V8.13.290.2025.10.26

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

config/hooks/live/0001_initramfs_modules.chroot

@@ -105,9 +105,9 @@ sha512_generic
 xts
 
 ### cryptsetup -----------------------------------------------------------------------------------------------------------------
-dm_mod
 dm_crypt
 dm_integrity
+dm_mod
 dm_verity
 
 ### Entropy --------------------------------------------------------------------------------------------------------------------
@@ -117,6 +117,11 @@ rng_core
 ### ESP/FAT/UEFI ---------------------------------------------------------------------------------------------------------------
 exfat
 fat
+nls_ascii
+nls_cp437
+nls_iso8859-1
+nls_iso8859-15
+nls_utf8
 vfat
 
 ### ext4 -----------------------------------------------------------------------------------------------------------------------
@@ -144,14 +149,14 @@ nf_nat
 nf_reject_ipv4
 nf_reject_ipv6
 nf_tables
+nfnetlink
+nfnetlink_log
 nft_ct
 nft_limit
 nft_log
 nft_masq
 nft_nat
 nft_reject_inet
-nfnetlink
-nfnetlink_log
 
 ### NVMe -----------------------------------------------------------------------------------------------------------------------
 nvme
@@ -165,24 +170,24 @@ raid456
 raid6_pq
 
 ### SCSI/SATA ------------------------------------------------------------------------------------------------------------------
-sd_mod
-sr_mod
-sg
 ahci
-libahci
 ata_generic
+libahci
 libata
-scsi_mod
 scsi_dh_alua
+scsi_mod
+sd_mod
+sg
+sr_mod
 
 ### USB ------------------------------------------------------------------------------------------------------------------------
-xhci_pci
-xhci_hcd
 ehci_pci
 ohci_pci
+uas
 uhci_hcd
 usb_storage
-uas
+xhci_hcd
+xhci_pci
 
 ### Virtual --------------------------------------------------------------------------------------------------------------------
 virtio_blk

config/hooks/live/9950_hardening_fail2ban.chroot

@@ -46,6 +46,7 @@ dbpurgeage            = 384d
 #                       ff00::/8    - IPv6 multicast (not an unicast host)
 #                       ::/128      - IPv6 unspecified (all zeros; never a real peer)
 ignoreip              = 127.0.0.1/8 ::1/128 fe80::/10 ff00::/8 ::/128 IGNORE_IP_MUST_BE_SET
+usedns		            = yes
 
 [recidive]
 enabled               = true

config/includes.chroot/etc/ssh/ssh_known_hosts

@@ -9,7 +9,7 @@
 # SPDX-PackageName: CISS.debian.live.builder
 # SPDX-Security-Contact: security@coresecret.eu
 
-# Version Master V8.13.288.2025.10.24
+# Version Master V8.13.290.2025.10.26
 
 [git.coresecret.dev]:42842 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGQA107AVmg1D/jnyXiqbPf38zQRl8s3c+PM1zbfpeQl
 [git.coresecret.dev]:42842 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDYD9ysmMWZlejUnxu0qOzeWcIYezoFLbYdo6ffGUL5kqOBAYb+5CF4bJLUpA93XFYVF+TbrcMV1yJh6JaHFL0VU5CvgAzruCeedx0c4qUV6lWcJUGNk5K0yb9n2Wosdy6F/zTOxL9KXBt/TV+cscsen2Dahvx0ctMKgNbu+vvUcWxHf9lOkbYoF/uA/nW5CVXy5XUPVUDFUhEeKXL85+6gid5AEMfYT8aRl5YDGvo1iMBmBYOljN4S7MnRe14qbAZG0GDGvF22eHbSU2pILcFIjc2Lo/S5Ox/MJpbLAqpFlLPTKgr6F7yVwfNMSNwl05ysUOZfrQKSXzCU6+lfqKYCwemLALyG/n1ernpp7/8W/2RYoz3fd+TQyfhW++rx3yUHpYCkTv9A4LRYZYGSAWKMHSBEYq3EcATQUxQi0xpwmcR+u0uC9F9eta5Bim+sBZD6F2hgPJ5xgYT8LFm880g1YadAwBoD4TAkqSvl+jYW0VA2GH9CknKHJ36gc/X4eeUHDC1Hf/E8M5RBj4D6NuHfeVRik/ahHmoCqKQUW7VU/EBsWFsngDiLEHcV71iMtWiUddWOHwoAPHIzn6p9HTeLCxTwsPMG5UDGK/S9HUozqDXxexRtqbcFa7DWuzRvZ1bcZ2VQsaafuzKCkkc4NjC7h1wssel7q9aeYPFg+1vS6Q==

config/includes.chroot/etc/ssh/sshd_config

@@ -9,7 +9,7 @@
 # SPDX-PackageName: CISS.debian.live.builder
 # SPDX-Security-Contact: security@coresecret.eu
 
-# Version Master V8.13.288.2025.10.24
+# Version Master V8.13.290.2025.10.26
 
 ### https://www.ssh-audit.com/
 ### ssh -Q cipher | cipher-auth | compression | kex | kex-gss | key | key-cert | key-plain | key-sig | mac | protocol-version | sig

config/includes.chroot/etc/sysctl.d/99_local.hardened

@@ -9,7 +9,7 @@
 # SPDX-PackageName: CISS.debian.live.builder
 # SPDX-Security-Contact: security@coresecret.eu
 
-# Version Master V8.13.288.2025.10.24
+# Version Master V8.13.290.2025.10.26
 
 ### https://docs.kernel.org/
 ### https://github.com/a13xp0p0v/kernel-hardening-checker/

config/includes.chroot/preseed/.iso/preseed_hash_generator.sh

@@ -10,7 +10,7 @@
 # SPDX-PackageName: CISS.debian.live.builder
 # SPDX-Security-Contact: security@coresecret.eu
 
-declare -gr VERSION="Master V8.13.288.2025.10.24"
+declare -gr VERSION="Master V8.13.290.2025.10.26"
 
 ### VERY EARLY CHECK FOR DEBUGGING
 if [[ $* == *" --debug "* ]]; then

config/includes.chroot/preseed/preseed.cfg

@@ -112,4 +112,4 @@ d-i preseed/late_command string sh /preseed/.ash/3_di_preseed_late_command.sh
 
 # Please consider donating to my work at: https://coresecret.eu/spenden/
 ###########################################################################################
-# Written by: ./preseed_hash_generator.sh Version: Master V8.13.288.2025.10.24 at: 10:18:37.9542
+# Written by: ./preseed_hash_generator.sh Version: Master V8.13.290.2025.10.26 at: 10:18:37.9542