Alpine Linux:Ideas - Revision history

Zcrayfish: Used issue template.

2023-08-25T02:27:45Z

Used issue template.

← Older revision		Revision as of 02:27, 25 August 2023
Line 49:		Line 49:
	== Security ==		== Security ==
	=== Protection against cold boot attacks ===		=== Protection against cold boot attacks ===
	This is a subject that pages can be written about and everyone has a different opinion. AFAIK there's no real protection against it if your machine is powered on and unattended. Nonetheless limited protection could be afforded by overwriting RAM with zero's or random data whenever a reboot, halt or poweroff command is issued. '''Raised under ~~[https://gitlab.alpinelinux.org/alpine/aports/-/issues/~~2534 ~~Feature #2534]~~'''		This is a subject that pages can be written about and everyone has a different opinion. AFAIK there's no real protection against it if your machine is powered on and unattended. Nonetheless limited protection could be afforded by overwriting RAM with zero's or random data whenever a reboot, halt or poweroff command is issued. '''Raised under issue {{issue\|2534}}'''

	=== sysctl.conf changes ===		=== sysctl.conf changes ===

Sertonix: use https links & update links

2023-08-25T02:17:47Z

use https links & update links

← Older revision		Revision as of 02:17, 25 August 2023
Line 1:		Line 1:
	'''Please note that this page is no longer monitored''' but remains for historical reasons. '''If you wish to raise ideas or feature requests or bugs please do so at ~~http~~://~~bugs~~.alpinelinux.org/ '''		'''Please note that this page is no longer monitored''' but remains for historical reasons. '''If you wish to raise ideas or feature requests or bugs please do so at https://gitlab.alpinelinux.org/groups/alpine/-/issues '''

	However, this page could be used for discussion of ideas, or you can use the Alpine-Devel [[Mailing_lists \| mailing list]]		However, this page could be used for discussion of ideas, or you can use the Alpine-Devel [[Mailing_lists \| mailing list]]
Line 49:		Line 49:
	== Security ==		== Security ==
	=== Protection against cold boot attacks ===		=== Protection against cold boot attacks ===
	This is a subject that pages can be written about and everyone has a different opinion. AFAIK there's no real protection against it if your machine is powered on and unattended. Nonetheless limited protection could be afforded by overwriting RAM with zero's or random data whenever a reboot, halt or poweroff command is issued. '''Raised under [~~http~~://~~bugs~~.alpinelinux.org/issues/2534 Feature #2534]'''		This is a subject that pages can be written about and everyone has a different opinion. AFAIK there's no real protection against it if your machine is powered on and unattended. Nonetheless limited protection could be afforded by overwriting RAM with zero's or random data whenever a reboot, halt or poweroff command is issued. '''Raised under [https://gitlab.alpinelinux.org/alpine/aports/-/issues/2534 Feature #2534]'''

	=== sysctl.conf changes ===		=== sysctl.conf changes ===

Leo: /* sysctl.conf changes */

2019-05-25T12:15:36Z

sysctl.conf changes

← Older revision		Revision as of 12:15, 25 May 2019
Line 53:		Line 53:
	=== sysctl.conf changes ===		=== sysctl.conf changes ===
	It seems by default many security features are already enabled, a few not enabled (checked on alpine 2.7.0) that would be a good idea to turn on are:		It seems by default many security features are already enabled, a few not enabled (checked on alpine 2.7.0) that would be a good idea to turn on are:

	~~- TOCTOU prevention~~

	~~- rfc1337~~

	- magic-sysreq		- magic-sysreq
Line 62:		Line 58:
	I've already documented these on the sysctl.conf [[Sysctl.conf\|wiki page]].		I've already documented these on the sysctl.conf [[Sysctl.conf\|wiki page]].
	Maybe we could enable these by default in new installs?		Maybe we could enable these by default in new installs?
	~~Also, it would potentially be a good idea to enable the IPv6 privacy extensions via sysctl.conf, for those that do use IPv6. '''Raised as [http://bugs.alpinelinux.org/issues/2535 Feature #2535]'''~~

