mirror of
https://github.com/tommytran732/Linux-Setup-Scripts
synced 2024-11-09 19:51:34 -05:00
Update Fedora-WorkStation-33.sh
This commit is contained in:
parent
b9a9d2cb8c
commit
27efbc3534
@ -142,6 +142,36 @@ EOF
|
|||||||
|
|
||||||
sudo sysctl --load=/etc/sysctl.d/99-steam.conf
|
sudo sysctl --load=/etc/sysctl.d/99-steam.conf
|
||||||
|
|
||||||
|
#Security kernel settings
|
||||||
|
sudo bash -c 'cat > /etc/sysctl.d/51-dmesg-restrict.conf' <<-'EOF'
|
||||||
|
kernel.dmesg_restrict = 1
|
||||||
|
EOF
|
||||||
|
|
||||||
|
sudo sysctl --load=/etc/sysctl.d/51-dmesg-restrict.conf
|
||||||
|
|
||||||
|
sudo bash -c 'cat > /etc/sysctl.d/51-kptr-restrict.conf' <<-'EOF'
|
||||||
|
kernel.kptr_restrict = 2
|
||||||
|
EOF
|
||||||
|
|
||||||
|
sudo sysctl --load=/etc/sysctl.d/51-kptr-restrict.conf
|
||||||
|
|
||||||
|
sudo bash -c 'cat > /etc/sysctl.d/51-kexec-restrict.conf' <<-'EOF'
|
||||||
|
kernel.kexec_load_disabled = 1
|
||||||
|
EOF
|
||||||
|
|
||||||
|
sudo sysctl --load=/etc/sysctl.d/51-kexec-restrict.conf
|
||||||
|
|
||||||
|
sudo bash -c 'cat > /etc/sysctl.d/10-security.conf' <<-'EOF'
|
||||||
|
fs.protected_hardlinks = 1
|
||||||
|
fs.protected_symlinks = 1
|
||||||
|
net.core.bpf_jit_harden = 2
|
||||||
|
kernel.yama.ptrace_scope = 3
|
||||||
|
module.sig_enforce = 1
|
||||||
|
EOF
|
||||||
|
|
||||||
|
sudo sysctl --load=/etc/sysctl.d/10-security.conf.conf
|
||||||
|
|
||||||
|
#Quick fixes for pulse audio with steam
|
||||||
sudo bash -c 'cat > /etc/pulse/daemon.conf' <<-'EOF'
|
sudo bash -c 'cat > /etc/pulse/daemon.conf' <<-'EOF'
|
||||||
# $ sudo nano /etc/pulse/daemon.conf
|
# $ sudo nano /etc/pulse/daemon.conf
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user