1. a5abda9 Exclude some specific users from Sudo I/O logging to avoid flooding the logs by WHR · 2 years, 4 months ago
  2. 55547ff Warn if newly created immutable /usr/tmpDSK wasn't actually immutable by WHR · 2 years, 4 months ago
  3. 3dfbcf6 Reorder perl wrapper code before any chflags call by WHR · 2 years, 4 months ago
  4. 51770ba chmod(1) /usr/share/fileflags/functions only when it was just created by setup.sh by WHR · 2 years, 4 months ago
  5. 11bf8c0 Make an immutable /usr/tmpDSK file preventively if /tmp was suspected being mounted with 'noexec'; fix failure to modify /etc/cron.daily/logrotate may inadvertently destroy the file by WHR · 2 years, 4 months ago
  6. 0990b40 Export REAL_PERL to environment from existing perl wrapper for the bundled chflags implementation by WHR · 2 years, 4 months ago
  7. daeb39c Add install_program function to unify actions that needed for installing executable files from source directory by WHR · 2 years, 4 months ago
  8. e24b843 Fix usage of bundled chflags(1) by WHR · 2 years, 4 months ago
  9. 3f49427 Overwrite existing configuration files only on '--reinstall-config-files'; allow re-run with '--harden' by WHR · 2 years, 5 months ago
  10. daaaec5 Make backup reboot command immutable on hardening by WHR · 2 years, 5 months ago
  11. 5f82e6f Optionally harden installed files by WHR · 2 years, 5 months ago
  12. bfb0e4b Check the working directory in beginning of setup.sh by WHR · 2 years, 5 months ago
  13. 9d176bb Trash /usr/tmpDSK via the associated loop device; make /usr/tmpDSK immutable immediately after truncating by WHR · 2 years, 5 months ago
  14. f643f08 Try to get real perl path from previously installed perl wrapper by WHR · 2 years, 5 months ago
  15. 632ca11 Suppress dd(1) statistics by WHR · 2 years, 5 months ago
  16. 615b8a0 Detect and continue with previous cattr backup on '--replace-chattr' by WHR · 2 years, 5 months ago
  17. d452b99 Fix a logical error in function append_or_set_words by WHR · 2 years, 5 months ago
  18. dd72196 Skip adding Sudo options if they already exist in sudoers(5) by WHR · 2 years, 5 months ago
  19. d7d1ada Don't add duplicated lines into .bashrc and .profile by WHR · 2 years, 5 months ago
  20. 791d13a Fix kernel name of 'Linux' by WHR · 2 years, 5 months ago
  21. 2021eb3 Don't remove lattr by WHR · 2 years, 5 months ago
  22. 4a7a0ab Don't truncate /usr/tmpDSK if it is already empty by WHR · 2 years, 5 months ago
  23. 1690920 Add a variant of fake reboot command that reminds users the correct way of rebooting/halting the system by WHR · 2 years, 5 months ago
  24. 6894e98 procd is available for Linux only by WHR · 2 years, 5 months ago
  25. 688cb88 Write fixed PATH into .profile, and .bash_profile if exists by WHR · 2 years, 5 months ago
  26. 50608d5 Don't print result of 'systemctl is-enabled' by WHR · 2 years, 5 months ago
  27. 07f9c7e Check availability of sudo(1); set LD_PRELOAD for fake root shell under a specific condition; fix typo by WHR · 2 years, 5 months ago
  28. fb5b152 Correctly recognize and mention '--remove-utempter' by WHR · 2 years, 5 months ago
  29. 753dba1 Warn if fakeroot-ng(1) internally references /dev/shm by WHR · 2 years, 5 months ago
  30. e6eb560 Detect GNU more reliably by WHR · 2 years, 5 months ago
  31. 7e7cb2f Try to use multiple available methods to set file flags by WHR · 2 years, 5 months ago
  32. 1fe83b4 Optionally remove utempter helper to prevent script(1) from writing utmpx records by WHR · 2 years, 5 months ago
  33. 7c4d4fe Reject unknown options by WHR · 2 years, 5 months ago
  34. ef442e5 Correctly detect already replaced chattr(1) and lsattr(1) by WHR · 2 years, 5 months ago
  35. 1fb4878 Adjust warning messages for user bashrc file by WHR · 2 years, 5 months ago
