From ab72f9eba9ce8fd7d4a006beb991dc20535be9a2 Mon Sep 17 00:00:00 2001
From: Tommy <contact@tommytran.io>
Date: Tue, 3 Oct 2023 15:02:30 -0700
Subject: [PATCH] fwupd hardening on Red Hat systems

---
 Fedora-Workstation-38.sh | 2 ++
 RHEL-Server-9.sh         | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/Fedora-Workstation-38.sh b/Fedora-Workstation-38.sh
index cc68350..2ae0d4b 100644
--- a/Fedora-Workstation-38.sh
+++ b/Fedora-Workstation-38.sh
@@ -101,6 +101,8 @@ sudo sed -i 's/^metalink=.*/&\&protocol=https/g' /etc/yum.repos.d/*
 
 # Update packages and firmware
 sudo dnf upgrade -y
+echo 'UriSchemes=file;https' | sudo tee -a /etc/fwupd/fwupd.conf
+sudo systemctl restart fwupd
 sudo fwupdmgr get-devices
 sudo fwupdmgr refresh --force
 sudo fwupdmgr get-updates -y
diff --git a/RHEL-Server-9.sh b/RHEL-Server-9.sh
index 6d2e6e9..1be480b 100644
--- a/RHEL-Server-9.sh
+++ b/RHEL-Server-9.sh
@@ -154,6 +154,8 @@ sudo systemctl enable --now dnf-automatic.timer
 
 #Setup fwupd
 sudo dnf install fwupd -y
+echo 'UriSchemes=file;https' | sudo tee -a /etc/fwupd/fwupd.conf
+sudo systemctl restart fwupd
 mkdir -p /etc/systemd/system/fwupd-refresh.service.d
 echo '[Service]
 ExecStart=/usr/bin/fwupdmgr update' | tee /etc/systemd/system/fwupd-refresh.service.d/override.conf