mirror of
https://github.com/tommytran732/Linux-Setup-Scripts
synced 2024-12-23 07:12:07 -05:00
Consistency fix
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
b32330c79d
commit
0c892f019b
@ -167,7 +167,7 @@ elif [ "${MACHINE_TYPE}" == 'aarch64' ]; then
|
||||
sudo dnf install -y hardened_malloc
|
||||
fi
|
||||
|
||||
# Setup Networking
|
||||
# Setup networking
|
||||
sudo firewall-cmd --permanent --remove-service=cockpit
|
||||
sudo firewall-cmd --reload
|
||||
sudo firewall-cmd --lockdown-on
|
||||
|
@ -240,7 +240,7 @@ elif [ "${MACHINE_TYPE}" == 'aarch64' ]; then
|
||||
sudo dnf install -y hardened_malloc
|
||||
fi
|
||||
|
||||
# Setup Networking
|
||||
# Setup networking
|
||||
sudo firewall-cmd --set-default-zone=block
|
||||
sudo firewall-cmd --permanent --add-service=dhcpv6-client
|
||||
sudo firewall-cmd --reload
|
||||
|
@ -205,7 +205,7 @@ elif [ "${MACHINE_TYPE}" == 'aarch64' ]; then
|
||||
sudo dnf install hardened_malloc -y
|
||||
fi
|
||||
|
||||
# Setup Networking
|
||||
# Setup networking
|
||||
sudo firewall-cmd --permanent --remove-service=cockpit
|
||||
sudo firewall-cmd --reload
|
||||
sudo firewall-cmd --lockdown-on
|
||||
@ -215,7 +215,7 @@ unpriv curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd
|
||||
sudo systemctl daemon-reload
|
||||
sudo systemctl restart NetworkManager
|
||||
|
||||
# irqbalance Hardening
|
||||
# irqbalance hardening
|
||||
sudo mkdir -p /etc/systemd/system/irqbalance.service.d
|
||||
unpriv curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd/system/irqbalance.service.d/99-brace.conf | sudo tee /etc/systemd/system/irqbalance.service.d/99-brace.conf
|
||||
sudo systemctl daemon-reload
|
||||
|
@ -204,7 +204,7 @@ fi
|
||||
echo 'UriSchemes=file;https' | sudo tee -a /etc/fwupd/fwupd.conf
|
||||
sudo systemctl restart fwupd
|
||||
|
||||
# Setup Networking
|
||||
# Setup networking
|
||||
|
||||
# UFW Snap is strictly confined, unlike its .deb counterpart
|
||||
sudo apt purge -y ufw
|
||||
|
@ -203,7 +203,7 @@ sudo systemctl daemon-reload
|
||||
sudo systemctl restart unbound
|
||||
sudo systemctl disable systemd-resolved
|
||||
|
||||
# Setup Networking
|
||||
# Setup networking
|
||||
|
||||
# UFW Snap is strictly confined, unlike its .deb counterpart
|
||||
sudo apt purge -y ufw
|
||||
|
Loading…
Reference in New Issue
Block a user