2.3.0

Commits

• 9219e5e: Create FUNDING.yml (Jérémy Goutin)
• Fix "stime" not valid in auditd configuration for 64 bits OS. (jgoutin)
• Ensure SELinux binaries execution is logged by auditd. (jgoutin)
• Ensure Systemd debug-shell service is disabled. (jgoutin)
• Set Sysctl "kernel.perf_event_paranoid=2", the maximum value for recent kernel versions. (jgoutin)
• b60c58e: Fix badges links. (jgoutin)
• Fix invalid conditions. (jgoutin)
• Fix grub.cfg paths. (jgoutin)
• e832b9f: .gitignore: Add poetry (jgoutin)
• Add rpm-ostree support. (jgoutin)
• Allow enabling Thunderbolt with hardening. (jgoutin)
• Add random MAC address option. (jgoutin)
• Upgrade PHP to 8.3 (jgoutin)
• Fix missing grub countdown (jgoutin)
• Fix error caused by missing log file when logging with journald. (jgoutin)
• 282d6cd: php-fpm,nextcloud: Improve systemd sandboxing of /var. (jgoutin)
• Add option to disable kernel ia32 emulation. (jgoutin)
• Add missing AF_UNIX in RestrictAddressFamilies (jgoutin)
• Update doc to use "yescrypt", the current Fedora password hashing algorithm. (jgoutin)
• Add musicplayer_gtk_theme option (jgoutin)
• Remove Pipewire packages, with opt-out option. (jgoutin)
• Add option to fully disable HDMI sound. (jgoutin)
• Add rpm-ostree "commitmeta" (jgoutin)
• remove no more required "mesa_glthread=false" (jgoutin)
• Deprecate X-XSS-Protection. (jgoutin)
• Keep X-XSS-Protection to avoid warning. (jgoutin)
• Disable "logreader" default app until compatible with syslog. (jgoutin)
• Ensure "admin_audit" log in syslog. (jgoutin)
• Set maintenance_window_start (jgoutin)
• c4a2476: Update Github actions (jgoutin)