a
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Mar 22 05:44:46 2026 -0400
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit 8a81ab4af5182a124686857104118c0701e93357
Author: Aaron Rainbolt <arraybolt3@gmail.com>
Date: Thu Mar 19 22:17:47 2026 -0400
Comments, hardening on fm-shim frontend and backend
commit 144d04cd84084508a7f1ce892ef1d00296f693de
Merge: 58192e68 c913e3be
Author: Aaron Rainbolt <arraybolt3@gmail.com>
Date: Thu Mar 19 20:39:37 2026 -0400
Merge branch 'master' into arraybolt3/trixie
commit c913e3bead0dfffee0a46049d30dc8d91e47f5ca
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Thu Mar 19 18:30:25 2026 +0000
bumped changelog version
commit 89908e0938929c6ee6f39dbd510f4bc889ca31c1
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Thu Mar 19 11:24:36 2026 -0400
copyright
commit 58192e688c0ea32bf6bb9806eb619413d26c2b12
Author: Aaron Rainbolt <arraybolt3@gmail.com>
Date: Wed Mar 18 20:28:20 2026 -0400
Avoid unintentional HTML rendering in fm-shim-frontend, fix path resolution, fix wrong D-Bus protocol handling in backend, slightly harden backend
commit 6c0b8dbc50840950756b4d28c5bb7622e035b11d
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Tue Mar 17 13:57:12 2026 -0400
remove trailing spaces
commit 58555692e771846548282dd55e696117d95abff4
Merge: ce5034d9 b34ee621
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Tue Mar 17 13:55:43 2026 -0400
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit b34ee6216809232cc09453f10437fd14e34ea318
Author: Aaron Rainbolt <arraybolt3@gmail.com>
Date: Sun Mar 15 21:03:44 2026 -0400
Further fm-shim frontend and backend hardening and bugfixes following ChatGPT code review
commit c96fb114c820625536a32be406b923055a073081
Author: Aaron Rainbolt <arraybolt3@gmail.com>
Date: Sun Mar 15 13:54:30 2026 -0400
Integrate hardening suggestions from ChatGPT into fm-shim-backend.c
commit ce5034d9612488728b3ed7b2a61e009762c33e63
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sat Mar 14 12:08:52 2026 +0000
bumped changelog version
commit a6c8ba2c5e348ebc419d8ae8148108fba36f6fed
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sat Mar 14 07:03:41 2026 -0400
remove superfluous file
commit f9a182cb87d16a498e65fb9cb40a3c174683fe75
Merge: 0da8cad9 76734023
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sat Mar 14 07:03:11 2026 -0400
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit 767340233fa3b305ac53f56c843c348c44695bf3
Author: Aaron Rainbolt <arraybolt3@gmail.com>
Date: Tue Mar 10 00:17:29 2026 -0400
Fix unused variable in fm-shim-backend.c
commit 0bf666a87bcfb6f452a16a37d90c813e372fea89
Author: Aaron Rainbolt <arraybolt3@gmail.com>
Date: Mon Mar 9 22:28:52 2026 -0400
Add work-in-progress D-Bus shim for org.freedesktop.FileManager1
commit 0da8cad962683701a77c29b6ba49a2f80e125690
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Feb 23 13:34:15 2026 +0000
bumped changelog version
commit ff99577a0aef5b52619fdccc9e933ce8af5aaf2b
Merge: 196ff190 df6ca04d
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Feb 23 06:31:32 2026 -0500
Merge remote-tracking branch 'github-kicksecure/master'
commit df6ca04de8c47b83e58f0c35b4736305e41f1645
Merge: 196ff190 ad1d64fc
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Feb 23 06:30:40 2026 -0500
Merge pull request #351 from raja-grewal/cdrom
Add CD-ROM/DVD hardening settings
commit ad1d64fc4ffe53ffc0710b5d9654dfff5ff6f617
Merge: f99e5c48 196ff190
Author: raja-grewal <rg_public@proton.me>
Date: Fri Feb 20 11:04:39 2026 +1100
