## Copyright (C) 2012 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@kicksecure.com>
## See the file COPYING for copying conditions.

Source: debug-misc
Section: misc
Priority: optional
Maintainer: Patrick Schleizer <adrelanos@kicksecure.com>
Build-Depends: debhelper (>= 13), debhelper-compat (= 13), config-package-dev
Homepage: https://github.com/Kicksecure/debug-misc
Vcs-Browser: https://github.com/Kicksecure/debug-misc
Vcs-Git: https://github.com/Kicksecure/debug-misc.git
Standards-Version: 4.7.2
Rules-Requires-Root: no

Package: debug-misc
Architecture: all
Depends: ${misc:Depends}
Suggests: systemd-coredump, serial-console-enable
Replaces: grub-output-verbose
Description: Enables miscellaneous debug settings
 Ships a `/etc/default/grub.d/45_debug-misc.cfg` configuration file.
 This removes `quiet`, `loglevel=0`, and `rhgb` from the
 `GRUB_CMDLINE_LINUX_DEFAULT` variable. It also removes `debugfs=off`,
 `efi_pstore.pstore_disable=1`, and `erst_disable` from the
 `GRUB_CMDLINE_LINUX` variable. Finally, it adds `debug=vc` to the
 `GRUB_CMDLINE_LINUX` variable to enable verbose output during the
 initial ramdisk boot phase.
 .
 Undo debugging related `sysctl` settings by package `security-misc-shared`.
 .
 Enables persistent systemd journal log.
 .
 Disables `/usr/lib/systemd/coredump.conf.d/30_security-misc.conf` by package
 `security-misc-shared` using `debian/debug-misc.links` by creating a symlink
 from `/etc/systemd/coredump.conf.d/30_security-misc.conf` to `/dev/null`.
 .
 Disables `/usr/lib/systemd/pstore.conf.d/30_security-misc.conf` by package
 `security-misc-shared` using `debian/debug-misc.links` by creating a symlink
 from `/etc/systemd/pstore.conf.d/30_security-misc.conf` to `/dev/null`.
 .
 Disables `panic-on-oops`, `remove-system.map` by package
 `security-misc-shared`.
 .
 `config-package-dev` `hide` `/etc/sysctl.d/30_silent-kernel-printk.conf`
 which kernel.printk to default as if `security-misc-shared` would not have
 lowered verbosity.
 .
 Configure systemd `getty` service to not clear `tty`.
 `/lib/systemd/system/getty@tty.service.d/30_debug-misc.conf`
 .
 Coredumps are enabled.
 `/etc/security/limits.d/40_debug-misc.conf`
 .
 Coredumps may contain important information such as encryption keys or
 passwords. Package `security-misc-shared` disables coredumps. Package
 `debug-misc` re-enables coredumps.
 .
 Contains a helper tool to cause a segfault for testing purposes.
 `segfault-build` creates `segfault-run`. Running `segfault-run` results in
 `segfault-run` terminating with a segfault. This is useful to test if
 coredump files are being generated when an application crashes.
 `/usr/sbin/segfault-build`
 `/usr/share/debug-misc/segfault.c`
 .
 For better usability, to ease debugging in case of issues.
 .
 For better security, this package should only be installed on specific
 machines that require debugging. Unfortunately, security and debugging are
 conflicting optimization goals.
