mirror of
https://github.com/tommytran732/Linux-Setup-Scripts
synced 2024-11-22 09:31:34 -05:00
Compare commits
3 Commits
2f5a5ab10a
...
0eae66deec
Author | SHA1 | Date | |
---|---|---|---|
0eae66deec | |||
f2e7ec45dd | |||
cc8703dbff |
@ -38,9 +38,8 @@ sudo apt update -y
|
||||
sudo apt full-upgrade -y
|
||||
sudo apt autoremove -y
|
||||
|
||||
# Default to gcc-12 instead of gcc-11
|
||||
sudo rm /usr/bin/gcc
|
||||
sudo ln -s /usr/bin/gcc-12 /usr/bin/gcc
|
||||
## Install basic sysadmin tools
|
||||
sudo apt install nano iputils-ping
|
||||
|
||||
# Make home directory private
|
||||
sudo chmod 700 /home/*
|
||||
@ -60,7 +59,7 @@ sudo chmod 644 /etc/ssh/ssh_config.d/10-custom.conf
|
||||
sudo mkdir -p /etc/systemd/system/ssh.service.d
|
||||
unpriv curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/systemd/system/sshd.service.d/local.conf | sudo tee /etc/systemd/system/ssh.service.d/override.conf
|
||||
sudo systemctl daemon-reload
|
||||
sudo systemctl restart sshd
|
||||
sudo systemctl restart ssh
|
||||
|
||||
# Kernel hardening
|
||||
unpriv curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/modprobe.d/30_security-misc.conf | sudo tee /etc/modprobe.d/30_security-misc.conf
|
Loading…
Reference in New Issue
Block a user