|
4ff2fae6a5
|
Introduced second parameter to setup_chroot.sh to copy extra binaries
|
2019-02-11 07:17:01 +01:00 |
|
|
b1bf9eb42b
|
Merge pull request #43 from NoahvdAa/patch-4
Made link clickable.
|
2019-02-03 14:14:49 +01:00 |
|
|
34cbd13d27
|
Merge pull request #44 from NoahvdAa/patch-5
Fixed a typo, made a few sentences a bit nicer.
|
2019-02-03 14:14:17 +01:00 |
|
|
d53279a5f6
|
Fixed a typo, made a few sentences a bit nicer.
I fixed a typo (corruptibly -> corruptible), and added a few words to the sentences.
|
2019-01-29 18:46:26 +01:00 |
|
|
86bb057688
|
Made link clickable.
This PR will make the link to PHPMailer open in a new tab, so you don't have to copy+paste the link into your url bar.
(Just to save time)
|
2019-01-29 18:41:33 +01:00 |
|
|
c637c98510
|
Fixed typo in csrf token hidden input field
|
2019-01-28 05:48:41 +01:00 |
|
|
22c687b0e0
|
Fixed syntax error
|
2019-01-27 18:31:21 +01:00 |
|
|
4aa51f4371
|
Set default file manager path to /www/
|
2019-01-27 17:41:24 +01:00 |
|
|
9c5294e64e
|
Add csrf tokens to all sensitive forms
|
2019-01-27 17:41:02 +01:00 |
|
|
cf83b9901a
|
Merge pull request #42 from NoahvdAa/patch-3
Added CSRF protection to file manager.
|
2019-01-27 16:22:20 +01:00 |
|
|
7da6b8feed
|
Install PHPMyAdmin locally as distributions ship outdated version
|
2019-01-26 16:48:38 +01:00 |
|
|
7661c0ccdb
|
With more than 10 crashes within 10 minutes we should restart php
|
2019-01-26 14:17:09 +01:00 |
|
|
7eed4a05d7
|
hidden service dirs now contain authorized_clients folder
|
2019-01-25 20:32:35 +01:00 |
|
|
6fc7ba7dae
|
Merge pull request #1 from NoahvdAa/patch-4
Added CSRF protection to file manager.
|
2019-01-23 17:50:12 +01:00 |
|
|
769a05b682
|
Added CSRF protection to file manager.
|
2019-01-23 17:48:54 +01:00 |
|
|
bc4a8a4d7c
|
Adding CSRF to file manager
|
2019-01-23 17:44:04 +01:00 |
|
|
e537e06118
|
Enable exec() related functions since we now have resource control in place
|
2019-01-22 21:15:32 +01:00 |
|
|
bdf26c8d00
|
Introduce CPU and Memory resource control for php and all child-processes
|
2019-01-22 21:12:50 +01:00 |
|
|
98d6a46aff
|
Merge pull request #41 from NoahvdAa/patch-2
Fixed a small typo
|
2019-01-20 11:50:31 +01:00 |
|
|
7f7b228df6
|
Fixed a small typo
"Here a list of 588 public hosted sites (172 sites hidden):" -> "Here is a list of 588 public hosted sites (172 sites hidden):"
|
2019-01-18 18:54:46 +01:00 |
|
|
11574e3e3f
|
nproc seems to be a global limit, not per session - increased accoringly
|
2019-01-08 18:20:24 +01:00 |
|
|
5eab397200
|
Randomise DB (user)names to reduce attack surface + allow multiple DBs per user
|
2019-01-07 22:26:33 +01:00 |
|
|
838b6c3b6f
|
disable systemd-resolver and tor@default apparmor profile
|
2019-01-06 20:35:04 +01:00 |
|
|
74417d1d5b
|
nginx default site is now managed by the script
|
2019-01-06 19:48:35 +01:00 |
|
|
6a834142ba
|
Fixed typo
|
2019-01-06 19:44:49 +01:00 |
|
|
dfe7f7d9e7
|
when shell access is enabled, we shouldn't use force-command in sshd_config
|
2019-01-06 19:35:49 +01:00 |
|
|
09ca89029e
|
apply security restrictions in limits.conf
|
2019-01-06 19:33:12 +01:00 |
|
|
c46a2584fa
|
Add shell access and scp support
|
2019-01-06 18:20:02 +01:00 |
|
|
b5d8b79b8e
|
Disabled STRICT_TRANS_TABLES for compatibility
|
2019-01-05 12:15:56 +01:00 |
|
|
ee7e1d11ca
|
Merge pull request #40 from NoahvdAa/patch-1
Added the "select all" option to the file manager.
|
2019-01-04 21:29:44 +01:00 |
|
|
c306ea2518
|
Check-All checkmark fix
Check-All checkmark now only appears when javascript is enabled.
|
2019-01-04 14:19:04 +01:00 |
|
|
cdd2b5b9be
|
Added the "select all" option to the file manager.
#13
|
2019-01-04 14:16:51 +01:00 |
|
|
899da11a56
|
Merge pull request #38 from NoahvdAa/patch-1
Fixed a typo
|
2019-01-04 09:59:35 +01:00 |
|
|
ae2aa16f76
|
Fixed a typo
|
2019-01-04 09:57:00 +01:00 |
|
|
7e4ed95ba8
|
Additional direcotries would have to be included in chroots to be useful - removed
|
2019-01-03 07:20:54 +01:00 |
|
|
e536a5c544
|
Minor nginx config fix
|
2019-01-01 20:43:21 +01:00 |
|
|
cff617379d
|
tmp is created by setup_chroot script already
|
2019-01-01 14:34:06 +01:00 |
|
|
6b6efc2fc6
|
Logs are stored outside chroot - don't check existence and let nginx handle it
|
2019-01-01 13:54:36 +01:00 |
|
|
55bc8cd757
|
Introduce mysqld socket stream forwarding with nginx for chroot jails
|
2019-01-01 13:47:30 +01:00 |
|
|
0f38bd2449
|
Improved privilege separation
|
2019-01-01 02:24:22 +01:00 |
|
|
a5b0de4b07
|
Added setup_chroot.sh script
|
2018-12-27 22:32:37 +01:00 |
|
|
91167d1f45
|
Fix systemd namespace issues taking effect after reboot
|
2018-12-24 06:27:33 +01:00 |
|
|
e0bfc5e633
|
Our hidden service should run on v3 by default
|
2018-12-10 16:58:50 +01:00 |
|
|
a901e25bb4
|
Instructions to prepare user disk quota
|
2018-12-09 12:25:25 +01:00 |
|
|
08cc492b86
|
New imap.enable_insecure_rsh php.ini option protects against imap_open exploit
http://php.net/manual/en/imap.configuration.php
|
2018-12-08 11:01:06 +01:00 |
|
|
11c055ebcf
|
Remove commeted options
|
2018-12-07 22:18:49 +01:00 |
|
|
4f6539b31d
|
Introduce systemd.exec restrictions for better security
|
2018-12-07 21:54:44 +01:00 |
|
|
8e155012a7
|
Suppress chatty dovecot messages
|
2018-12-07 21:48:22 +01:00 |
|
|
4b25310396
|
Simplified sshd_config
|
2018-12-07 13:25:30 +01:00 |
|
|
756e16b533
|
Fixed potential race condition pointed out in issue #31
|
2018-12-06 16:54:35 +01:00 |
|