Merge branch 'Kicksecure:master' into cdrom
commit 196ff19056dcaf3bf31174d18be728e4a29159a0
Merge: 7df34854 c17f2404
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Thu Feb 19 07:10:42 2026 -0500
Merge remote-tracking branch 'github-kicksecure/master'
commit f99e5c48c03b6b7e9e3995e5c61c996a05108e03
Merge: fe1d9242 c17f2404
Author: raja-grewal <rg_public@proton.me>
Date: Wed Feb 18 09:15:23 2026 +1100
Merge branch 'Kicksecure:master' into cdrom
commit c17f2404c4b690ba9315b396408b33c2b8eb449d
Merge: 7df34854 7477128e
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Tue Feb 17 11:03:30 2026 -0500
Merge pull request #344 from raja-grewal/docs_update
Update various docs
commit fe1d92429d34f66cd9e2cdd085700e6a373bea5f
Author: raja-grewal <rg_public@proton.me>
Date: Tue Feb 17 07:31:42 2026 +0000
sysctl: add cd-rom/dvd hardening settings
commit 7477128e3e1255156b1e18bb5c049cd74468e9cf
Author: raja-grewal <rg_public@proton.me>
Date: Mon Feb 16 21:52:39 2026 +0000
Simplify links
commit 32513594d775ecb1817636cccd9b43b5f30d863c
Author: raja-grewal <rg_public@proton.me>
Date: Mon Feb 16 06:33:58 2026 +0000
README: add line
commit 5a6002d9580373408798511807941ec37ef4aa20
Author: raja-grewal <rg_public@proton.me>
Date: Mon Feb 16 04:09:01 2026 +0000
Update docs
commit 369c14ab0231fe605a821d96b3f4ca80fe61854a
Merge: 73d3da10 7df34854
Author: raja-grewal <rg_public@proton.me>
Date: Mon Feb 16 14:26:59 2026 +1100
Merge branch 'Kicksecure:master' into docs_update
commit 7df348544fc4bb484d2b955864ff0f598b1aca0b
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Tue Feb 10 12:17:16 2026 +0000
bumped changelog version
commit fb2d44fe2315aa467af733634c5c0bb59a5da65a
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Feb 8 05:14:38 2026 -0500
Do not run emerg-shutdown.service in case 'rd.live.ram' or 'rd.live.ram=1' is set.
https://forums.kicksecure.com/t/how-to-run-iso-live-mode-from-ram/1542/9
commit 34440d7cdf662426b147ac8fde65573927b9bfe0
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Jan 11 16:40:08 2026 +0000
bumped changelog version
commit cbd91974b162cec0144804190f807976ee2788e5
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Jan 11 10:51:46 2026 -0500
typo
commit a0fd435751e666b72b59afb6658e41ba21e892b4
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Jan 11 07:09:36 2026 -0500
readme
commit 6c4e7458a10c3a262ecfc0c2f53d1b6181b80ddf
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Jan 5 10:28:53 2026 +0000
bumped changelog version
commit 74533a7efab3f740028d04330752ce18b92dc8fa
Merge: 8a132749 84408cb1
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Jan 5 03:09:53 2026 -0500
Merge remote-tracking branch 'github-kicksecure/master'
commit 84408cb1a5228355526815814d2e01ce8d40a175
Merge: 8a132749 52ef679c
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Jan 5 03:05:02 2026 -0500
Merge pull request #345 from Nurmagoz/patch-1
debian/control URL fix
commit 8a132749e0976803173c416cd5f8d4879b7dee3f
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Thu Jan 1 17:28:25 2026 +0000
bumped changelog version
commit e2d31a5b818342037a54e5c3a71ef92df95b9a32
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Thu Jan 1 12:28:03 2026 -0500
genmkfile debinstfile
commit 6e15c683ab4a682a8ed652559632d7d1e93963c4
Merge: 97640a9b 436308ae
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Thu Jan 1 12:01:19 2026 -0500
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit 52ef679c2cd95548e1f0edf48283f0ea5e3a444c
