Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ghaf security hardening #661

Open
wants to merge 8 commits into
base: main
Choose a base branch
from
Open

Ghaf security hardening #661

wants to merge 8 commits into from

Commits on Jun 11, 2024

  1. Enable Apparmor security 

    - Added Apparmor configuration for Chromium and Firefox

Signed-off-by: Ganga Ram <Ganga.Ram@tii.ae>
    @gangaram-tii
    gangaram-tii committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    23265d8 View commit details
    Browse the repository at this point in the history

  2. Integration of ClamAV anti-virus toolkit 

    Signed-off-by: Ganga Ram <Ganga.Ram@tii.ae>
    @gangaram-tii
    gangaram-tii committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    74a555a View commit details
    Browse the repository at this point in the history

  3. Integration of Fail2Ban 

    - A intrusion prevention software framework
- Bans IP addresses conducting too many failed login attempts.

Signed-off-by: Ganga Ram <Ganga.Ram@tii.ae>
    @gangaram-tii
    gangaram-tii committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    86df98c View commit details
    Browse the repository at this point in the history

  4. Integrate FireJail security module 

    - Used to sandbox untrusted applications

Signed-off-by: Ganga Ram <Ganga.Ram@tii.ae>
    @gangaram-tii
    gangaram-tii committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    26854c1 View commit details
    Browse the repository at this point in the history

  5. Security module for networking 

    Signed-off-by: Ganga Ram <Ganga.Ram@tii.ae>
    @gangaram-tii
    gangaram-tii committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    b31c1a8 View commit details
    Browse the repository at this point in the history

  6. Module for system security 

    Signed-off-by: Ganga Ram <Ganga.Ram@tii.ae>
    @gangaram-tii
    gangaram-tii committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    f753f2d View commit details
    Browse the repository at this point in the history

  7. Enable basic security features in VMs 

    Signed-off-by: Ganga Ram <Ganga.Ram@tii.ae>
    @gangaram-tii
    gangaram-tii committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    a5ffa7b View commit details
    Browse the repository at this point in the history

Commits on Jun 14, 2024

  1. security options update 

    - use icons for jailed firefox and chromium from icon pack
- users options set to default in all VMs
- KASLR option removed as it is by default enabled in kernel
- sysrq disabled only in release build
- fail2ban enabled in net-vm only

Signed-off-by: Ganga Ram <Ganga.Ram@tii.ae>
    @gangaram-tii
    gangaram-tii committed Jun 14, 2024
    Configuration menu
    Copy the full SHA
    74afc89 View commit details
    Browse the repository at this point in the history