1
0
mirror of https://github.com/tommytran732/Linux-Setup-Scripts synced 2024-11-22 01:21:33 -05:00

Enable chronyd seccomp filter

Signed-off-by: Thien Tran <contact@tommytran.io>
This commit is contained in:
Thien Tran 2023-08-15 17:52:08 -07:00
parent 195e9686a9
commit fb0082cdff
No known key found for this signature in database
GPG Key ID: 060B29EB996BD9F2

View File

@ -46,6 +46,10 @@ sudo chmod 644 /etc/ssh/ssh_config.d/10-custom.conf
#Setup NTS #Setup NTS
sudo rm -rf /etc/chrony/chrony.conf sudo rm -rf /etc/chrony/chrony.conf
sudo curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf -o /etc/chrony/chrony.conf sudo curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf -o /etc/chrony/chrony.conf
echo '# Command-line options for chronyd
OPTIONS="-F 1"' | sudo tee /etc/sysconfig/chronyd
sudo systemctl restart chronyd sudo systemctl restart chronyd
# Disable automount # Disable automount
@ -85,7 +89,7 @@ sudo dnf -y remove fedora-bookmarks fedora-chromium-config firefox mozilla-files
#Remove support for some languages and spelling #Remove support for some languages and spelling
ibus-typing-booster *speech* *zhuyin* *pinyin* *kkc* *m17n* *hangul* *anthy* words \ ibus-typing-booster *speech* *zhuyin* *pinyin* *kkc* *m17n* *hangul* *anthy* words \
#Remove codec + image + printers #Remove codec + image + printers
openh264 ImageMagick* sane* simple-scan \ openh264 ImageMagick* sane* simple-scan \
#Remove Active Directory + Sysadmin + reporting tools #Remove Active Directory + Sysadmin + reporting tools
sssd* realmd adcli cyrus-sasl-plain cyrus-sasl-gssapi mlocate quota* dos2unix kpartx sos abrt \ sssd* realmd adcli cyrus-sasl-plain cyrus-sasl-gssapi mlocate quota* dos2unix kpartx sos abrt \
#Remove vm and virtual stuff #Remove vm and virtual stuff