committing changes in /etc after apt run

author mhoellein <mhoellein@freenet.de>

Tue, 7 Apr 2020 11:24:04 +0000 (13:24 +0200)

committer mhoellein <mhoellein@freenet.de>

Tue, 7 Apr 2020 11:24:04 +0000 (13:24 +0200)
author mhoellein <mhoellein@freenet.de>
Tue, 7 Apr 2020 11:24:04 +0000 (13:24 +0200)
committer mhoellein <mhoellein@freenet.de>
Tue, 7 Apr 2020 11:24:04 +0000 (13:24 +0200)
diff --git a/.etckeeper b/.etckeeper

index 9700fe6486f9bdc54b41005fbec66706fde33df4..fa42b925d3ca986855eefb1bca456bbb2144825a 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -5167,6 +5167,7 @@ maybe chmod 0644 'letsencrypt/csr/1820_csr-certbot.pem'
  maybe chmod 0644 'letsencrypt/csr/1821_csr-certbot.pem'
  maybe chmod 0644 'letsencrypt/csr/1822_csr-certbot.pem'
  maybe chmod 0644 'letsencrypt/csr/1823_csr-certbot.pem'
+maybe chmod 0644 'letsencrypt/csr/1824_csr-certbot.pem'
  maybe chmod 0700 'letsencrypt/keys'
  maybe chmod 0600 'letsencrypt/keys/0000_key-certbot.pem'
  maybe chmod 0600 'letsencrypt/keys/0001_key-certbot.pem'
@@ -6992,6 +6993,7 @@ maybe chmod 0600 'letsencrypt/keys/1820_key-certbot.pem'
  maybe chmod 0600 'letsencrypt/keys/1821_key-certbot.pem'
  maybe chmod 0600 'letsencrypt/keys/1822_key-certbot.pem'
  maybe chmod 0600 'letsencrypt/keys/1823_key-certbot.pem'
+maybe chmod 0600 'letsencrypt/keys/1824_key-certbot.pem'
  maybe chmod 0755 'letsencrypt/live'
  maybe chmod 0755 'letsencrypt/live/ccu.hoellein.online'
  maybe chmod 0644 'letsencrypt/live/ccu.hoellein.online/README'
@@ -8130,6 +8132,7 @@ maybe chmod 0644 'security/pam_env.conf'
  maybe chmod 0644 'security/pwquality.conf'
  maybe chmod 0644 'security/sepermit.conf'
  maybe chmod 0644 'security/time.conf'
+maybe chmod 0644 'security/user_map.conf'
  maybe chmod 0755 'selinux'
  maybe chmod 0644 'selinux/semanage.conf'
  maybe chmod 0755 'sensors.d'
diff --git a/alternatives/jfr b/alternatives/jfr

new file mode 120000 (symlink)

index 0000000..d5fda24
--- /dev/null
+++ b/alternatives/jfr
@@ -0,0 +1 @@
+/usr/lib/jvm/java-11-openjdk-amd64/bin/jfr
+\ No newline at end of file
diff --git a/apt/apt.conf.d/50unattended-upgrades b/apt/apt.conf.d/50unattended-upgrades

index 96f734c42eab4d6cb2b3de20a1aeb90bf25c3fee..36cf50d8ebc099c53473d3c72d5075f860c6cae0 100644 (file)
--- a/apt/apt.conf.d/50unattended-upgrades
+++ b/apt/apt.conf.d/50unattended-upgrades
@@ -10,7 +10,8 @@ Unattended-Upgrade::Allowed-Origins {
         // every release and this system may not have it installed, but if
         // available, the policy for updates is such that unattended-upgrades
         // should also install from here by default.
-       "${distro_id}ESM:${distro_codename}";
+       "${distro_id}ESMApps:${distro_codename}-apps-security";
+       "${distro_id}ESM:${distro_codename}-infra-security";
  //     "${distro_id}:${distro_codename}-updates";
  //     "${distro_id}:${distro_codename}-proposed";
  //     "${distro_id}:${distro_codename}-backports";
diff --git a/bluetooth/input.conf b/bluetooth/input.conf

