1
0
mirror of https://github.com/tommytran732/Linux-Setup-Scripts synced 2024-11-25 10:41:34 -05:00

Make sure home dirs are private

Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2023-12-07 17:26:53 -07:00
parent 5aca397a76
commit 7fd8e73563
No known key found for this signature in database
GPG Key ID: D30DEC268D3FEB17
4 changed files with 12 additions and 0 deletions

View File

@ -26,6 +26,9 @@ unpriv(){
sudo systemctl mask ctrl-alt-del.target sudo systemctl mask ctrl-alt-del.target
sudo systemctl mask debug-shell.service sudo systemctl mask debug-shell.service
# Make home directory private
chmod 700 /home/*
# Setup NTS # Setup NTS
sudo rm -rf /etc/chrony/chrony.conf sudo rm -rf /etc/chrony/chrony.conf
unpriv curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf | sudo tee /etc/chrony/chrony.conf unpriv curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf | sudo tee /etc/chrony/chrony.conf

View File

@ -28,6 +28,9 @@ unpriv(){
sudo systemctl mask ctrl-alt-del.target sudo systemctl mask ctrl-alt-del.target
sudo systemctl mask debug-shell.service sudo systemctl mask debug-shell.service
# Make home directory private
chmod 700 /home/*
# Setup NTS # Setup NTS
sudo curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf -o /etc/chrony.conf sudo curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf -o /etc/chrony.conf

View File

@ -36,6 +36,9 @@ sudo usg fix cis_level2_workstation
sudo systemctl mask ctrl-alt-del.target sudo systemctl mask ctrl-alt-del.target
sudo systemctl mask debug-shell.service sudo systemctl mask debug-shell.service
# Make home directory private
chmod 700 /home/*
# Remove AIDE # Remove AIDE
sudo apt purge -y aide* sudo apt purge -y aide*

View File

@ -36,6 +36,9 @@ sudo usg fix cis_level2_server
sudo systemctl mask ctrl-alt-del.target sudo systemctl mask ctrl-alt-del.target
sudo systemctl mask debug-shell.service sudo systemctl mask debug-shell.service
# Make home directory private
chmod 700 /home/*
# Remove AIDE # Remove AIDE
sudo apt purge -y aide* sudo apt purge -y aide*