Issues

• Bluetooth: Privacy is under the wrong section and uses an unsupported literal value

  Kicksecure/security-misc#379 · Filter by author krecony opened on Sep 27, 2026

• Additional module blacklisting

  Kicksecure/security-misc#366 · Filter by author trustme-arch opened on Jun 16, 2026
  1

• ModuleJail: complementary tool for dynamic per-host module blacklisting

  Kicksecure/security-misc#364 · Filter by author jnuyens opened on May 18, 2026

• Consider disabling syncookies

  Kicksecure/security-misc#354 · Filter by author ArrayBolt3 opened on Mar 29, 2026
  3

• Upload PGP key (fingerprint) to distinct domains (out-of-band TOFU cross-reference)

  Kicksecure/security-misc#353 · Filter by author maltfield opened on Mar 16, 2026
  5

• "Allow a keyboard-only USB device only if there isn’t already a USB device with a keyboard interface allowed" may cause harm

  Kicksecure/security-misc#350 · Filter by author ghost opened on Feb 9, 2026
  1

• Consider updating 30_security-misc.conf

  Kicksecure/security-misc#349 · Filter by author ghost opened on Feb 9, 2026
  6

• Consider mounting /var/lib with exec and /var with noexec

  Kicksecure/security-misc#347 · Filter by author cynicsketch opened on Feb 3, 2026

• Evaluate Blocking vendor‑specific USB Classes (e.g., FFh) in USBGuard?

  Kicksecure/security-misc#342 · Filter by author ghost opened on Dec 15, 2025
  8

• Enhance Yama protections with proc_mem.force_override=ptrace

  Kicksecure/security-misc#330 · Filter by author ghost opened on Oct 23, 2025
  2

• enable Kernel Lockdown Mode / lockdown=confidentiality / echo confidentiality > /sys/kernel/security/lockdown

  Kicksecure/security-misc#328 · Filter by author adrelanos opened on Oct 19, 2025
  1

• Consider enabling panic_on_oom

  Kicksecure/security-misc#324 · Filter by author ArrayBolt3 opened on Oct 3, 2025
  13

• review secureblue sysctl

  Kicksecure/security-misc#283 · Filter by author adrelanos opened on Nov 30, 2024
  2

• review Brace to see if there are security settings which aren't part of security-misc (or Kicksecure yet)

  Kicksecure/security-misc#278 · Filter by author adrelanos opened on Oct 20, 2024
  4

• Protecting /sys and /proc

  Kicksecure/security-misc#277 · Filter by author monsieuremre opened on Oct 19, 2024
  3

• file/folder permissions issue d????????? ? ? ? ? ? . | Firefox no longer starting (probably not not a Firefox issue) | caused by disallow registering interpreters for miscellaneous binary formats sysctl fs.binfmt_misc.status=0

  Kicksecure/security-misc#267 · Filter by author adrelanos opened on Aug 28, 2024
  1

• Use slub_debug=FZ?

  Kicksecure/security-misc#253 · Filter by author cynicsketch opened on Jul 31, 2024
  16

• add /etc/gitconfig for better git security

  Kicksecure/security-misc#225 · Filter by author adrelanos opened on May 28, 2024
  4

• improve GnuPG configuration file /etc/skel/.gnupg/gpg.conf

  Kicksecure/security-misc#223 · Filter by author adrelanos opened on May 13, 2024
  11

• proc-hidepid.service: Fixing pkexec related issues

  Kicksecure/security-misc#212 · Filter by author adrelanos opened on Mar 11, 2024

• proc-hidepid.service: Fixing Systemd related issues

  Kicksecure/security-misc#208 · Filter by author wryMitts opened on Mar 4, 2024
  7

• hide-hardware-info.service: hide /proc/dynamic_debug/

  Kicksecure/security-misc#207 · Filter by author wryMitts opened on Feb 26, 2024
  1

• hide-hardware-info.service: hide /proc/kallsyms

  Kicksecure/security-misc#206 · Filter by author adrelanos opened on Feb 26, 2024
  1

• remount-secure: use procfs mount option subset (hide-hardware-info.service)

  Kicksecure/security-misc#205 · Filter by author adrelanos opened on Feb 26, 2024
  5

• test remount-secure script and systemd unit

  Kicksecure/security-misc#203 · Filter by author adrelanos opened on Feb 22, 2024
  3