Hauke Löffler: removed is package now

2017-02-09T21:07:22Z

removed is package now

← Older revision		Revision as of 21:07, 9 February 2017
Line 63:		Line 63:
	Maybe we could enable these by default in new installs?		Maybe we could enable these by default in new installs?
	Also, it would potentially be a good idea to enable the IPv6 privacy extensions via sysctl.conf, for those that do use IPv6. '''Raised as [http://bugs.alpinelinux.org/issues/2535 Feature #2535]'''		Also, it would potentially be a good idea to enable the IPv6 privacy extensions via sysctl.conf, for those that do use IPv6. '''Raised as [http://bugs.alpinelinux.org/issues/2535 Feature #2535]'''

	~~== Package suggestions ==~~

	~~=== macchanger ===~~
	~~Adding macchanger [https://github.com/alobbs/macchanger (github page)] package would be cool. '''Raised under [http://bugs.alpinelinux.org/issues/2536 Feature #2536]'''~~

Hauke Löffler: /* Package suggestions */ removed added wishes

2017-02-02T08:43:47Z

Package suggestions: removed added wishes

← Older revision		Revision as of 08:43, 2 February 2017
Line 65:		Line 65:

	== Package suggestions ==		== Package suggestions ==

	~~=== acf-unbound ===~~
	~~An ACF interface for unbound DNS server would be awesome :)~~
	~~Raised as '''[http://bugs.alpinelinux.org/issues/2537 Feature #2537]'''~~

	=== macchanger ===		=== macchanger ===
	Adding macchanger [https://github.com/alobbs/macchanger (github page)] package would be cool. '''Raised under [http://bugs.alpinelinux.org/issues/2536 Feature #2536]'''		Adding macchanger [https://github.com/alobbs/macchanger (github page)] package would be cool. '''Raised under [http://bugs.alpinelinux.org/issues/2536 Feature #2536]'''

	~~=== darkhttpd ===~~
	Darkhttpd (http://unix4lyfe.org/darkhttpd/) is a very fast, lightweight http server for static content supporting http version 1.1 and automatically provides directory listings. It's also capable of very easily running as a daemon and in a chroot. Would make an excellent replacement to lighttpd for an Alpine mirror.
	Admittedly using darkhttpd without a package isn't difficult, but it does require installing development packages (apk add alpine-sdk) which is ~150MB on my test system, it would be awesome to have a package, including openRC service file so we can easily control the service. Raised as '''[http://bugs.alpinelinux.org/issues/2538 Feature #2538]'''

Ginjachris at 08:13, 2 January 2014

2014-01-02T08:13:37Z

← Older revision		Revision as of 08:13, 2 January 2014
Line 1:		Line 1:
	'''Please note that this page is no longer monitored''' but remains for historical reasons. If you wish to raise ideas or feature requests or bugs please do so at http://bugs.alpinelinux.org/		'''Please note that this page is no longer monitored''' but remains for historical reasons. '''If you wish to raise ideas or feature requests or bugs please do so at http://bugs.alpinelinux.org/ '''

	However, this page could be used for discussion of ideas, or you can use the Alpine-Devel [[Mailing_lists \| mailing list]]		However, this page could be used for discussion of ideas, or you can use the Alpine-Devel [[Mailing_lists \| mailing list]]

Ginjachris at 12:41, 31 December 2013

2013-12-31T12:41:38Z

← Older revision		Revision as of 12:41, 31 December 2013
Line 1:		Line 1:
	'''~~This~~ is ~~the place~~ to ~~put~~ feature requests ~~and share ideas for Alpine.''' From these we'll create tickets in the [~~http://bugs.alpinelinux.org/ ~~issue tracking system]. Discussions~~ of ideas ~~should probably take place on~~ the Alpine-Devel [[Mailing_lists \| mailing list]]~~, but feel free to use the discussion function of the wiki too.~~		'''Please note that this page is no longer monitored''' but remains for historical reasons. If you wish to raise ideas or feature requests or bugs please do so at http://bugs.alpinelinux.org/

