mirror of
https://github.com/tommytran732/Linux-Setup-Scripts
synced 2024-11-09 11:41:33 -05:00
Consistency fix
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
b32330c79d
commit
0c892f019b
@ -167,7 +167,7 @@ elif [ "${MACHINE_TYPE}" == 'aarch64' ]; then
|
|||||||
sudo dnf install -y hardened_malloc
|
sudo dnf install -y hardened_malloc
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Setup Networking
|
# Setup networking
|
||||||
sudo firewall-cmd --permanent --remove-service=cockpit
|
sudo firewall-cmd --permanent --remove-service=cockpit
|
||||||
sudo firewall-cmd --reload
|
sudo firewall-cmd --reload
|
||||||
sudo firewall-cmd --lockdown-on
|
sudo firewall-cmd --lockdown-on
|
||||||
|
@ -240,7 +240,7 @@ elif [ "${MACHINE_TYPE}" == 'aarch64' ]; then
|
|||||||
sudo dnf install -y hardened_malloc
|
sudo dnf install -y hardened_malloc
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Setup Networking
|
# Setup networking
|
||||||
sudo firewall-cmd --set-default-zone=block
|
sudo firewall-cmd --set-default-zone=block
|
||||||
sudo firewall-cmd --permanent --add-service=dhcpv6-client
|
sudo firewall-cmd --permanent --add-service=dhcpv6-client
|
||||||
sudo firewall-cmd --reload
|
sudo firewall-cmd --reload
|
||||||
|
@ -205,7 +205,7 @@ elif [ "${MACHINE_TYPE}" == 'aarch64' ]; then
|
|||||||
sudo dnf install hardened_malloc -y
|
sudo dnf install hardened_malloc -y
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# Setup Networking
|
# Setup networking
|
||||||
sudo firewall-cmd --permanent --remove-service=cockpit
|
sudo firewall-cmd --permanent --remove-service=cockpit
|
||||||
sudo firewall-cmd --reload
|
sudo firewall-cmd --reload
|
||||||
sudo firewall-cmd --lockdown-on
|
sudo firewall-cmd --lockdown-on
|
||||||
@ -215,7 +215,7 @@ unpriv curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd
|
|||||||
sudo systemctl daemon-reload
|
sudo systemctl daemon-reload
|
||||||
sudo systemctl restart NetworkManager
|
sudo systemctl restart NetworkManager
|
||||||
|
|
||||||
# irqbalance Hardening
|
# irqbalance hardening
|
||||||
sudo mkdir -p /etc/systemd/system/irqbalance.service.d
|
sudo mkdir -p /etc/systemd/system/irqbalance.service.d
|
||||||
unpriv curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd/system/irqbalance.service.d/99-brace.conf | sudo tee /etc/systemd/system/irqbalance.service.d/99-brace.conf
|
unpriv curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd/system/irqbalance.service.d/99-brace.conf | sudo tee /etc/systemd/system/irqbalance.service.d/99-brace.conf
|
||||||
sudo systemctl daemon-reload
|
sudo systemctl daemon-reload
|
||||||
|
@ -204,7 +204,7 @@ fi
|
|||||||
echo 'UriSchemes=file;https' | sudo tee -a /etc/fwupd/fwupd.conf
|
echo 'UriSchemes=file;https' | sudo tee -a /etc/fwupd/fwupd.conf
|
||||||
sudo systemctl restart fwupd
|
sudo systemctl restart fwupd
|
||||||
|
|
||||||
# Setup Networking
|
# Setup networking
|
||||||
|
|
||||||
# UFW Snap is strictly confined, unlike its .deb counterpart
|
# UFW Snap is strictly confined, unlike its .deb counterpart
|
||||||
sudo apt purge -y ufw
|
sudo apt purge -y ufw
|
||||||
|
@ -203,7 +203,7 @@ sudo systemctl daemon-reload
|
|||||||
sudo systemctl restart unbound
|
sudo systemctl restart unbound
|
||||||
sudo systemctl disable systemd-resolved
|
sudo systemctl disable systemd-resolved
|
||||||
|
|
||||||
# Setup Networking
|
# Setup networking
|
||||||
|
|
||||||
# UFW Snap is strictly confined, unlike its .deb counterpart
|
# UFW Snap is strictly confined, unlike its .deb counterpart
|
||||||
sudo apt purge -y ufw
|
sudo apt purge -y ufw
|
||||||
|
Loading…
Reference in New Issue
Block a user