index 3e1d65aaefeea62809205e3596c5f786e1ea13a0..4c70bc561f05429442c6fe0a183584ad1536fa4b 100644 (file)
--- a/bluetooth/input.conf
+++ b/bluetooth/input.conf
@@ -11,3 +11,16 @@
  # Enable HID protocol handling in userspace input profile
  # Defaults to false (HIDP handled in HIDP kernel module)
  #UserspaceHID=true
+
+# Limit HID connections to bonded devices
+# The HID Profile does not specify that devices must be bonded, however some
+# platforms may want to make sure that input connections only come from bonded
+# device connections. Several older mice have been known for not supporting
+# pairing/encryption.
+# Defaults to false to maximize device compatibility.
+#ClassicBondedOnly=true
+
+# LE upgrade security
+# Enables upgrades of security automatically if required.
+# Defaults to true to maximize device compatibility.
+#LEAutoSecurity=true
diff --git a/chromium-browser/customizations/10-flash b/chromium-browser/customizations/10-flash

index a6faafeb60d700e27e1035fa335aecc242853e94..9c4e7ffa19aa88aeef04423b9d32f2f4836e348b 100644 (file)
--- a/chromium-browser/customizations/10-flash
+++ b/chromium-browser/customizations/10-flash
@@ -1,6 +1,6 @@
  flashso="/usr/lib/adobe-flashplugin/libpepflashplayer.so"
  if test -f "$flashso"; then
-       CHROMIUM_FLAGS="$CHROMIUM_FLAGS --ppapi-flash-path=$flashso --ppapi-flash-version=32.0.0.303"
+       CHROMIUM_FLAGS="$CHROMIUM_FLAGS --ppapi-flash-path=$flashso --ppapi-flash-version=32.0.0.344"
         echo "Using PPAPI flash."
  else
         echo "PPAPI flash has config file in /etc, but library does not exist and won't be used. Package is uninstalled, not purged."
diff --git a/java-11-openjdk/jfr/default.jfc b/java-11-openjdk/jfr/default.jfc

index 04e02e93134fad34bb317b316fd7e08afe5114f7..d55eeeafc0ddbe202e12442a4049b2a6acc92665 100644 (file)
--- a/java-11-openjdk/jfr/default.jfc
+++ b/java-11-openjdk/jfr/default.jfc
@@ -115,12 +115,12 @@
  
      <event name="jdk.ExecutionSample">
        <setting name="enabled" control="method-sampling-enabled">true</setting>
-      <setting name="period" control="method-sampling-interval">20 ms</setting>
+      <setting name="period" control="method-sampling-java-interval">20 ms</setting>
      </event>
  
      <event name="jdk.NativeMethodSample">
        <setting name="enabled" control="method-sampling-enabled">true</setting>
-      <setting name="period" control="method-sampling-interval">20 ms</setting>
+      <setting name="period" control="method-sampling-native-interval">20 ms</setting>
      </event>
  
      <event name="jdk.SafepointBegin">
@@ -488,6 +488,11 @@
        <setting name="period">beginChunk</setting>
      </event>
  
+    <event name="jdk.VirtualizationInformation">
+     <setting name="enabled">true</setting>
+     <setting name="period">beginChunk</setting>
+    </event>
+
      <event name="jdk.CPUInformation">
        <setting name="enabled">true</setting>
        <setting name="period">beginChunk</setting>
@@ -773,13 +778,42 @@
        </condition>
  
        <selection name="method-sampling-interval" default="normal" label="Method Sampling">
-        <option label="Off" name="off">999 d</option>
-        <option label="Normal" name="normal">20 ms</option>
-        <option label="Maximum" name="maximum">10 ms</option>
+        <option label="Off" name="off">off</option>
+        <option label="Normal" name="normal">normal</option>
+        <option label="High" name="high">high</option>
+        <option label="Ludicrous (High Overhead)" name="ludicrous">ludicrous</option>
        </selection>
+      
+      <condition name="method-sampling-java-interval" true="999 d">
+        <test name="method-sampling-interval" operator="equal" value="off"/>
+      </condition>
+
+      <condition name="method-sampling-java-interval" true="20 ms">
+        <test name="method-sampling-interval" operator="equal" value="normal"/>
+      </condition>
+
+      <condition name="method-sampling-java-interval" true="10 ms">
+        <test name="method-sampling-interval" operator="equal" value="high"/>
+      </condition>
+
+      <condition name="method-sampling-java-interval" true="1 ms">
+        <test name="method-sampling-interval" operator="equal" value="ludicrous"/>
+      </condition>
+      
+      <condition name="method-sampling-native-interval" true="999 d">
+        <test name="method-sampling-interval" operator="equal" value="off"/>
+      </condition>
+
+      <condition name="method-sampling-native-interval" true="20 ms">
+        <or>
+          <test name="method-sampling-interval" operator="equal" value="normal"/>
+          <test name="method-sampling-interval" operator="equal" value="high"/>
+          <test name="method-sampling-interval" operator="equal" value="ludicrous"/>
+        </or>
+      </condition>  
  
