Rivoreo Source Code Repositories
src.rivoreo.one / security / yeslogin / c64137f6aa48fde836a075244cf29ea8ae733cce
  1. c64137f Check user account 'dudu' by WHR · 5 months ago
  2. a7bc62f Optionally remove cloud-init by WHR · 5 months ago
  3. 7378ab9 Check a fixed list of suspicious systemd unit files, and automatically remove them by WHR · 5 months ago
  4. 8a0d96f Add some simple wrapper for some specific commands, ported from 'aliin-brute-trap/honeypot-shell', of fuck-vvnnmm by WHR · 5 months ago
  5. 92aec39 Check user names 'ad1tz' and 'systemd' in addition to 'pischi' by WHR · 5 months ago
  6. 717f40c procd: detect bind mounted '/dev' over procfs PID directories and unmount them by WHR · 5 months ago
  7. ac748fd Check a fixed list of suspicious directories by WHR · 5 months ago
  8. 1174655 If tar(1) looks like already being replaced, make it immutable by WHR · 5 months ago
  9. 4fe1825 Also check and remove /www/server/panel/script/log_cleanup.py by WHR · 5 months ago
  10. 9dce2a5 Add end-of-options marker for some commands as necessary by WHR · 5 months ago
  11. e2e08ef Detect and remove BT clear plugin as it may remove important log files by WHR · 5 months ago
  12. 051a9be Check and warn about the potentially malicious 'pischi' user account by WHR · 5 months ago
  13. 33e5fdd Add blacklist source host keys without port number to allow it be configured using the default port by WHR · 5 months ago
  14. c132e3e Drop previous crontab content if contains error by WHR · 5 months ago
  15. cfd54ed Fallback to chflags(1) to make replaced chattr(1) and lsattr(1) immutable by WHR · 8 months ago
  16. 349a260 Don't consider empty /usr/bin/chattr and /usr/bin/lsattr for backup by WHR · 8 months ago
  17. 18489c5 Optionally disallow loopback SSH connections by WHR · 8 months ago
  18. f9fc15e Fix typo in bindfiles.service by WHR · 8 months ago
  19. 13a51e1 Always report error from lsattr(1) by WHR · 9 months ago
  20. 1101582 Update fileflags by WHR · 9 months ago
  21. d9d7d2e Refuse to update blacklist for invalid HOME by WHR · 9 months ago
  22. a0de195 Optionally bind mount important system files to protect them by WHR · 9 months ago
  23. b1ee009 Don't depend on which(1) from shdrc by WHR · 9 months ago
  24. 6c56e61 Optionally limit number of processes in mbash by WHR · 9 months ago
  25. 1c536d2 Make failed to start procd(8) via systemd(1) a non-fatal error by WHR · 9 months ago
  26. 5939334 Make modified inclusive sudoers files immutable by WHR · 10 months ago
  27. cc9ce50 Use function append_uniq_line to add set PATH line into .profile and .bash_profile by WHR · 10 months ago
  28. 2659e94 Recognize more characters as need quote in perl(1) wrapper; fix missing new line in an error message in perl(1) wrapper by WHR · 10 months ago
  29. b48b7e5 Check HOME environment variable by WHR · 10 months ago
  30. 62be90e Skip replacing /sbin/init on non-Linux platforms; set proper SELinux security context for newly replaced /sbin/init by WHR · 11 months ago
  31. 6e4ca71 Quote command line arguments that contain single quotes in perl log by WHR · 11 months ago
  32. 27cf98e Re-exec sudo bash with an empty zeroth argument by WHR · 11 months ago
  33. a5abda9 Exclude some specific users from Sudo I/O logging to avoid flooding the logs by WHR · 11 months ago
  34. 55547ff Warn if newly created immutable /usr/tmpDSK wasn't actually immutable by WHR · 11 months ago
  35. 3dfbcf6 Reorder perl wrapper code before any chflags call by WHR · 11 months ago
  36. cc1885c Use ps(1)-style tty name in function write_history (strip /dev/ prefix, use ? for no tty) by WHR · 11 months ago
  37. c2eded2 procd: match mount from name 'systemd-?' to check pid directories for unmounting by WHR · 11 months ago
  38. 51770ba chmod(1) /usr/share/fileflags/functions only when it was just created by setup.sh by WHR · 11 months ago
  39. 11bf8c0 Make an immutable /usr/tmpDSK file preventively if /tmp was suspected being mounted with 'noexec'; fix failure to modify /etc/cron.daily/logrotate may inadvertently destroy the file by WHR · 11 months ago
  40. 24b6921 shdrc: make PROMPT_COMMAND read-only by WHR · 11 months ago
  41. 0990b40 Export REAL_PERL to environment from existing perl wrapper for the bundled chflags implementation by WHR · 11 months ago
  42. daeb39c Add install_program function to unify actions that needed for installing executable files from source directory by WHR · 11 months ago
  43. e040eeb Make sure .bash_history and .ash_commands are regular files by WHR · 11 months ago
  44. e24b843 Fix usage of bundled chflags(1) by WHR · 11 months ago
  45. 3f49427 Overwrite existing configuration files only on '--reinstall-config-files'; allow re-run with '--harden' by WHR · 11 months ago
  46. daaaec5 Make backup reboot command immutable on hardening by WHR · 11 months ago
  47. 5f82e6f Optionally harden installed files by WHR · 11 months ago
  48. bfb0e4b Check the working directory in beginning of setup.sh by WHR · 11 months ago
