diff --git a/Fedora-Server-40.sh b/Fedora-Server-40.sh index 4f8ad31..5c1307f 100644 --- a/Fedora-Server-40.sh +++ b/Fedora-Server-40.sh @@ -167,7 +167,7 @@ elif [ "${MACHINE_TYPE}" == 'aarch64' ]; then sudo dnf install -y hardened_malloc fi -# Setup Networking +# Setup networking sudo firewall-cmd --permanent --remove-service=cockpit sudo firewall-cmd --reload sudo firewall-cmd --lockdown-on diff --git a/Fedora-Workstation-40.sh b/Fedora-Workstation-40.sh index 1baaf5a..d25bccd 100644 --- a/Fedora-Workstation-40.sh +++ b/Fedora-Workstation-40.sh @@ -240,7 +240,7 @@ elif [ "${MACHINE_TYPE}" == 'aarch64' ]; then sudo dnf install -y hardened_malloc fi -# Setup Networking +# Setup networking sudo firewall-cmd --set-default-zone=block sudo firewall-cmd --permanent --add-service=dhcpv6-client sudo firewall-cmd --reload diff --git a/RHEL-9.sh b/RHEL-9.sh index 81113fc..e3b77be 100644 --- a/RHEL-9.sh +++ b/RHEL-9.sh @@ -205,7 +205,7 @@ elif [ "${MACHINE_TYPE}" == 'aarch64' ]; then sudo dnf install hardened_malloc -y fi -# Setup Networking +# Setup networking sudo firewall-cmd --permanent --remove-service=cockpit sudo firewall-cmd --reload sudo firewall-cmd --lockdown-on @@ -215,7 +215,7 @@ unpriv curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd sudo systemctl daemon-reload sudo systemctl restart NetworkManager -# irqbalance Hardening +# irqbalance hardening sudo mkdir -p /etc/systemd/system/irqbalance.service.d unpriv curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd/system/irqbalance.service.d/99-brace.conf | sudo tee /etc/systemd/system/irqbalance.service.d/99-brace.conf sudo systemctl daemon-reload diff --git a/Ubuntu-23.10-Desktop.sh b/Ubuntu-23.10-Desktop.sh index 7759208..99be37d 100644 --- a/Ubuntu-23.10-Desktop.sh +++ b/Ubuntu-23.10-Desktop.sh @@ -204,7 +204,7 @@ fi echo 'UriSchemes=file;https' | sudo tee -a /etc/fwupd/fwupd.conf sudo systemctl restart fwupd -# Setup Networking +# Setup networking # UFW Snap is strictly confined, unlike its .deb counterpart sudo apt purge -y ufw diff --git a/Ubuntu-24.04-Server.sh b/Ubuntu-24.04-Server.sh index e2d1ad6..2e16e8c 100644 --- a/Ubuntu-24.04-Server.sh +++ b/Ubuntu-24.04-Server.sh @@ -203,7 +203,7 @@ sudo systemctl daemon-reload sudo systemctl restart unbound sudo systemctl disable systemd-resolved -# Setup Networking +# Setup networking # UFW Snap is strictly confined, unlike its .deb counterpart sudo apt purge -y ufw