Tomster/Arch-Setup-Script
1
0
Fork 0
mirror of https://github.com/tommytran732/Arch-Setup-Script synced 2024-11-09 04:01:33 -05:00
Code

Update install.sh

Browse Source
This commit is contained in:
TommyTran732 2021-04-14 21:16:08 -04:00 committed by tommytran732
parent b1e12ad632
commit d4af80bd39
No known key found for this signature in database
GPG Key ID: 060B29EB996BD9F2
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
install.sh
View File

@ -206,9 +206,9 @@ systemctl enable apparmor --root=/mnt &>/dev/null
systemctl enable firewalld --root=/mnt &>/dev/null
# Setting umask to 077
sed -i 's/022/077/g' /etc/profile
echo "" >> /etc/bash.bashrc
echo "umask 077" >> /etc/bash.bashrc
sed -i 's/022/077/g' /mnt/etc/profile
echo "" >> /mnt/etc/bash.bashrc
echo "umask 077" >> /mnt/etc/bash.bashrc
#Security kernel settings
sudo bash -c 'cat > /mnt/etc/sysctl.d/51-dmesg-restrict.conf' <<-'EOF'
@ -231,5 +231,8 @@ kernel.yama.ptrace_scope = 3
module.sig_enforce = 1
EOF
#Blacklist Firewire SBP2
echo "blacklist firewire-sbp2" | sudo tee /mnt/etc/modprobe.d/blacklist.conf
echo "Done, you may now wish to reboot (further changes can be done by chrooting into /mnt)."
exit