  49. 8f2b1cb Read /etc/hosts.allow to decide whether to allow a remote login if it available by WHR · 11 months ago
  50. 9d176bb Trash /usr/tmpDSK via the associated loop device; make /usr/tmpDSK immutable immediately after truncating by WHR · 11 months ago
  51. f643f08 Try to get real perl path from previously installed perl wrapper by WHR · 11 months ago
  52. 632ca11 Suppress dd(1) statistics by WHR · 11 months ago
  53. 615b8a0 Detect and continue with previous cattr backup on '--replace-chattr' by WHR · 11 months ago
  54. d452b99 Fix a logical error in function append_or_set_words by WHR · 11 months ago
  55. dd72196 Skip adding Sudo options if they already exist in sudoers(5) by WHR · 11 months ago
  56. d7d1ada Don't add duplicated lines into .bashrc and .profile by WHR · 11 months ago
  57. 791d13a Fix kernel name of 'Linux' by WHR · 11 months ago
  58. 2021eb3 Don't remove lattr by WHR · 11 months ago
  59. 4a7a0ab Don't truncate /usr/tmpDSK if it is already empty by WHR · 11 months ago
  60. 1690920 Add a variant of fake reboot command that reminds users the correct way of rebooting/halting the system by WHR · 11 months ago
  61. 6894e98 procd is available for Linux only by WHR · 11 months ago
  62. 84d7452 procd: try to unmount deleted PID mountpoint by WHR · 11 months ago
  63. 688cb88 Write fixed PATH into .profile, and .bash_profile if exists by WHR · 11 months ago
  64. 50608d5 Don't print result of 'systemctl is-enabled' by WHR · 11 months ago
  65. fab691f Revise perl(1) wrapper by WHR · 11 months ago
  66. 07f9c7e Check availability of sudo(1); set LD_PRELOAD for fake root shell under a specific condition; fix typo by WHR · 11 months ago
  67. 230679f Update fileflags by WHR · 11 months ago
  68. fb5b152 Correctly recognize and mention '--remove-utempter' by WHR · 11 months ago
  69. 753dba1 Warn if fakeroot-ng(1) internally references /dev/shm by WHR · 11 months ago
  70. e6eb560 Detect GNU more reliably by WHR · 11 months ago
  71. 7e7cb2f Try to use multiple available methods to set file flags by WHR · 11 months ago
  72. 9d41b94 Update fileflags by WHR · 11 months ago
  73. 1fe83b4 Optionally remove utempter helper to prevent script(1) from writing utmpx records by WHR · 11 months ago
  74. 7c4d4fe Reject unknown options by WHR · 11 months ago
  75. ef442e5 Correctly detect already replaced chattr(1) and lsattr(1) by WHR · 11 months ago
  76. 1fb4878 Adjust warning messages for user bashrc file by WHR · 11 months ago
  77. 4aad38c Hint the custom chflags(1) to use original perl(1) executable by WHR · 12 months ago
  78. 5a339b0 Optionally install an Unix-shell-based chflags(1) implementation for Linux by WHR · 12 months ago
  79. 67b87e3 Ignore chmod(1) of /var/log/shd.log failure as it could already being made append-only by a previous setup by WHR · 12 months ago
  80. 802886a Optionally replace /sbin/init to reject uses of sysvinit-style runlevel control command on systemd-based system by WHR · 12 months ago
  81. 313101d Don't write last historical command into .ash_commands on shell startup by WHR · 1 year, 1 month ago
  82. 93a2761 'chmod 0' for securetmp mask files by WHR · 1 year, 1 month ago
  83. cf69c9d Check UID variable before re-exec sudo bash by WHR · 1 year, 1 month ago
  84. 1ca8ce4 Correct sed(1) command for editing /etc/fstab by WHR · 1 year, 1 month ago
  85. 4985bea Make replaced tar(1) immutable by WHR · 1 year, 2 months ago
  86. 2dbf387 Suppress file opening error messages from shdrc by WHR · 1 year, 2 months ago
  87. e06ccb6 Check bashrc by WHR · 1 year, 2 months ago
  88. 770a0b2 Detect and deactivate cPanel securetmp service as it will break fakeroot-ng(1) by WHR · 1 year, 3 months ago
  89. fd9c78f Unexport history-related variables in bash(1) from shdrc by WHR · 1 year, 4 months ago
  90. 3c5afc0 Try to detect and correct inappropriate PATH variable in setup.sh by WHR · 1 year, 4 months ago
  91. 973d3d5 Support using IP network address with CIDR prefix length in blacklist by WHR · 1 year, 6 months ago
  92. cf82955 Minor fix for 'replace tar' action by WHR · 1 year, 6 months ago
  93. acd4a15 Fix [(1) may getting multiple pathes from shell path name expansion by WHR · 1 year, 7 months ago
  94. 5235db1 Optionally replace tar(1) to reject deprecated usages by WHR · 1 year, 7 months ago
  95. 381a52b Fix assuming working directory by WHR · 1 year, 8 months ago
  96. f408854 Set PATH in crontab when installing update-blacklist by WHR · 1 year, 9 months ago
  97. 285567c shdrc: create .ash_commands under home instead of working directory by WHR · 1 year, 9 months ago
  98. 476dd78 Add help/usage message to setup.sh by WHR · 1 year, 9 months ago
  99. 1fea188 Add option to install update-blacklist and associated cron command by WHR · 1 year, 9 months ago
  100. 8f8abcb Don't assume the shell will always be started under home directory and write .login.log to working directory by WHR · 1 year, 9 months ago