Author: Nurmagoz <11895339+Nurmagoz@users.noreply.github.com>
Date: Wed Dec 31 20:51:34 2025 +0000
debian/control URL fix
commit 436308ae4ec243c80262f3b43dcade0f9ca83859
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Mon Dec 29 22:30:00 2025 -0600
Minor comment fixes
commit f8ac896b87e6661704f9b13f775941ea8b4eda06
Merge: 97640a9b ab98da95
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Mon Dec 29 22:23:34 2025 -0600
Merge remote-tracking branch 'raja/log_martians' into arraybolt3/trixie-raja-merge
commit 73d3da104b03c967c56d90d0905336caa802e416
Author: raja-grewal <rg_public@proton.me>
Date: Tue Dec 30 03:51:49 2025 +0000
Sort file
commit d0512e4f25ed78d0b27a62e305812dec3e00873a
Author: raja-grewal <rg_public@proton.me>
Date: Tue Dec 30 03:47:47 2025 +0000
Update links to kernel docs
commit 56df8b624c88b56905d945a0b247714152321c9b
Author: raja-grewal <rg_public@proton.me>
Date: Mon Dec 29 07:52:15 2025 +0000
Re-order boot params as introduced
The ordering was changed due to different merge times.
commit 8fd95a0b97f339f2609de7e7614fa8a3e86e3157
Author: raja-grewal <rg_public@proton.me>
Date: Mon Dec 29 07:44:15 2025 +0000
Sort new split package install script for easier readability
commit e3765131b067083c6a9a7f373cfb154a806e57ad
Author: raja-grewal <rg_public@proton.me>
Date: Mon Dec 29 07:36:55 2025 +0000
Add reference on IOMMU vulnerabilities
commit 31e268d6246a98d62c23a5bb9e7e4282d0fad282
Author: raja-grewal <rg_public@proton.me>
Date: Mon Dec 29 07:34:53 2025 +0000
README: typos
commit cd0a59fd1495db21b8da4b3e8484df61858e7f80
Author: raja-grewal <rg_public@proton.me>
Date: Mon Dec 29 07:24:32 2025 +0000
Merge Meltdown mitigtions for ARM64 and X86_64 CPUs
commit 61170e1c6a4869120413cf5236a2d995af26422d
Author: raja-grewal <rg_public@proton.me>
Date: Mon Dec 29 07:16:54 2025 +0000
Reorder panic settings
commit 6a92e956f3fd41fe416c1e41203687619c7011bc
Author: raja-grewal <rg_public@proton.me>
Date: Mon Dec 29 07:02:24 2025 +0000
Add minor notices to panic on oopses and warnings
commit 4d49ab56a4be29b03746b99cf6254ef15c93ed74
Author: raja-grewal <rg_public@proton.me>
Date: Mon Dec 29 06:52:35 2025 +0000
Update docs on `proc_mem.force_override`
commit 1472d41f030d02aba6576ef481ace35554908e8d
Author: raja-grewal <rg_public@proton.me>
Date: Mon Dec 29 06:41:33 2025 +0000
Add KSPP partial compliance notice for `proc_mem.force_override=ptrace`
commit 97640a9b5768b7565daf153fbdc9a0655001b790
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Dec 28 06:36:59 2025 +0000
bumped changelog version
commit c54d6a2258a09867e5b72a8bc1b47df67de6497d
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Dec 28 01:30:43 2025 -0500
readme
commit 7477a6711ad2020fc9a7af19fd98fb88da5b840f
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Dec 28 01:29:26 2025 -0500
readme
commit 885358794f2f4f196e37e6c39b6d95f3b48e325f
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Dec 28 00:55:20 2025 -0500
readme
commit 44837c12bbf63f7e0fd41afad11e19646fd53074
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Dec 28 00:48:37 2025 -0500
genmkfile debinstfile
commit 7b37965c5c6689533b10e0e592100ee5b94858ee
Merge: d2796afe dddf7979
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Dec 28 00:47:49 2025 -0500
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit dddf79798cb2f2f76bf4432aa90c8a3c61402db1
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat Dec 27 19:46:55 2025 -0600
Document why we disable sudo DNS
commit 5e45248eb63ecb4b7f924ff9fcba6b40f5bf1244
