2021-04-06 10:10:10 -04:00
|
|
|
#This is a quick script to run after any Ubuntu update after 20.04 (tested on 20.10 and 21.04)
|
|
|
|
|
|
2021-04-06 11:33:50 -04:00
|
|
|
#Variables
|
|
|
|
|
USER=$(whoami)
|
|
|
|
|
|
2021-04-06 10:28:29 -04:00
|
|
|
#Fixing umask
|
|
|
|
|
umask 077
|
|
|
|
|
sudo sed -ie '/^DIR_MODE=/ s/=[0-9]*\+/=0700/' /etc/adduser.conf
|
|
|
|
|
sudo sed -ie '/^UMASK\s\+/ s/022/077/' /etc/login.defs
|
2021-04-06 11:02:01 -04:00
|
|
|
sudo sed -i 's/USERGROUPS_ENAB yes/USERGROUPS_ENAB no/g' /etc/login.defs
|
2021-04-06 11:00:15 -04:00
|
|
|
sudo sed -i 's/HOME_MODE 0750/HOME_MODE 0700/g' /etc/login.defs
|
2021-04-06 10:28:29 -04:00
|
|
|
|
2021-04-06 10:10:10 -04:00
|
|
|
#Remove unneeded packages
|
|
|
|
|
#Note that I remove unattended upgrades because GNOME Software will be handling auto updates
|
2021-04-06 14:49:06 -04:00
|
|
|
sudo apt purge gnome-calculator *evince* *seahorse* *gedit* *yelp* gnome-screenshot gnome-power-manager eog gnome-logs gnome-characters gnome-shell-extension-desktop-icons gnome-font-viewer *file-roller* network-manager-pptp* network-manager-openvpn* *nfs* apport* telnet *spice* tcpdump firefox* gnome-disk* gnome-initial-setup ubuntu-report popularity-contest whoopsie speech-dispatcher modemmanager avahi* gnome-shell-extension-ubuntu-dock mobile-broadband-provider-info ImageMagick* adcli libreoffice* ntfs* xfs* tracker* thermald sane* simple-scan *hangul* unattended-upgrades ibus-table python3-reportlab-accel* *remote-desktop* xserver-xephyr *printer-driver* info -y
|
2021-04-06 10:10:10 -04:00
|
|
|
|
2021-04-06 11:33:50 -04:00
|
|
|
#Install gnome extensions (most extensions are available in the repos now)
|
2021-04-06 19:11:42 -04:00
|
|
|
sudo apt install gnome-shell-extensions gnome-shell-extension-dashtodock gnome-shell-extension-freon gnome-shell-extension-system-monitor gnome-shell-extension-weather nautilus
|
2021-04-06 11:41:49 -04:00
|
|
|
sudo rm -rf /usr/share/xsessions/gnome-classic.desktop
|
2021-04-06 11:33:50 -04:00
|
|
|
|
|
|
|
|
#Remove GetExtensions
|
|
|
|
|
pip3 uninstall GetExtensions
|
|
|
|
|
rm -rf /home/${USER}/.local/lib/python*
|
|
|
|
|
|
2021-04-06 11:37:08 -04:00
|
|
|
#Reinstall OpenSnitch
|
|
|
|
|
wget https://github.com/evilsocket/opensnitch/releases/download/v1.3.6/opensnitch_1.3.6-1_amd64.deb
|
|
|
|
|
wget https://github.com/evilsocket/opensnitch/releases/download/v1.3.6/python3-opensnitch-ui_1.3.6-1_all.deb
|
|
|
|
|
sudo dpkg -i opensnitch*.deb python3-opensnitch-ui*.deb
|
|
|
|
|
sudo apt -f install -y
|
|
|
|
|
rm -rf *opensnitch*
|
|
|
|
|
sudo chown -R $USER:$USER /home/${USER}/.config/autostart
|
2021-04-06 10:20:00 -04:00
|
|
|
|
2021-04-06 10:36:47 -04:00
|
|
|
#Put all AppArmor profiles into enforcing mode
|
|
|
|
|
sudo aa-enforce /etc/apparmor.d/*
|
|
|
|
|
|
2021-04-06 10:10:10 -04:00
|
|
|
#Update flatpak
|
|
|
|
|
flatpak update
|
|
|
|
|
flatpak remove --unused
|
|
|
|
|
|
|
|
|
|
#Update snap
|
|
|
|
|
sudo snap refresh
|
|
|
|
|
|
|
|
|
|
#Signing ashmem kernel module
|
|
|
|
|
sudo kmodsign sha512 /var/lib/shim-signed/mok/MOK.priv /var/lib/shim-signed/mok/MOK.der /lib/modules/`uname -r`/kernel/drivers/staging/android/ashmem_linux.ko
|
|
|
|
|
|
|
|
|
|
#Reenable Wayland... They are working to support it, and if you aren't gaming you shouldn't stay on x11 anyways
|
|
|
|
|
sudo sed -i 's^DRIVER=="nvidia", RUN+="/usr/libexec/gdm-disable-wayland"^#DDRIVER=="nvidia", RUN+="/usr/libexec/gdm-disable-wayland"^g' /usr/lib/udev/rules.d/61-gdm.rules
|
