From a331025f3ff4f4ad8b4eef243fa4015168258fae Mon Sep 17 00:00:00 2001 From: Thien Tran Date: Tue, 8 Aug 2023 21:33:38 -0700 Subject: [PATCH] Enable seccomp filter for Chrony Signed-off-by: Thien Tran --- RHEL-Server-9.sh | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/RHEL-Server-9.sh b/RHEL-Server-9.sh index 3c1390b..c989969 100644 --- a/RHEL-Server-9.sh +++ b/RHEL-Server-9.sh @@ -78,6 +78,10 @@ sudo curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/syste sudo systemctl restart sshd sudo curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf -o /etc/chrony.conf + +echo '# Command-line options for chronyd +OPTIONS="-F 1"' | sudo tee /etc/sysconfig/chronyd + sudo systemctl restart chronyd sudo insights-client --collector malware-detection