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat Dec 27 19:38:19 2025 -0600
genmkfile debinstfile
commit 1b07fd2e73fdfc0d83bd36919080442a14a5ffdf
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat Dec 27 19:38:02 2025 -0600
Disable sudo DNS lookups on desktop systems
commit d2796afe8e4cf5dd55d549adf972e68f86903609
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Dec 19 11:38:31 2025 +0000
bumped changelog version
commit 68c89cced39a5d2138e22661f4132118628aba64
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Dec 19 06:30:00 2025 -0500
comment
commit 8aef71c2548807f39a104529e0b6cdf67c201185
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Dec 19 06:27:14 2025 -0500
fix
commit 55a9755d90d27325010ab19a35b611a9a1df82ae
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Dec 19 06:26:16 2025 -0500
refactoring
commit 6927a5d1adb3dbb96d630e42679c01a6d589232e
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Dec 19 09:56:05 2025 +0000
bumped changelog version
commit 29c12808682fbbd5bd63f1bb821821f5adbfdbc5
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Dec 19 04:55:41 2025 -0500
genmkfile debinstfile
commit 7ed2d25def0f143dc4cb3695f0e8c5b74682a743
Merge: b366c5e6 0bf0a73e
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Dec 19 03:42:20 2025 -0500
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit 0bf0a73eb4683bd7205eaafa692237c57e7d18ae
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Mon Dec 15 20:18:14 2025 -0600
Add a missing quote mark for panic_on_taint
commit 2106ed5aa651d9910df9965d68cb632808423e77
Merge: b9d4f0aa 969d4d82
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Mon Dec 15 19:41:36 2025 -0600
Merge remote-tracking branch 'raja/amd_encrypt_sev' into arraybolt3/trixie-raja-merge
commit 969d4d82139b1c1793786b7a24c9eee3f4a1101c
Author: raja-grewal <rg_public@proton.me>
Date: Tue Dec 16 11:49:21 2025 +1100
Add references for AMD SME
commit b9d4f0aaa565ab478a8e0ef4cef27bc49457da42
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sun Dec 14 14:24:33 2025 -0600
Add minor clarifications
commit 005b66c265654514b6450908a75615b71003f372
Merge: 3f097a35 eaf0f814
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sun Dec 14 14:05:36 2025 -0600
Merge remote-tracking branch 'raja/panic_taint' into arraybolt3/trixie-raja-merge
commit 3f097a35f21582300a87ddf7c70b2698df90e5ff
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sun Dec 14 14:03:26 2025 -0600
Split up a line in README.md
commit e7e6d6d3739bebfb8a92f6666e5f2f43ecbc2b52
Merge: 8e56772c b8f78062
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sun Dec 14 14:01:54 2025 -0600
Merge remote-tracking branch 'raja/incomplete_cpu_mitigations' into arraybolt3/trixie-raja-merge
commit b8f78062673ec3675ff31a0f7d34b853e9f97f04
Author: raja-grewal <rg_public@proton.me>
Date: Sun Dec 14 12:38:47 2025 +0000
Update usage of `mitigations=auto,nosmt`
commit eaf0f814bdbe52739d3b3270bb2549bbdc2753f2
Author: raja-grewal <rg_public@proton.me>
Date: Sun Dec 14 11:18:08 2025 +0000
Update option to `panic_on_taint`
commit 8e56772c2f0d26b7266403c0dfc5b7ef6d86d1fc
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat Dec 13 19:22:50 2025 -0600
README.md typo fix
commit 4d0a126955e48d790c063b218540a63b514bbd24
Merge: 39ce5919 8040ba75
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat Dec 13 18:44:03 2025 -0600
Merge remote-tracking branch 'raja/modprobe_refresh' into arraybolt3/trixie-raja-merge
commit 39ce5919765b7cadac07dfeadb6cbbd29261b81c
