Skip to content

remount-secure improvements - #68

Closed
madaidan wants to merge 3 commits into
Kicksecure:masterfrom
madaidan:remount-secure
Closed

madaidan wants to merge 3 commits into
Kicksecure:masterfrom
madaidan:remount-secure

Conversation

@madaidan

@madaidan madaidan commented Mar 7, 2020

Copy link
Copy Markdown
Contributor
  • Adds noexec to /run regardless of /etc/noexec. This shouldn't break anything.
  • Mounts /etc as nosuid,nodev. noexec breaks LightDM.
  • Mounts /usr, /bin and /sbin as nodev.
  • Mounts /var and /boot as nosuid,nodev,noexec.

@madaidan madaidan closed this Mar 7, 2020
assisted-by-ai pushed a commit to org-ai-assisted/security-misc that referenced this pull request May 12, 2026
Per dmf Kicksecure#68 (reusable-cppcheck.yml hard refactor). The old
cppcheck.yml wrapper passed inputs (paths, prepare-command) that
no longer exist on the reusable. Without this migration the
next cppcheck run (PR / master push) would fail because the
reusable's runtime config-load step would not find the cppcheck
section in .github/dm-consumer.yml.

Changes:

- .github/dm-consumer.yml: add cppcheck.paths +
  cppcheck.prepare-command (the values the old wrapper passed
  via `with:`).
- Renamed: .github/workflows/cppcheck.yml ->
  consumer-cppcheck.yml, byte-identical to dmf canonical (no
  `with:`, just the reusable call).
adrelanos pushed a commit that referenced this pull request May 15, 2026
Per dmf #67 (reusable refactor) + #68 (deadlock hotfix):

- New: .github/dm-consumer.yml with coverity.project-name +
  canonical-repos.
- Renamed: .github/workflows/coverity.yml -> consumer-coverity.yml,
  byte-identical to dmf canonical (no `with:`, secrets-only).

Behavior change:

- Cron slot moves from '30 6 * * 0' (Sunday 06:30) to
  '0 4 * * 5' (Friday 04:00) - the org-wide singleton slot in
  the canonical template.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant