msw/CISS.debian.live.builder
SHA256
2
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 6 Wiki Activity

V8.04.002.2025.08.11
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 56s
Details

Browse Source 
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
Marc S. Weidner
2025-08-12 01:26:09 +02:00
parent 527d9f6e48
commit c53fe4cf92
5 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.gitea/workflows/generate_PRIVATE_iso_flavour_0.yaml
View File

@@ -381,7 +381,7 @@ jobs:
# SPDX-PackageName: CISS.debian.live.builder # SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu # SPDX-Security-Contact: security@coresecret.eu
This file was automatically generated by the DEPLOY BOT on: "${timestamp}". This file was automatically generated by the DEPLOY BOT on: "${timestamp}"
CISS.debian.live.builder ISO : CISS.debian.live.builder ISO :
"${VAR_ISO_FILE_NAME}" "${VAR_ISO_FILE_NAME}"

2
.gitea/workflows/generate_PRIVATE_iso_flavour_1.yaml
View File

@@ -378,7 +378,7 @@ jobs:
# SPDX-PackageName: CISS.debian.live.builder # SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu # SPDX-Security-Contact: security@coresecret.eu
This file was automatically generated by the DEPLOY BOT on: "${timestamp}". This file was automatically generated by the DEPLOY BOT on: "${timestamp}"
CISS.debian.live.builder ISO : CISS.debian.live.builder ISO :
"${VAR_ISO_FILE_NAME}" "${VAR_ISO_FILE_NAME}"

2
.gitea/workflows/generate_PUBLIC_iso.yaml
View File

@@ -378,7 +378,7 @@ jobs:
# SPDX-PackageName: CISS.debian.live.builder # SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu # SPDX-Security-Contact: security@coresecret.eu
This file was automatically generated by the DEPLOY BOT on: "${timestamp}". This file was automatically generated by the DEPLOY BOT on: "${timestamp}"
CISS.debian.live.builder ISO : CISS.debian.live.builder ISO :
"${VAR_ISO_FILE_NAME}" "${VAR_ISO_FILE_NAME}"

4
.gitea/workflows/linter_char_scripts.yaml
View File

@@ -216,7 +216,7 @@ jobs:
# SPDX-PackageName: CISS.debian.live.builder # SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu # SPDX-Security-Contact: security@coresecret.eu
This file was automatically generated by the DEPLOY BOT on: "${timestamp}". This file was automatically generated by the DEPLOY BOT on: "${timestamp}"
⚠️ The last linter check was NOT successful. ⚠️ ⚠️ The last linter check was NOT successful. ⚠️
@@ -239,7 +239,7 @@ jobs:
# SPDX-PackageName: CISS.debian.live.builder # SPDX-PackageName: CISS.debian.live.builder
# SPDX-Security-Contact: security@coresecret.eu # SPDX-Security-Contact: security@coresecret.eu
This file was automatically generated by the DEPLOY BOT on: "${timestamp}". This file was automatically generated by the DEPLOY BOT on: "${timestamp}"
✅ The last linter check was successful. ✅ ✅ The last linter check was successful. ✅

10
config/hooks/live/9996_auditd.chroot
View File

@@ -48,20 +48,20 @@ cat << EOF >| /etc/audit/rules.d/11-loginuid.rules
EOF EOF
############################################################### /etc/audit/rules.d/20-dont-audit.rules ############################################################### /etc/audit/rules.d/20-dont-audit.rules
cat << EOF >| /etc/audit/rules.d/20-dont-audit.rules #cat << EOF >| /etc/audit/rules.d/20-dont-audit.rules
## This is for don't audit rules. We put these early because audit ## This is for don't audit rules. We put these early because audit
### is a first match wins system. Uncomment the rules you want. ### is a first match wins system. Uncomment the rules you want.
## Cron jobs fill the logs with stuff we normally don't want ## Cron jobs fill the logs with stuff we normally don't want
-a never,user -F subj_type=crond_t #-a never,user -F subj_type=crond_t
## This prevents chrony from overwhelming the logs ## This prevents chrony from overwhelming the logs
-a never,exit -F arch=x86_64 -S adjtimex -F auid=unset -F uid=_chrony -F subj_type=chronyd_t #-a never,exit -F arch=x86_64 -S adjtimex -F auid=unset -F uid=_chrony -F subj_type=chronyd_t
### This is not very interesting and wastes a lot of space if ### This is not very interesting and wastes a lot of space if
### the server is public facing ### the server is public facing
-a always,exclude -F msgtype=CRYPTO_KEY_USER #-a always,exclude -F msgtype=CRYPTO_KEY_USER
EOF #EOF
############################################################### /etc/audit/rules.d/21-no32bit.rules ############################################################### /etc/audit/rules.d/21-no32bit.rules
cat << EOF >| /etc/audit/rules.d/21-no32bit.rules cat << EOF >| /etc/audit/rules.d/21-no32bit.rules