Merge: b366c5e6 7d901213
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat Dec 13 18:27:22 2025 -0600
Merge remote-tracking branch 'raja/amd_encrypt_sev' into arraybolt3/trixie-raja-merge
commit 650b923c7a88820d3a899596e32016e1c3f6cc57
Author: raja-grewal <rg_public@proton.me>
Date: Sat Dec 13 04:35:02 2025 +0000
Update option to `panic_on_taint`
commit b366c5e62ad375cef608f5fc435d444de52b056d
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Dec 12 13:17:09 2025 +0000
bumped changelog version
commit 68de32e43e5597c5bda5449cf78eeed94895a63c
Merge: 725565c4 135ee804
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Dec 12 04:35:53 2025 -0500
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit 8040ba7579735cafee5fcd9ddf60ca4c88080f70
Author: raja-grewal <rg_public@proton.me>
Date: Fri Dec 12 02:04:38 2025 +0000
Minor fixes to docs
commit fe1cfcd1a0f42b4e4938f7b327c33e89936aff76
Author: raja-grewal <rg_public@proton.me>
Date: Fri Dec 12 02:03:23 2025 +0000
Update docs on CPU MSRs
commit ab2d44677a3198d6e421bb1c630a18fc4e85065c
Author: raja-grewal <rg_public@proton.me>
Date: Fri Dec 12 02:01:20 2025 +0000
Correct script addition
commit 5684a12d9db65474392dc9e1ebdc4646e34569eb
Author: raja-grewal <rg_public@proton.me>
Date: Fri Dec 12 01:59:23 2025 +0000
Whitelist `9p` module
commit 135ee80450c7f7e4c3d71be861fe1b5a6c135d02
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Thu Dec 11 18:47:42 2025 -0600
Move kernel.panic=-1 setting to sysctl, allow turning panic-on-oops off with systemctl
commit 7d901213029f17e7d0a4dccc671b3bfd476bab13
Author: raja-grewal <rg_public@proton.me>
Date: Thu Dec 11 14:12:18 2025 +0000
Add reference for AMD SEV
commit 72f295a3f04e43307dea9af29657ee96fb1c47a5
Author: raja-grewal <rg_public@proton.me>
Date: Thu Dec 11 14:11:47 2025 +0000
Provide option to enable AMD SEV-SNP
commit 6a17255307c1d3b397ad38ab8f3bb8a14a3c5ca5
Author: raja-grewal <rg_public@proton.me>
Date: Thu Dec 11 14:11:26 2025 +0000
Provide option to enable AMD SEV-ES
commit 22b1e3dc92c8bffca20f5d70920b6b9be042658e
Merge: 30068ec8 725565c4
Author: raja-grewal <rg_public@proton.me>
Date: Thu Dec 11 18:15:35 2025 +1100
Merge branch 'master' into panic_taint
commit 53c4fdbeea0a44ca9e7ab739d80393b9c655482c
Merge: f75e9873 725565c4
Author: raja-grewal <rg_public@proton.me>
Date: Thu Dec 11 12:52:14 2025 +1100
Merge branch 'Kicksecure:master' into modprobe_refresh
commit 725565c42e7b3e1bb5036d160cc0388cc001901b
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Tue Dec 9 14:06:55 2025 +0000
bumped changelog version
commit b7b6b6e5fbeba0cfab141bf05d7fb657879ba8e9
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Dec 8 09:42:59 2025 -0500
output
commit 8f99672cb24242d6cb86d985384ab4ad7d1aca54
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Dec 5 11:39:12 2025 +0000
bumped changelog version
commit ac128dd873968b1815e4113b30ea69f34fa0b088
Merge: 17dd7af7 85761a41
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Dec 5 06:35:03 2025 -0500
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit 85761a4153a4f19e7b18e91062e97d3376451884
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Thu Dec 4 23:27:18 2025 -0600
permission-hardener: Fix undo warning logic, minor improvements suggested by ChatGPT Codex
commit 17dd7af7d1cf37ff30a17e2eaee06732d627ed34
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Wed Dec 3 08:31:22 2025 +0000
bumped changelog version
commit c44678f92df924e4c10f08960426c526e0292aba
