Compliance update

Signed-off-by: Tommy <contact@tommytran.io>

Fedora-Workstation-38.sh

@@ -25,7 +25,9 @@ unpriv(){
 }
 
 # Compliance
-sudo systemctl disable --now ctrl-alt-del.target
+sudo systemctl mask ctrl-alt-del.target
+sudo systemctl mask debug-shell.service
+sudo systemctl mask kdump.service
 
 # Setting umask to 077
 umask 077

GCP-Debian-11.sh

@@ -23,7 +23,8 @@ unpriv(){
 }
 
 # Compliance
-sudo systemctl disable --now ctrl-alt-del.target
+sudo systemctl mask ctrl-alt-del.target
+sudo systemctl mask debug-shell.service
 
 # Setup NTS
 sudo rm -rf /etc/chrony/chrony.conf

Proxmox-8.sh

@@ -21,7 +21,8 @@ output(){
 }
 
 # Compliance
-sudo systemctl disable --now ctrl-alt-del.target
+systemctl mask ctrl-alt-del.target
+systemctl mask debug-shell.service
 
 # Setup NTS
 rm -rf /etc/chrony/chrony.conf

RHEL-Server-9.sh

@@ -25,7 +25,8 @@ unpriv(){
 }
 
 # Compliance
-sudo systemctl disable --now ctrl-alt-del.target
+sudo systemctl mask ctrl-alt-del.target
+sudo systemctl mask debug-shell.service
 
 # Setup NTS
 sudo curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf -o /etc/chrony.conf

Ubuntu-22.04-Desktop.sh

@@ -33,6 +33,9 @@ sudo apt install -y usg
 sudo apt autoremove -y
 sudo usg fix cis_level2_workstation
 
+sudo systemctl mask ctrl-alt-del.target
+sudo systemctl mask debug-shell.service
+
 # Remove AIDE
 sudo apt purge -y aide*
 

Ubuntu-22.04-Server.sh

@@ -33,6 +33,9 @@ sudo apt install -y usg curl libpam-pwquality
 sudo apt autoremove -y
 sudo usg fix cis_level2_server
 
+sudo systemctl mask ctrl-alt-del.target
+sudo systemctl mask debug-shell.service
+
 # Remove AIDE
 sudo apt purge -y aide*