        <condition name="method-sampling-enabled" true="false" false="true">
-        <test name="method-sampling-interval" operator="equal" value="999 d"/>
+        <test name="method-sampling-interval" operator="equal" value="off"/>
        </condition>
  
        <selection name="thread-dump-interval" default="normal" label="Thread Dump">
diff --git a/java-11-openjdk/jfr/profile.jfc b/java-11-openjdk/jfr/profile.jfc

index fec835f14930923d351240f36641c9bccfd8b4e4..9023cd020f7a98ae77085b5998b559b37a8c5a28 100644 (file)
--- a/java-11-openjdk/jfr/profile.jfc
+++ b/java-11-openjdk/jfr/profile.jfc
@@ -115,12 +115,12 @@
  
      <event name="jdk.ExecutionSample">
        <setting name="enabled" control="method-sampling-enabled">true</setting>
-      <setting name="period" control="method-sampling-interval">10 ms</setting>
+      <setting name="period" control="method-sampling-java-interval">10 ms</setting>
      </event>
  
      <event name="jdk.NativeMethodSample">
        <setting name="enabled" control="method-sampling-enabled">true</setting>
-      <setting name="period" control="method-sampling-interval">10 ms</setting>
+      <setting name="period" control="method-sampling-native-interval">20 ms</setting>
      </event>
  
      <event name="jdk.SafepointBegin">
@@ -488,6 +488,11 @@
        <setting name="period">beginChunk</setting>
      </event>
  
+    <event name="jdk.VirtualizationInformation">
+     <setting name="enabled">true</setting>
+     <setting name="period">beginChunk</setting>
+    </event>
+
      <event name="jdk.CPUInformation">
        <setting name="enabled">true</setting>
        <setting name="period">beginChunk</setting>
@@ -773,14 +778,43 @@
          <test name="compiler-level" operator="equal" value="all"/>
        </condition>
  
-      <selection name="method-sampling-interval" default="maximum" label="Method Sampling">
-        <option label="Off" name="off">999 d</option>
-        <option label="Normal" name="normal">20 ms</option>
-        <option label="Maximum" name="maximum">10 ms</option>
+      <selection name="method-sampling-interval" default="normal" label="Method Sampling">
+        <option label="Off" name="off">off</option>
+        <option label="Normal" name="normal">normal</option>
+        <option label="High" name="high">high</option>
+        <option label="Ludicrous (High Overhead)" name="ludicrous">ludicrous</option>
        </selection>
+      
+      <condition name="method-sampling-java-interval" true="999 d">
+        <test name="method-sampling-interval" operator="equal" value="off"/>
+      </condition>
+
+      <condition name="method-sampling-java-interval" true="20 ms">
+        <test name="method-sampling-interval" operator="equal" value="normal"/>
+      </condition>
  
+      <condition name="method-sampling-java-interval" true="10 ms">
+        <test name="method-sampling-interval" operator="equal" value="high"/>
+      </condition>
+
+      <condition name="method-sampling-java-interval" true="1 ms">
+        <test name="method-sampling-interval" operator="equal" value="ludicrous"/>
+      </condition>
+      
+      <condition name="method-sampling-native-interval" true="999 d">
+        <test name="method-sampling-interval" operator="equal" value="off"/>
+      </condition>
+
+      <condition name="method-sampling-native-interval" true="20 ms">
+        <or>
+          <test name="method-sampling-interval" operator="equal" value="normal"/>
+          <test name="method-sampling-interval" operator="equal" value="high"/>
+          <test name="method-sampling-interval" operator="equal" value="ludicrous"/>
+        </or>
+      </condition>    
+      
        <condition name="method-sampling-enabled" true="false" false="true">
-        <test name="method-sampling-interval" operator="equal" value="999 d"/>
+        <test name="method-sampling-interval" operator="equal" value="off"/>
        </condition>
  