Merge: 6f9732be 0534a34e
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Wed Dec 3 03:22:44 2025 -0500
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit 0534a34ed7246793db384518cfbecb3adfcb7f3e
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Tue Dec 2 19:06:30 2025 -0600
Fix block-unsafe-logins when running as non-root, add swaylock to list of safe auth services
commit 6f9732be98cbc344076b89d57491c423368172d5
Merge: 2089b3a9 b3eb739f
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Tue Dec 2 06:04:07 2025 -0500
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit b3eb739fe2662acfbd844de8d87af4720727fc7a
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sun Nov 30 00:20:21 2025 -0600
Link fix, change some wording
commit 5f34b4146e895bb935b719071ab2762278944995
Merge: 2c253b13 29176d2e
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sun Nov 30 00:12:18 2025 -0600
Merge remote-tracking branch 'raja/docs' into arraybolt3/trixie
commit 2c253b1312c034cb8395039803380c1157967061
Merge: 17ab1bb0 c5f91eb3
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat Nov 29 21:01:51 2025 -0600
Merge remote-tracking branch 'raja/vsyscall32' into arraybolt3/trixie
commit 17ab1bb00fe287c4c941d9cd3813ee3a3ae89ade
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat Nov 29 20:44:30 2025 -0600
Documentation fix
commit 2b2d30afce3d40eb9c2177ad67fd7d89cd4602a0
Merge: f0d069c7 3fdfebc4
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat Nov 29 20:23:09 2025 -0600
Merge remote-tracking branch 'raja/limit_full_force' into arraybolt3/trixie
commit f0d069c7968e2ee10d7104ce1ba502d3122b0ab2
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat Nov 29 20:15:03 2025 -0600
Minor README.md corrections
commit b73a830b0f62fe43b38cc89d56d997bed355570c
Merge: e54cb007 53d90b11
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat Nov 29 19:59:35 2025 -0600
Merge remote-tracking branch 'raja/kpti' into arraybolt3/trixie
commit e54cb007f9fc351c25c292ffd68abe974be56bb0
Merge: 84e193c4 e43d4d7f
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sat Nov 29 19:54:10 2025 -0600
Merge remote-tracking branch 'raja/limit_bdev_writes' into arraybolt3/trixie
commit 84e193c44ec9ebf676d1fb4a32d6e2f68afd3d0d
Merge: 65c45fc3 5ac02d2d
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Fri Nov 28 14:21:59 2025 -0600
Merge remote-tracking branch 'raja/stop_tw_reuse' into arraybolt3/trixie
commit 65c45fc3d799cdf6402328cc61cbdd1949a12945
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Fri Nov 28 00:13:45 2025 -0600
Minor fixes to NMI panic docs
commit 37b1d055f18c6335e96c41c06174b66e43e4a8ff
Merge: 7280d886 ebc011e6
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Fri Nov 28 00:09:43 2025 -0600
Merge remote-tracking branch 'raja/panic_nmi' into arraybolt3/trixie
commit 7280d8867da50e05dd7d3071123d49b15660051d
Merge: 2089b3a9 62dc2d44
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Thu Nov 27 23:28:53 2025 -0600
Merge remote-tracking branch 'raja/amd_encrypt_ram' into arraybolt3/trixie
commit 2089b3a9b8e9d10c06850f0329f7e2eb8a8a12cc
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Nov 24 08:44:10 2025 +0000
bumped changelog version
commit cbd35502f19e74b6f95ff40bf03f02806eef3cdc
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Nov 24 03:18:25 2025 -0500
comment
commit cac73c3154b3278ad71edc0fd159afc71d5dbc45
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Nov 24 03:17:38 2025 -0500
minor
commit d68988e76cda939ce200d970e19310cadba5d08e
