Samuel FORESTIER HorlogeSkynet
0 Followers · 0 Following
Repositories
30
 Projects Packages Public Activity Starred Repositories
HorlogeSkynet synced new reference refs/heads/dependabot/github_actions/actions/checkout-7 to HorlogeSkynet/incroyable-elucid from mirror 2026-06-23 04:00:09 +02:00
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/awesome-thinkerview from mirror 2026-06-22 16:00:11 +02:00
fe734b8f18 Bump actions/checkout from 6 to 7
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/SSHubl from mirror 2026-06-20 16:00:11 +02:00
bd96649cb3 Bump actions/checkout from 6 to 7
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-06-11 00:00:26 +02:00
e0c45ff88f sec(postfix): blocks memfd_create syscall
5198ca629d sec(opendmarc): blocks memfd_create syscall
affcea6154 sec(opendkim): blocks memfd_create syscall
Compare 3 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/incroyable-elucid from mirror 2026-06-08 04:00:28 +02:00
1d4cf3f62f feat: adds article and interview from May 2026
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/awesome-thinkerview from mirror 2026-06-08 04:00:28 +02:00
86991e975e Adds our selection for May 2026
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-06-05 03:58:09 +02:00
cbd58afeb0 style(dnsmasq): re-orders socket address families
854e7039b5 sec(postfix): enables PrivateIPC
Compare 2 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-30 16:00:18 +02:00
2c9f14fc28 sec!(mumble-server): tightens overrides according to Debian 13 packaging
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-28 04:00:20 +02:00
eede2e70d1 sec: enforces SystemCallFilter in the "common and reliable pattern"
dd589d39fd style(NetworkManager): prefers yes as boolean value
Compare 2 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-23 19:29:29 +02:00
dbfb55ecc2 feat: publishes apache2 (httpd) service overrides
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/archey4 from mirror 2026-05-21 08:00:10 +02:00
b90be8d2b8 style: formats triple-quoted strings as newer versions of Black require
ba8ad4d655 fix(disk): don't crash against non-UTF8 filesystems
Compare 2 commits »
HorlogeSkynet synced and deleted reference refs/heads/fix/no_system_encoding_partition_name at HorlogeSkynet/archey4 from mirror 2026-05-21 08:00:10 +02:00
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-15 20:00:36 +02:00
1f60d17e9c fix(mumble-server): allows @resources system calls
b5bf557a41 sec(opendmarc): enables PrivateIPC
7049949d0b sec(opendkim): enables PrivateIPC
Compare 3 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-10 08:00:38 +02:00
3f27034e40 sec(nitter): enables PrivateIPC
7fee797ecc sec(caddy): enables PrivateIPC
bd487ca9f7 sec(postgrey): enables PrivateIPC
2df75aaa5b sec(nginx): enables PrivateIPC
38307c7c43 sec(redis): enables PrivateIPC
Compare 10 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-08 20:10:37 +02:00
072dca3208 sec!(isso): enables MemoryDenyWriteExecute
cba6e176d7 sec(isso): restricts service allowed system calls
cacda1e313 sec(isso): restricts service capabilities
88746c234f meta(github): publishes a proper FUNDING.yml file for sponsoring
42f2875a0d sec(redis): denies memfd_create as MemoryDenyWriteExecute recommends
Compare 11 commits »
HorlogeSkynet pushed to master at HorlogeSkynet/blog 2026-05-08 18:27:23 +02:00
f4a9aa9a3f Updates links to Isso project website
HorlogeSkynet pushed to master at HorlogeSkynet/blog 2026-05-08 18:15:23 +02:00
807e8edd8c Adds systemd-hardene.d project to "About" time-line
5b783d0119 [REDIS] Prefers pointing to proper systemd security overrides
Compare 2 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-08 06:44:23 +02:00
b780f630e3 docs: fixes a typo by adding a missing "to"
82eb1cd95a feat: publishes mumble-server service overrides
Compare 2 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-07 08:00:29 +02:00
0fb15f8ca9 fix(avahi-daemon): allows chroot as required by service
fb94c781d2 fix(postfix): chroot is usually required (and included in @privileged)
f1ab3adeb5 sec(nginx): only RO exposes /srv as files are usually served from there
fd72f5dabb fix(opendkim): fixes running as unprivileged user (setgroups usage)
960ccb0773 sec(opendkim): restricts /proc access and visibility
Compare 9 commits »