V8.03.880.2025.07.19

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

config/includes.chroot/etc/ssh/sshd_config

@@ -9,7 +9,7 @@
 # SPDX-PackageName: CISS.debian.live.builder
 # SPDX-Security-Contact: security@coresecret.eu
 
-### Version Master V8.03.864.2025.07.15
+### Version Master V8.03.880.2025.07.19
 
 ### https://www.ssh-audit.com/
 ### ssh -Q cipher | cipher-auth | compression | kex | kex-gss | key | key-cert | key-plain | key-sig | mac | protocol-version | sig
@@ -31,12 +31,12 @@ ListenAddress                ::
 Port MUST_BE_CHANGED
 AllowUsers                   root
 UseDNS                       no
-### Force a key exchange after transferring 1 GiB of data or 1 hour of session time,
-### whichever occurs first.
+### Force a key exchange after transferring 1 GiB of data or 1 hour of session time, whichever occurs first.
 RekeyLimit                   1G 1h
 
 HostKey                      /etc/ssh/ssh_host_ed25519_key
 HostKey                      /etc/ssh/ssh_host_rsa_key
+TrustedUserCAKeys            none
 
 PubkeyAuthentication         yes
 PermitRootLogin              prohibit-password

config/includes.chroot/etc/sysctl.d/99_local.hardened

@@ -9,7 +9,7 @@
 # SPDX-PackageName: CISS.debian.live.builder
 # SPDX-Security-Contact: security@coresecret.eu
 
-### Version Master V8.03.864.2025.07.15
+### Version Master V8.03.880.2025.07.19
 
 ### https://docs.kernel.org/
 ### https://github.com/a13xp0p0v/kernel-hardening-checker/

config/includes.chroot/preseed/.iso/preseed_hash_generator.sh

@@ -10,7 +10,7 @@
 # SPDX-PackageName: CISS.debian.live.builder
 # SPDX-Security-Contact: security@coresecret.eu
 
-declare -gr VERSION="Master V8.03.864.2025.07.15"
+declare -gr VERSION="Master V8.03.880.2025.07.19"
 
 ### VERY EARLY CHECK FOR DEBUGGING
 if [[ $* == *" --debug "* ]]; then

config/includes.chroot/preseed/preseed.cfg

@@ -112,4 +112,4 @@ d-i preseed/late_command string sh /preseed/.ash/3_di_preseed_late_command.sh
 
 # Please consider donating to my work at: https://coresecret.eu/spenden/
 ###########################################################################################
-# Written by: ./preseed_hash_generator.sh Version: Master V8.03.864.2025.07.15 at: 10:18:37.9542
+# Written by: ./preseed_hash_generator.sh Version: Master V8.03.880.2025.07.19 at: 10:18:37.9542

config/includes.chroot/root/.ciss/alias

@@ -60,6 +60,7 @@ alias aptupd='apt update'
 alias aptupg='apt upgrade'
 alias apti='apt install'
 alias aptp='apt purge'
+alias aptpp='dpkg --purge'
 alias aptr='apt remove'
 alias aptse='apt search'
 alias aptsh='apt show'
@@ -224,10 +225,34 @@ sysp() {
 #######################################
 # Wrapper for tree
 # Arguments:
-#  $1: Depth of Directory Listing
+#   1: Depth of Directory Listing
 #######################################
 trel() {
   declare depth=${1:-3}
   tree -C -h --dirsfirst -L "${depth}"
 }
+
+#######################################
+# Wrapper for package and path to bin.
+# Arguments:
+#   1: Program
+#######################################
+whichpackage() {
+  if ! command -v "$1" >/dev/null 2>&1; then
+    printf 'Error: Program '%s' not found.\n' "$1" >&2
+    exit 1
+  fi
+  dpkg -S "$(which "$1")"
+}
+
+#######################################
+# Wrapper for Diskspace used in Path.
+# Arguments:
+#   1: Path (defaults /var)
+#   2: Depth (defaults 1)
+#   3: Number of Entries (defaults 16)
+#######################################
+whichused() {
+  du -h --max-depth="${2:-1}" "${1:-/var}" | sort -hr | head -n "${3:-16}"
+}
 # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh

config/includes.chroot/root/.ciss/shortcuts

@@ -21,6 +21,7 @@ declare -ga shortcuts=(
   "apti: apt install"
   "aptimage: get Kernel Img"
   "aptp: apt purge"
+  "aptpp: dpkg --purge"
   "aptr: apt remove"
   "aptse: apt search"
   "aptsh: apt show"
@@ -83,6 +84,8 @@ declare -ga shortcuts=(
   "whatdelete: lsof | grep deleted"
   "whatimage: dpkg --list | grep linux"
   "whatpurge: dpkg --get-selections"
+  "whichpackage <PROGRAM>"
+  "whichused <PATH> <DEPTH> <ENTRIES>"
 )
 
 #######################################