Samuel FORESTIER HorlogeSkynet
HorlogeSkynet synced and deleted reference refs/heads/dependabot/github_actions/actions/checkout-7 at HorlogeSkynet/incroyable-elucid from mirror 2026-06-23 16:00:10 +02:00
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/incroyable-elucid from mirror 2026-06-23 16:00:10 +02:00
3ff2cdafb5 Bump actions/checkout from 6 to 7
HorlogeSkynet synced new reference refs/heads/dependabot/github_actions/actions/checkout-7 to HorlogeSkynet/systemd-hardene.d from mirror 2026-06-23 12:00:08 +02:00
HorlogeSkynet synced new reference refs/heads/dependabot/github_actions/actions/checkout-7 to HorlogeSkynet/incroyable-elucid from mirror 2026-06-23 04:00:09 +02:00
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/awesome-thinkerview from mirror 2026-06-22 16:00:11 +02:00
fe734b8f18 Bump actions/checkout from 6 to 7
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/SSHubl from mirror 2026-06-20 16:00:11 +02:00
bd96649cb3 Bump actions/checkout from 6 to 7
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-06-11 00:00:26 +02:00
e0c45ff88f sec(postfix): blocks memfd_create syscall
5198ca629d sec(opendmarc): blocks memfd_create syscall
affcea6154 sec(opendkim): blocks memfd_create syscall
Compare 3 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/awesome-thinkerview from mirror 2026-06-08 04:00:28 +02:00
86991e975e Adds our selection for May 2026
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/incroyable-elucid from mirror 2026-06-08 04:00:28 +02:00
1d4cf3f62f feat: adds article and interview from May 2026
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-06-05 03:58:09 +02:00
cbd58afeb0 style(dnsmasq): re-orders socket address families
854e7039b5 sec(postfix): enables PrivateIPC
Compare 2 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-30 16:00:18 +02:00
2c9f14fc28 sec!(mumble-server): tightens overrides according to Debian 13 packaging
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-28 04:00:20 +02:00
eede2e70d1 sec: enforces SystemCallFilter in the "common and reliable pattern"
dd589d39fd style(NetworkManager): prefers yes as boolean value
Compare 2 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-23 19:29:29 +02:00
dbfb55ecc2 feat: publishes apache2 (httpd) service overrides
HorlogeSkynet synced and deleted reference refs/heads/fix/no_system_encoding_partition_name at HorlogeSkynet/archey4 from mirror 2026-05-21 08:00:10 +02:00
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/archey4 from mirror 2026-05-21 08:00:10 +02:00
b90be8d2b8 style: formats triple-quoted strings as newer versions of Black require
ba8ad4d655 fix(disk): don't crash against non-UTF8 filesystems
Compare 2 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-15 20:00:36 +02:00
1f60d17e9c fix(mumble-server): allows @resources system calls
b5bf557a41 sec(opendmarc): enables PrivateIPC
7049949d0b sec(opendkim): enables PrivateIPC
Compare 3 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-10 08:00:38 +02:00
3f27034e40 sec(nitter): enables PrivateIPC
7fee797ecc sec(caddy): enables PrivateIPC
bd487ca9f7 sec(postgrey): enables PrivateIPC
2df75aaa5b sec(nginx): enables PrivateIPC
38307c7c43 sec(redis): enables PrivateIPC
Compare 10 commits »
HorlogeSkynet synced commits to refs/heads/master at HorlogeSkynet/systemd-hardene.d from mirror 2026-05-08 20:10:37 +02:00
072dca3208 sec!(isso): enables MemoryDenyWriteExecute
cba6e176d7 sec(isso): restricts service allowed system calls
cacda1e313 sec(isso): restricts service capabilities
88746c234f meta(github): publishes a proper FUNDING.yml file for sponsoring
42f2875a0d sec(redis): denies memfd_create as MemoryDenyWriteExecute recommends
Compare 11 commits »