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Nov 24 03:17:25 2025 -0500
comments
commit c1ca36d75888b95835b953c3a8a122954c1e5929
Merge: ec116795 a3417e99
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Nov 24 03:11:19 2025 -0500
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit a3417e997d26e9a88d30da408d470fab98f58d79
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sun Nov 23 16:27:59 2025 -0600
Add pkexec remembered permissions fix for permission-hardener, fix some postinst bugs
commit edda37809fb186f6d85511e774957b701483ca66
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Sun Nov 23 14:54:02 2025 -0600
Remove obsolete migration code for permission-hardener, add initial permission-hardener state installation code
commit ec11679514d54c9a61e7c4e35ce81467b12333f4
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Nov 23 10:26:13 2025 +0000
bumped changelog version
commit 5c4d3162ab3c5178502c1f48e6288dc86cc45bb1
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Sun Nov 23 05:25:13 2025 -0500
fix
commit 30068ec8cdaa7a6778f0ba0b423f7ab3c3391759
Author: raja-grewal <rg_public@proton.me>
Date: Sat Nov 22 15:01:47 2025 +1100
Correct bitmask
commit f75e9873375d187fbbe4b5bfd135d0cd26a93fe6
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 13:06:42 2025 +0000
Relabel some disabled module headings
commit 79be87ec5f2cb22a98ada179b3aa97dfd58299e0
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 13:05:13 2025 +0000
Move (optional) CPU MSR module disable list
commit 1a7b0a9122cc6b6e755a540dd62fd018a1a7536d
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 12:43:05 2025 +0000
Disable more file systems
commit 1865cafe446c6a525bc63caa7ce1097ce573b877
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 12:42:10 2025 +0000
Move joydev from blacklist to disable
commit 28476d3d53a0e4796b4396a925c44ccf32f4fe90
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 12:40:12 2025 +0000
Update docs on GrapheneOS blacklisted modules
commit 446d3771bf8c42aba61d248bccfe9fad4eacc88d
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 12:38:44 2025 +0000
Update docs on CD-ROM/DVD blacklisting
commit 3646a2fefeaa774aea068d7c6e761c5b76479f55
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 12:37:57 2025 +0000
Move superseded brcm80211 to disabled
Split and replaced by brcmsmac and brcmfmac in kernel 2.6.39
commit 66ba273d448ff92c249abe9dd0f83a64cc1ee823
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 12:36:57 2025 +0000
Add CPU MSR modules
commit e6aa648d54f076c5c75d45bcd7658d502b701982
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 12:36:32 2025 +0000
Update docs on CPU MSR disabling
commit 59869979bbc2fb16da6b3435276e4930b4088f59
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 12:35:51 2025 +0000
Update docs on Vivid disabling
commit 4597fd16a9b94ebd6b4fae152a64288b665d9c36
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 12:35:03 2025 +0000
Sort RDNIS disabling and add docs
commit 5adc007536578c1e70a8cc6784fbced2033b7a5c
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 12:33:15 2025 +0000
Update docs on Intel PMT disabling
commit 31e3aa0c3add48ad26e43e4b83358571843f28de
Author: raja-grewal <rg_public@proton.me>
Date: Fri Nov 21 12:32:30 2025 +0000
Update docs on Bluetooth disabling
commit 9f85a78c9919d71c3e92099cac8525ac385aea5c
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Wed Nov 19 07:02:14 2025 +0000
bumped changelog version
commit 4e7cfb0d061810ec7c3139379a65db83abc39efc