        <selection name="thread-dump-interval" default="everyMinute" label="Thread Dump">
diff --git a/java-11-openjdk/security/java.security b/java-11-openjdk/security/java.security

index 0c87fe1191aded519dd3efdcf3ee3a3612fe4e6a..e922ef3e5be9d76d5e854387fb6e0d6c73dc7c94 100644 (file)
--- a/java-11-openjdk/security/java.security
+++ b/java-11-openjdk/security/java.security
@@ -452,6 +452,31 @@ networkaddress.cache.negative.ttl=10
  #
  krb5.kdc.bad.policy = tryLast
  
+#
+# Kerberos cross-realm referrals (RFC 6806)
+#
+# OpenJDK's Kerberos client supports cross-realm referrals as defined in
+# RFC 6806. This allows to setup more dynamic environments in which clients
+# do not need to know in advance how to reach the realm of a target principal
+# (either a user or service).
+#
+# When a client issues an AS or a TGS request, the "canonicalize" option
+# is set to announce support of this feature. A KDC server may fulfill the
+# request or reply referring the client to a different one. If referred,
+# the client will issue a new request and the cycle repeats.
+#
+# In addition to referrals, the "canonicalize" option allows the KDC server
+# to change the client name in response to an AS request. For security reasons,
+# RFC 6806 (section 11) FAST scheme is enforced.
+#
+# Disable Kerberos cross-realm referrals. Value may be overwritten with a
+# System property (-Dsun.security.krb5.disableReferrals).
+sun.security.krb5.disableReferrals=false
+
+# Maximum number of AS or TGS referrals to avoid infinite loops. Value may
+# be overwritten with a System property (-Dsun.security.krb5.maxReferrals).
+sun.security.krb5.maxReferrals=5
+
  #
  # Algorithm restrictions for certification path (CertPath) processing
  #
@@ -907,8 +932,8 @@ jdk.xml.dsig.secureValidationPolicy=\
  # Patterns are separated by ";" (semicolon).
  # Whitespace is significant and is considered part of the pattern.
  #
-# If the system property jdk.serialFilter is also specified, it supersedes
-# the security property value defined here.
+# If the system property jdk.serialFilter is also specified on the command
+# line, it supersedes the security property value defined here.
  #
  # If a pattern includes a "=", it sets a limit.
  # If a limit appears more than once the last value is used.
@@ -1021,6 +1046,16 @@ jdk.xml.dsig.secureValidationPolicy=\
  #
  #com.sun.CORBA.ORBIorTypeCheckRegistryFilter=binary_class_name;binary_class_name
  
+# The iteration count used for password-based encryption (PBE) in JCEKS
+# keystores. Values in the range 10000 to 5000000 are considered valid.
+# If the value is out of this range, or is not a number, or is unspecified;
+# a default of 200000 is used.
+#
+# If the system property jdk.jceks.iterationCount is also specified, it
+# supersedes the security property value defined here.
+#
+#jdk.jceks.iterationCount = 200000
+
  #
  # JCEKS Encrypted Key Serial Filter
  #
diff --git a/java-8-openjdk/security/java.security b/java-8-openjdk/security/java.security

index de4e8f892155200db373f99e5e18ce47a5cd5609..b78f07d9d5cd871d06c1c0a43af9e13dcdda6f82 100644 (file)
--- a/java-8-openjdk/security/java.security
+++ b/java-8-openjdk/security/java.security
@@ -342,7 +342,7 @@ networkaddress.cache.negative.ttl=10
  # By default, the location of the OCSP responder is determined implicitly
  # from the certificate being validated. This property explicitly specifies
  # the location of the OCSP responder. The property is used when the
-# Authority Information Access extension (defined in RFC 3280) is absent
+# Authority Information Access extension (defined in RFC 5280) is absent
  # from the certificate or when it requires overriding.
  #
  # Example,
@@ -421,6 +421,32 @@ networkaddress.cache.negative.ttl=10
  #   krb5.kdc.bad.policy = tryLess:2,2000
  krb5.kdc.bad.policy = tryLast
  