			However, this page could be used for discussion of ideas, or you can use the Alpine-Devel [[Mailing_lists \| mailing list]]

	== Package manager ==		== Package manager ==

Ginjachris: /* darkhttpd */

2013-12-31T09:28:35Z

darkhttpd

← Older revision		Revision as of 09:28, 31 December 2013
Line 72:		Line 72:

	=== darkhttpd ===		=== darkhttpd ===
	[http://unix4lyfe.org/darkhttpd/ ~~darkhttpd]~~ is a lightweight http server for static content supporting http version 1.1 and automatically provides directory listings. It's also capable of very easily running as a daemon and in a chroot. Would make an excellent replacement to lighttpd for an Alpine mirror. ~~An openrc~~ service file ~~would be great too!~~ [~~[User~~:~~Ginjachris\|Ginjachris~~]~~] ([[User talk:Ginjachris\|talk]]) 11:26, 27 December 2013 (UTC)~~		Darkhttpd (http://unix4lyfe.org/darkhttpd/) is a very fast, lightweight http server for static content supporting http version 1.1 and automatically provides directory listings. It's also capable of very easily running as a daemon and in a chroot. Would make an excellent replacement to lighttpd for an Alpine mirror.
			Admittedly using darkhttpd without a package isn't difficult, but it does require installing development packages (apk add alpine-sdk) which is ~150MB on my test system, it would be awesome to have a package, including openRC service file so we can easily control the service. Raised as '''[http://bugs.alpinelinux.org/issues/2538 Feature #2538]'''

Ginjachris: /* acf-unbound */

2013-12-31T09:23:44Z

acf-unbound

← Older revision		Revision as of 09:23, 31 December 2013
Line 65:		Line 65:

	=== acf-unbound ===		=== acf-unbound ===
	An ACF interface for unbound DNS server would be awesome :) [~~[User:Ginjachris\|Ginjachris]] ([[User talk~~:~~Ginjachris\|talk]~~]~~) 11:23, 21 November 2013 (UTC)~~		An ACF interface for unbound DNS server would be awesome :)
			Raised as '''[http://bugs.alpinelinux.org/issues/2537 Feature #2537]'''

	=== macchanger ===		=== macchanger ===

Ginjachris: /* macchanger */

2013-12-31T09:20:37Z

macchanger

← Older revision		Revision as of 09:20, 31 December 2013
Line 68:		Line 68:

	=== macchanger ===		=== macchanger ===
	Adding macchanger [https://github.com/alobbs/macchanger (github page)] package would be cool [~~[User:Ginjachris\|Ginjachris]] ([[User talk~~:~~Ginjachris\|talk]~~]~~) 11:23, 21 November 2013 (UTC)~~		Adding macchanger [https://github.com/alobbs/macchanger (github page)] package would be cool. '''Raised under [http://bugs.alpinelinux.org/issues/2536 Feature #2536]'''

	=== darkhttpd ===		=== darkhttpd ===
	[http://unix4lyfe.org/darkhttpd/ darkhttpd] is a lightweight http server for static content supporting http version 1.1 and automatically provides directory listings. It's also capable of very easily running as a daemon and in a chroot. Would make an excellent replacement to lighttpd for an Alpine mirror. An openrc service file would be great too! [[User:Ginjachris\|Ginjachris]] ([[User talk:Ginjachris\|talk]]) 11:26, 27 December 2013 (UTC)		[http://unix4lyfe.org/darkhttpd/ darkhttpd] is a lightweight http server for static content supporting http version 1.1 and automatically provides directory listings. It's also capable of very easily running as a daemon and in a chroot. Would make an excellent replacement to lighttpd for an Alpine mirror. An openrc service file would be great too! [[User:Ginjachris\|Ginjachris]] ([[User talk:Ginjachris\|talk]]) 11:26, 27 December 2013 (UTC)