Merge: d267cf67 936c799c
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Wed Nov 19 01:55:10 2025 -0500
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit 936c799cb5f48376fa259bb3b92b653526a00509
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Tue Nov 18 23:53:03 2025 -0600
Don't break passwordless sudo in unrestricted admin mode
commit 68025d3624e7543deec2fbe43ea0f010344e4160
Author: raja-grewal <rg_public@proton.me>
Date: Wed Nov 19 01:16:46 2025 +0000
Provide option to `panic_on_taint`
commit ebc011e67bff659778cbca2240c5e57d663f3f41
Author: raja-grewal <rg_public@proton.me>
Date: Wed Nov 19 11:35:04 2025 +1100
Typo
commit 62dc2d448366d190812773ec9eeadd38e1223cbc
Author: raja-grewal <rg_public@proton.me>
Date: Tue Nov 18 20:31:46 2025 +1100
Add note about Intel TME
commit 29176d2ed29b07c4da9b9c0df1eefd2bda70b984
Author: raja-grewal <rg_public@proton.me>
Date: Sat Nov 15 06:30:11 2025 +0000
Remove the option to reduce the MCE tolerance level
commit 9f897c5ccda781d010077446abb3d176cf929c94
Author: raja-grewal <rg_public@proton.me>
Date: Sat Nov 15 05:48:33 2025 +0000
Update docs on reducing the MCE tolerance level
commit b6fe1a5a6e164c7a7505b5e27ece582a1b928d82
Author: raja-grewal <rg_public@proton.me>
Date: Sat Nov 15 04:51:01 2025 +0000
Make panic related settings consistent
Ensures the `sysctl` and boot parameters are equivalent in settings and in description. This should prevent future questions regarding having omitted boot parameters that were actually redundant.
commit 99e993b885ca1fa30a871120b545f9334371cd5a
Author: raja-grewal <rg_public@proton.me>
Date: Sat Nov 15 03:16:07 2025 +0000
Provide options to enable AMD SME and SEV
commit d267cf6761076092c299508a0c356c05d0ee713d
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Nov 14 06:21:34 2025 +0000
bumped changelog version
commit efa06a1eae52b15978eb84f6ab4153ae88eb8d6a
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Fri Nov 14 00:44:50 2025 -0500
port to package-installed-check
commit abf5852ebabec81d553a60139fe5a15972d14ab5
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Wed Nov 12 06:13:05 2025 +0000
bumped changelog version
commit 3af891645503c62ff5510b78e5cbe73774ad72a2
Merge: fb587f78 3070aa5d
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Tue Nov 11 23:59:50 2025 -0500
Merge remote-tracking branch 'ArrayBolt3/arraybolt3/trixie'
commit d891313d57b469c28c08993b05d355b29ea08397
Author: raja-grewal <rg_public@proton.me>
Date: Tue Nov 11 11:39:21 2025 +0000
Provide options to panic upon receiving NMIs
commit 0b9b9ffb1e87850e3296d0420c305062b66868d5
Author: raja-grewal <rg_public@proton.me>
Date: Tue Nov 11 11:32:47 2025 +0000
Improve clarity for panic on OOM
commit 3070aa5d1f988b199030b31baa2fabc2db7b289f
Author: Aaron Rainbolt <arraybolt3@ubuntu.com>
Date: Mon Nov 10 22:40:15 2025 -0600
Fix passwordless login for sensitive accounts, only deny passwordless privilege escalation
commit ab98da957c732340ddb7bb43ed445835220c21d1
Author: raja-grewal <rg_public@proton.me>
Date: Tue Nov 11 04:28:56 2025 +0000
Re-set `net.ipv4.conf.*.log_martians=1`
commit fb587f78fd11e471b3169f8c67c1772c1ba3729d
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Nov 10 08:00:06 2025 +0000
bumped changelog version
commit fc1b865dd7a7663cbea8948c06ce45e69269a3b1
Author: Patrick Schleizer <adrelanos@whonix.org>
Date: Mon Nov 10 02:21:27 2025 -0500
debugging
commit 45126cede6563a3bfe9c700543fdec09442f1cb3
Author: Patrick Schleizer <adrelanos@whonix.org>