From 4cf5061c25e06d55d6ec51e3e48f615937651e81 Mon Sep 17 00:00:00 2001 From: Tastatur Date: Fri, 29 Dec 2023 21:33:58 +0100 Subject: [PATCH] Moved util-linux-login --- docs/alpine-desktop-setup/post-install/security.md | 8 +++++++- docs/alpine-desktop-setup/post-install/users.md | 4 ++-- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/docs/alpine-desktop-setup/post-install/security.md b/docs/alpine-desktop-setup/post-install/security.md index f86fe11..579152a 100644 --- a/docs/alpine-desktop-setup/post-install/security.md +++ b/docs/alpine-desktop-setup/post-install/security.md @@ -98,7 +98,7 @@ fs.protected_regular=2 vm.max_map_count=1048576 ``` -This list is still incomplete. +This list is most likely still incomplete but should be good enough for now. ## Blacklisting modules @@ -149,6 +149,12 @@ jitterentropy_rng There are a few changes that can be made to improve login protection. +First install PAM through `util-linux-login`: + +``` +# apk add util-linux-login +``` + Delays can be a deterent against bruteforcing login attempts. Simply add this line to it's corresponding section in `/etc/pam.d/login`: ``` diff --git a/docs/alpine-desktop-setup/post-install/users.md b/docs/alpine-desktop-setup/post-install/users.md index e72eb3d..92a72a2 100644 --- a/docs/alpine-desktop-setup/post-install/users.md +++ b/docs/alpine-desktop-setup/post-install/users.md @@ -63,10 +63,10 @@ If you are running a system with multiple users or if you want an extra layer of #### Setting up fscrypt -First install the `fscrypt`, `e2fsprogs-extra` and `util-linux-login` packages: +First install the `fscrypt` and `e2fsprogs-extra` packages: ``` -# apk add fscrypt e2fsprogs-extra util-linux-login +# apk add fscrypt e2fsprogs-extra ``` Then make sure our filesystem has the `encrypt` feature enabled and setup `fscrypt` on the home directory: