Commit Graph

121 Commits

Author SHA1 Message Date
Bob Mottram 2733e46d67 Predictable device names 2017-06-19 14:48:51 +01:00
Bob Mottram 81a78f5b92 Don't list selected apps 2017-06-17 18:11:42 +01:00
Bob Mottram 81e06abc20 Some filesystem optimisations for btrfs 2017-06-17 12:26:00 +01:00
Bob Mottram 641a576e24 Apache2 2017-06-14 10:50:46 +01:00
Bob Mottram a6cbf0dc65 Change location of resolv.conf 2017-06-14 10:48:41 +01:00
Bob Mottram c17a68139b Only purge the main apache package 2017-06-12 13:17:55 +01:00
Bob Mottram 04826948f0 Check for files 2017-06-01 21:30:17 +01:00
Bob Mottram 8b13d28361 Don't use monkeysphere 2017-06-01 17:59:28 +01:00
Bob Mottram dfda824730 utils setup sequence 2017-05-30 13:45:19 +01:00
Bob Mottram 8ba6c594b5 awk package 2017-05-29 19:48:42 +01:00
Bob Mottram d308c83e0a Change distro to stretch 2017-05-29 13:57:39 +01:00
Bob Mottram fbc4c53d3a letsencrypt permissions 2017-05-28 14:31:55 +01:00
Bob Mottram 2508d63134 Add powerline 2017-05-27 14:03:52 +01:00
Bob Mottram 3730e21fa9 app name during upgrade 2017-05-11 22:40:39 +01:00
Bob Mottram c9a1c8b510 ME might affect many x86 installs, so instead of stopping the show just remove the interface, which reduces risks a little 2017-05-02 17:35:23 +01:00
Bob Mottram cbddf8308f Check for AMT within tests, because it could get turned on after installation 2017-05-02 11:03:25 +01:00
Bob Mottram d6222879d2 Check for active Intel backdoor 2017-05-02 10:59:31 +01:00
Bob Mottram 427e910b0f Only use usb canary on non-mesh installs 2017-05-01 12:34:47 +01:00
Bob Mottram aabb4503f0 usb canary only installs once 2017-05-01 12:28:44 +01:00
Bob Mottram c7bffe6a77 Add usb canary 2017-05-01 12:25:15 +01:00
Bob Mottram bde41a1f21 Re-introduce rate limits on the firewall 2017-04-25 13:45:44 +01:00
Bob Mottram 38072abc54 Drop spoofed packets 2017-04-25 13:40:11 +01:00
Bob Mottram 794962ac85 Drop any outgoing telnet connections 2017-04-25 12:28:26 +01:00
Bob Mottram 39c126cba5 Remove any cached yarn files 2017-04-14 10:41:48 +01:00
Bob Mottram 425a4fc132 Block bad ip ranges 2017-03-31 15:27:09 +01:00
Bob Mottram 0913425df4 Take ownership of the snakeoil 2017-03-18 12:48:54 +00:00
Bob Mottram 16d1681d35 bad yarn cache permissions 2017-03-18 11:24:19 +00:00
Bob Mottram 873f67068d Bump /tmp to 150M to allow tahoe-lafs install 2017-03-04 22:31:08 +00:00
Bob Mottram 747f533efb Extra packages 2017-02-24 15:44:01 +00:00
Bob Mottram fbeb938fc8 Include more of the base install within image builds 2017-02-23 15:44:09 +00:00
Bob Mottram 840c5f7976 Remove unused function 2016-12-21 20:05:00 +00:00
Bob Mottram 7ad43b6800 quotes 2016-12-21 19:40:28 +00:00
Bob Mottram e3ff98ce41 quotes 2016-12-21 19:33:55 +00:00
Bob Mottram 2712e1cedd echo 2016-12-21 19:28:35 +00:00
Bob Mottram 5c7ac4e375 Permissions 2016-12-03 17:57:00 +00:00
Bob Mottram 0f89aafbad Prosody permissions 2016-12-03 13:07:29 +00:00
Bob Mottram 3806f4e4e9 Ensure prosody permissions 2016-12-03 12:37:07 +00:00
Bob Mottram 8d8ba4a788 dovecot permissions 2016-12-02 18:48:04 +00:00
Bob Mottram 46a4f19698 Dovecot permissions 2016-12-02 12:41:48 +00:00
Bob Mottram df8886a222 During interactive install bypass the app selecting stage
This will ensure that apps all get separate passwords assigned
2016-12-01 13:51:11 +00:00
Bob Mottram 3695d6a138 Bump size of tmp 2016-12-01 10:53:40 +00:00
Bob Mottram 4ed6e4ff7f Schedule daily STIG tests 2016-11-30 21:00:17 +00:00
Bob Mottram 42d5bc9321 Move tmp to a ramdisk 2016-11-30 20:10:51 +00:00
Bob Mottram 28e8155750 Modules aren't installed anyway 2016-11-30 18:27:07 +00:00
Bob Mottram 3f0d9b7b82 Disable null passwords 2016-11-30 17:54:45 +00:00
Bob Mottram b88a3e867b Disable tipc 2016-11-30 17:24:05 +00:00
Bob Mottram 6b4dba4771 Disable rds 2016-11-30 17:21:22 +00:00
Bob Mottram 21a3edf51a Disable sctp 2016-11-30 17:18:22 +00:00
Bob Mottram c9f6fbd54f Disable dccp 2016-11-30 17:15:43 +00:00
Bob Mottram 23f67f2426 Checking for ctrl-alt-del link 2016-11-30 15:43:31 +00:00