From 0c8ae2fa244e675d9b73e863493a55d708c1af16 Mon Sep 17 00:00:00 2001
From: Tommy <contact@tommytran.io>
Date: Tue, 12 Dec 2023 01:21:56 -0700
Subject: [PATCH] Lockdown firewalld on RHEL

Signed-off-by: Tommy <contact@tommytran.io>
---
 RHEL-Server-9.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/RHEL-Server-9.sh b/RHEL-Server-9.sh
index e50f44f..b3d5c90 100644
--- a/RHEL-Server-9.sh
+++ b/RHEL-Server-9.sh
@@ -42,6 +42,7 @@ sudo systemctl restart chronyd
 
 sudo firewall-cmd --permanent --remove-service=cockpit
 sudo firewall-cmd --reload
+sudo firewall-cmd --lockdown-on
 
 # Harden SSH
 mkdir -p /etc/ssh/ssh_config.d /etc/ssh/sshd_config.d