I am currently running the following hardening settings:
LockPersonality=yes
MemoryDenyWriteExecute=yes
NoNewPrivileges=yes
PrivateDevices=yes
PrivateTmp=yes
ProtectClock=yes
ProtectControlGroups=yes
ProtectHome=yes
ProtectHostname=yes
ProtectKernelLogs=yes
ProtectKernelModules=yes
ProtectKernelT
Package: quassel-core
Version: 1:0.13.1-3
Dear Maintainer,
quasselcore offers the option '--require-ssl' to require ssl for remote clients.
Any reason this is not used by default? (e.g. in the systemd service
start command)
Best regards,
Christian Göttsche
Package: quassel-core
Version: 1:0.13.1-1
Severity: wishlist
Currently quassel-core requires the SELinux process permission execmem.
This is not a problem by itself, but for a 24/7 daemon hanging on the
internet it would be nice to not require it.
Maybe there is a way to disable jit/scripting/..
