mirror of
https://github.com/tommytran732/Arch-Setup-Script
synced 2024-11-13 21:51:33 -05:00
Update install.sh
This commit is contained in:
parent
0f75fac55e
commit
b12f01d9af
@ -146,7 +146,7 @@ sed -i -e 's,modconf block filesystems keyboard,keyboard keymap modconf block en
|
|||||||
UUID=$(blkid $Cryptroot | cut -f2 -d'"')
|
UUID=$(blkid $Cryptroot | cut -f2 -d'"')
|
||||||
sed -i 's/#\(GRUB_ENABLE_CRYPTODISK=y\)/\1/' /mnt/etc/default/grub
|
sed -i 's/#\(GRUB_ENABLE_CRYPTODISK=y\)/\1/' /mnt/etc/default/grub
|
||||||
sed -i -e "s,quiet,quiet cryptdevice=UUID=$UUID:cryptroot root=$BTRFS,g" /mnt/etc/default/grub
|
sed -i -e "s,quiet,quiet cryptdevice=UUID=$UUID:cryptroot root=$BTRFS,g" /mnt/etc/default/grub
|
||||||
sed -i -e "s#root=/dev/mapper/cryptroot#root=/dev/mapper/cryptroot lsm=lockdown,yama,apparmor,bpf lockdown=confidentiality#g" /mnt/etc/default/grub
|
sed -i -e "s#root=/dev/mapper/cryptroot#root=/dev/mapper/cryptroot lsm=lockdown,yama,apparmor,bpf lockdown=integrity#g" /mnt/etc/default/grub
|
||||||
echo "" >> /mnt/etc/default/grub
|
echo "" >> /mnt/etc/default/grub
|
||||||
echo -e "# Booting with BTRFS subvolume\nGRUB_BTRFS_OVERRIDE_BOOT_PARTITION_DETECTION=true" >> /mnt/etc/default/grub
|
echo -e "# Booting with BTRFS subvolume\nGRUB_BTRFS_OVERRIDE_BOOT_PARTITION_DETECTION=true" >> /mnt/etc/default/grub
|
||||||
|
|
||||||
@ -228,7 +228,7 @@ fs.protected_hardlinks = 1
|
|||||||
fs.protected_symlinks = 1
|
fs.protected_symlinks = 1
|
||||||
net.core.bpf_jit_harden = 2
|
net.core.bpf_jit_harden = 2
|
||||||
kernel.yama.ptrace_scope = 3
|
kernel.yama.ptrace_scope = 3
|
||||||
# module.sig_enforce = 1
|
module.sig_enforce = 1
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
#Blacklist Firewire SBP2
|
#Blacklist Firewire SBP2
|
||||||
|
Loading…
Reference in New Issue
Block a user