From d4af80bd39552f46e294058250d5dae63484c96b Mon Sep 17 00:00:00 2001 From: TommyTran732 <57488583+tommytran732@users.noreply.github.com> Date: Wed, 14 Apr 2021 21:16:08 -0400 Subject: [PATCH] Update install.sh --- install.sh | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/install.sh b/install.sh index 38cdbd3..59a86dc 100644 --- a/install.sh +++ b/install.sh @@ -206,9 +206,9 @@ systemctl enable apparmor --root=/mnt &>/dev/null systemctl enable firewalld --root=/mnt &>/dev/null # Setting umask to 077 -sed -i 's/022/077/g' /etc/profile -echo "" >> /etc/bash.bashrc -echo "umask 077" >> /etc/bash.bashrc +sed -i 's/022/077/g' /mnt/etc/profile +echo "" >> /mnt/etc/bash.bashrc +echo "umask 077" >> /mnt/etc/bash.bashrc #Security kernel settings sudo bash -c 'cat > /mnt/etc/sysctl.d/51-dmesg-restrict.conf' <<-'EOF' @@ -231,5 +231,8 @@ kernel.yama.ptrace_scope = 3 module.sig_enforce = 1 EOF +#Blacklist Firewire SBP2 +echo "blacklist firewire-sbp2" | sudo tee /mnt/etc/modprobe.d/blacklist.conf + echo "Done, you may now wish to reboot (further changes can be done by chrooting into /mnt)." exit