+#
+# Kerberos cross-realm referrals (RFC 6806)
+#
+# OpenJDK's Kerberos client supports cross-realm referrals as defined in
+# RFC 6806. This allows to setup more dynamic environments in which clients
+# do not need to know in advance how to reach the realm of a target principal
+# (either a user or service).
+#
+# When a client issues an AS or a TGS request, the "canonicalize" option
+# is set to announce support of this feature. A KDC server may fulfill the
+# request or reply referring the client to a different one. If referred,
+# the client will issue a new request and the cycle repeats.
+#
+# In addition to referrals, the "canonicalize" option allows the KDC server
+# to change the client name in response to an AS request. For security reasons,
+# RFC 6806 (section 11) FAST scheme is enforced.
+#
+# Disable Kerberos cross-realm referrals. Value may be overwritten with a
+# System property (-Dsun.security.krb5.disableReferrals).
+sun.security.krb5.disableReferrals=false
+
+# Maximum number of AS or TGS referrals to avoid infinite loops. Value may
+# be overwritten with a System property (-Dsun.security.krb5.maxReferrals).
+sun.security.krb5.maxReferrals=5
+
+#
  # Algorithm restrictions for certification path (CertPath) processing
  #
  # In some environments, certain algorithms or key lengths may be undesirable
@@ -862,8 +888,8 @@ jdk.xml.dsig.secureValidationPolicy=\
  # Patterns are separated by ";" (semicolon).
  # Whitespace is significant and is considered part of the pattern.
  #
-# If the system property jdk.serialFilter is also specified, it supersedes
-# the security property value defined here.
+# If the system property jdk.serialFilter is also specified on the command
+# line, it supersedes the security property value defined here.
  #
  # If a pattern includes a "=", it sets a limit.
  # If a limit appears more than once the last value is used.
diff --git a/letsencrypt/csr/1824_csr-certbot.pem b/letsencrypt/csr/1824_csr-certbot.pem

new file mode 100644 (file)

index 0000000..acee1ff
--- /dev/null
+++ b/letsencrypt/csr/1824_csr-certbot.pem
@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/letsencrypt/keys/1824_key-certbot.pem b/letsencrypt/keys/1824_key-certbot.pem

new file mode 100644 (file)

index 0000000..498a021
--- /dev/null
+++ b/letsencrypt/keys/1824_key-certbot.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/security/user_map.conf b/security/user_map.conf

new file mode 100644 (file)

index 0000000..4af8fb0
--- /dev/null
+++ b/security/user_map.conf
@@ -0,0 +1,13 @@
+#
+# Configuration file for pam_user_map.so
+#
+# defines mapping in the form
+#
+#       orig_user_name: mapped_user_name
+#
+# or (to map all users in a specific group)
+#
+#       @group_name: mapped_user_name
+#
+# comments and empty lines are ignored
+#
author	mhoellein <mhoellein@freenet.de>
	Tue, 7 Apr 2020 11:24:04 +0000 (13:24 +0200)
committer	mhoellein <mhoellein@freenet.de>
	Tue, 7 Apr 2020 11:24:04 +0000 (13:24 +0200)
.etckeeper		patch \| blob \| history
alternatives/jfr	[new symlink]	patch \| blob
apt/apt.conf.d/50unattended-upgrades		patch \| blob \| history
bluetooth/input.conf		patch \| blob \| history
chromium-browser/customizations/10-flash		patch \| blob \| history
java-11-openjdk/jfr/default.jfc		patch \| blob \| history
java-11-openjdk/jfr/profile.jfc		patch \| blob \| history
java-11-openjdk/security/java.security		patch \| blob \| history
java-8-openjdk/security/java.security		patch \| blob \| history
letsencrypt/csr/1824_csr-certbot.pem	[new file with mode: 0644]	patch \| blob
letsencrypt/keys/1824_key-certbot.pem	[new file with mode: 0644]	patch \| blob
security/user_map.conf	[new file with mode: 0644]	patch \| blob