631 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Tommy	740b9d9af6	Comment out yara ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-07 20:41:02 -07:00
Tommy	80422768f1	SecureBlue hmalloc does not currently support RHEL ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-07 20:37:29 -07:00
Tommy	c61c69752f	Make sure chrony is installed on RHEL ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-07 20:30:02 -07:00
Tommy	e258f693dc	Use SecureBlue for HardenedMalloc ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-07 14:11:45 -07:00
Tommy	68b50f15be	Consistency fix for comments ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-06 22:44:25 -07:00
Tommy	afb3f0e98a	Typo fix	2024-06-06 21:59:38 -07:00
Tommy	4514fe279a	Add preload file for hmalloc	2024-06-06 21:58:28 -07:00
Tommy	b219184e6d	Change comment	2024-06-06 15:21:13 -07:00
Tommy	dd65ecf897	Ignore Bogus ICMP responses	2024-06-06 14:03:28 -07:00
Tommy	b4d7ba6bce	Purge evince ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-06 01:05:51 -07:00
Tommy	fe7f17fb6b	Permission fixes	2024-06-05 22:18:53 -07:00
Tommy	55085948db	Ensure file permissions on Proxmox and RHEL	2024-06-05 21:46:24 -07:00
Tommy	3790c4df70	Fix file permission on Fedora	2024-06-05 21:42:12 -07:00
Tommy	82513c31c9	Fix sysctl for rosetta	2024-06-05 21:20:31 -07:00
Tommy	0dc37c49d1	Update workstation sysctl	2024-06-05 21:06:33 -07:00
Tommy	d4fcbb538d	Fix gpg key permission	2024-06-05 19:24:00 -07:00
Tommy	7807e16cac	Update Microsoft edge repo	2024-06-05 19:10:19 -07:00
Tommy	55f8b4ab99	Fix rosetta support	2024-06-05 19:01:48 -07:00
Tommy	66b35f260f	Rename file	2024-06-05 18:47:01 -07:00
Tommy	b8f2e1884e	Initial port to Ubuntu Desktop 24.04	2024-06-05 18:46:37 -07:00
Tommy	905096e36a	Wildcard removal of abrt	2024-06-05 16:24:37 -07:00
Tommy	59f32b8c6b	Ubuntu 23.10 script no longer maintained ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-05 16:02:41 -07:00
Tommy	2ff48df2d1	Typo fixes ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-04 14:29:50 -07:00
Tommy	79a215e4d8	Typo fixes ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-04 11:39:38 -07:00
Tommy	22968df08f	Remove unnecessary dracut commands ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-04 11:32:29 -07:00
Tommy	88918cf7dc	Use SecureBlue and custom configs whenever possible ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-04 05:33:52 -07:00
Tommy	236f650566	Use custom config & SecureBlue whenever possible on Fedora ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-04 04:23:30 -07:00
Tommy	603738ff45	Disable sysrq ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-04 03:50:00 -07:00
Tommy	5e58a06876	Use custom sysctl ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-04 03:36:34 -07:00
Tommy	acf3e6ae11	Move generate-kmod-blacklist to TommyTran732/Security-Misc ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-02 15:06:04 -07:00
Tommy	a781fd5a5d	Use AF's link ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 20:45:08 -07:00
Tommy	db4a82be7e	Better regex for kernel module blacklist ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 13:46:59 -07:00
Tommy	8087457cb0	Add escape for regex ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 13:34:48 -07:00
Tommy	90bebe1665	Better regex ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 13:19:20 -07:00
Tommy	0f0b98feb6	Add badge & expand ignore list ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 10:32:55 -07:00
Tommy	f8819622ec	Add shellcheck ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 10:29:25 -07:00
Tommy	023cc46676	Typo fix ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 05:11:03 -07:00
Tommy	4b9ae05218	Even better regex ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 02:33:02 -07:00
Tommy	5bc20644e6	Better regex ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-31 02:27:28 -07:00
Tommy	f1508a7f01	Stop hardcoding compression level ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-30 21:57:03 -07:00
Tommy	3e97fd298c	Add notes on DNS handling ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-29 18:16:17 -07:00
Tommy	520bb847e6	Disable systemd-resolved ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-29 18:06:18 -07:00
Tommy	f99929f796	Fix unbound config URL ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-29 18:00:53 -07:00
Tommy	236e1ae23a	Add irqbalance hardening for Fedora Server ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-29 17:49:12 -07:00
Tommy	0c892f019b	Consistency fix ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-29 17:48:45 -07:00
Tommy	b32330c79d	Re-add irqbalance hardening on RHEL 9 ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-29 17:23:29 -07:00
Tommy	3cd2cf7215	Add notes for unbound on RHEL ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-29 17:11:34 -07:00
Tommy	09cd7639ad	Add unbound to Fedora server ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-29 16:45:12 -07:00
Tommy	5956eb9095	Install dnf-automatic ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-29 16:05:07 -07:00
Tommy	b0cb3d2788	Keep RHEL 9 and F40 scripts in sync ... Signed-off-by: Tommy <contact@tommytran.io>	2024-05-29 16:00:50 -07:00