2021-04-06 10:10:10 -04:00
|
|
|
#This is a quick script to run after any Ubuntu update after 20.04 (tested on 20.10 and 21.04)
|
|
|
|
|
|
2021-04-06 10:28:29 -04:00
|
|
|
#Fixing umask
|
|
|
|
|
umask 077
|
|
|
|
|
sudo sed -ie '/^DIR_MODE=/ s/=[0-9]*\+/=0700/' /etc/adduser.conf
|
|
|
|
|
sudo sed -ie '/^UMASK\s\+/ s/022/077/' /etc/login.defs
|
|
|
|
|
sudo sed -i 's/USERGROUPS_ENAB no/USERGROUPS_ENAB yes/g' /etc/login.defs
|
2021-04-06 11:00:15 -04:00
|
|
|
sudo sed -i 's/HOME_MODE 0750/HOME_MODE 0700/g' /etc/login.defs
|
2021-04-06 10:28:29 -04:00
|
|
|
|
2021-04-06 10:10:10 -04:00
|
|
|
#Remove unneeded packages
|
|
|
|
|
#Note that I remove unattended upgrades because GNOME Software will be handling auto updates
|
2021-04-06 10:58:26 -04:00
|
|
|
sudo apt purge gnome-calculator *evince* *seahorse* *gedit* *yelp* gnome-screenshot gnome-power-manager eog gnome-logs gnome-characters gnome-shell-extension-desktop-icons gnome-font-viewer *file-roller* network-manager-pptp* network-manager-openvpn* *nfs* apport* telnet *spice* tcpdump firefox* gnome-disk* gnome-initial-setup ubuntu-report popularity-contest whoopsie speech-dispatcher modemmanager avahi* gnome-shell-extension-ubuntu-dock mobile-broadband-provider-info ImageMagick* adcli libreoffice* ntfs* xfs* tracker* thermald sane* simple-scan *hangul* unattended-upgrades ibus-table python3-reportlab-accel* *remote-desktop* xserver-xephyr info -y
|
2021-04-06 10:10:10 -04:00
|
|
|
|
2021-04-06 10:20:00 -04:00
|
|
|
#Fix up dependencies for OpenSnitch
|
2021-04-06 10:20:12 -04:00
|
|
|
sudo apt install python3-grpcio python3-slugify -y
|
2021-04-06 10:20:00 -04:00
|
|
|
|
2021-04-06 10:36:47 -04:00
|
|
|
#Put all AppArmor profiles into enforcing mode
|
|
|
|
|
sudo aa-enforce /etc/apparmor.d/*
|
|
|
|
|
|
2021-04-06 10:10:10 -04:00
|
|
|
#Update flatpak
|
|
|
|
|
flatpak update
|
|
|
|
|
flatpak remove --unused
|
|
|
|
|
|
|
|
|
|
#Update snap
|
|
|
|
|
sudo snap refresh
|
|
|
|
|
|
|
|
|
|
#Signing ashmem kernel module
|
|
|
|
|
sudo kmodsign sha512 /var/lib/shim-signed/mok/MOK.priv /var/lib/shim-signed/mok/MOK.der /lib/modules/`uname -r`/kernel/drivers/staging/android/ashmem_linux.ko
|
|
|
|
|
|
|
|
|
|
#Reenable Wayland... They are working to support it, and if you aren't gaming you shouldn't stay on x11 anyways
|
|
|
|
|
sudo sed -i 's^DRIVER=="nvidia", RUN+="/usr/libexec/gdm-disable-wayland"^#DDRIVER=="nvidia", RUN+="/usr/libexec/gdm-disable-wayland"^g' /usr/lib/udev/rules.d/61-gdm.rules
|