  36. 4aad38c Hint the custom chflags(1) to use original perl(1) executable by WHR · 2 years, 5 months ago
  37. 5a339b0 Optionally install an Unix-shell-based chflags(1) implementation for Linux by WHR · 2 years, 5 months ago
  38. 67b87e3 Ignore chmod(1) of /var/log/shd.log failure as it could already being made append-only by a previous setup by WHR · 2 years, 5 months ago
  39. 802886a Optionally replace /sbin/init to reject uses of sysvinit-style runlevel control command on systemd-based system by WHR · 2 years, 6 months ago
  40. 93a2761 'chmod 0' for securetmp mask files by WHR · 2 years, 7 months ago
  41. 1ca8ce4 Correct sed(1) command for editing /etc/fstab by WHR · 2 years, 7 months ago
  42. 4985bea Make replaced tar(1) immutable by WHR · 2 years, 8 months ago
  43. e06ccb6 Check bashrc by WHR · 2 years, 8 months ago
  44. 770a0b2 Detect and deactivate cPanel securetmp service as it will break fakeroot-ng(1) by WHR · 2 years, 8 months ago
  45. 3c5afc0 Try to detect and correct inappropriate PATH variable in setup.sh by WHR · 2 years, 10 months ago
  46. cf82955 Minor fix for 'replace tar' action by WHR · 2 years, 12 months ago
  47. acd4a15 Fix [(1) may getting multiple pathes from shell path name expansion by WHR · 3 years, 1 month ago
  48. 5235db1 Optionally replace tar(1) to reject deprecated usages by WHR · 3 years, 1 month ago
  49. f408854 Set PATH in crontab when installing update-blacklist by WHR · 3 years, 3 months ago
  50. 476dd78 Add help/usage message to setup.sh by WHR · 3 years, 3 months ago
  51. 1fea188 Add option to install update-blacklist and associated cron command by WHR · 3 years, 3 months ago
  52. b36c762 Configure sudo(1) to preseve some environment variables when configuring sudo I/O logging; check /dev/shm guarding in global bashrc by WHR · 3 years, 3 months ago
  53. d74e963 Add optional procd by WHR · 3 years, 4 months ago
  54. 9d4e8b1 Use dd(1) to actually try to read(2) from the file to test readability of it, as '[ -r' is sometimes unreliable by WHR · 3 years, 4 months ago
  55. 04b0869 Add option '--configure-sudo-io-logging' to setup.sh by WHR · 3 years, 4 months ago
  56. 7e95181 Add 2 options to setup.sh for optionally replacing some commands by WHR · 3 years, 4 months ago
  57. 74bd1e2 Disable systemd-tmpfiles-clean if applicable by WHR · 3 years, 4 months ago
  58. f988fc2 Check fakeroot-ng(1) availability; make perl wrapper immutable by WHR · 3 years, 4 months ago
  59. 62bcca8 Avoid printing error messages from shdrc when it is read by unprivileged shell under fakeroot-ng(1) by WHR · 3 years, 6 months ago
  60. 03cea14 Fix variable SFTP_SERVER_PROGRAM may containing space to provide options which breaks sed(1) by WHR · 3 years, 6 months ago
  61. f417ed6 Add commented sample commands for a falsely privileged shell using sudo(1) and fakeroot-ng(1) by WHR · 3 years, 6 months ago
  62. 8934afe Allow sftp-server(8) to be used correctly with mbash by WHR · 3 years, 8 months ago
  63. 3e09dc8 Add fake reboot command by WHR · 3 years, 9 months ago
  64. 80c5a9c Bug fix by WHR · 8 years ago
  65. b4784de Add copyright and license header by WHR · 8 years ago
  66. 8ed7003 Create logging in log files if missing for GNU systems; log command line in mbash by WHR · 8 years ago
  67. 86df536 Set SELinux context for executables; Warn about missing important executables; Drop error message of which(1) by WHR · 8 years ago
  68. e5c12dd Bug fixes by WHR · 8 years ago
  69. 76ac8f3 Remove '.sh' suffix for scripts except setup.sh by WHR · 8 years ago
  70. 2b1acf9 Add mbash(1) to setup.sh by WHR · 8 years ago
  71. 5c87ad5 Add perl(1) wrapper by WHR · 8 years ago
  72. f741211 Use restricted bash(1) with PATH=/dev/pts as shell by WHR · 8 years ago
  73. bc3d223 Start working with Git by WHR · 8 years ago