mirror of
https://github.com/tommytran732/Linux-Setup-Scripts
synced 2024-11-22 17:41:32 -05:00
Compare commits
3 Commits
2f5a5ab10a
...
0eae66deec
Author | SHA1 | Date | |
---|---|---|---|
0eae66deec | |||
f2e7ec45dd | |||
cc8703dbff |
@ -38,9 +38,8 @@ sudo apt update -y
|
|||||||
sudo apt full-upgrade -y
|
sudo apt full-upgrade -y
|
||||||
sudo apt autoremove -y
|
sudo apt autoremove -y
|
||||||
|
|
||||||
# Default to gcc-12 instead of gcc-11
|
## Install basic sysadmin tools
|
||||||
sudo rm /usr/bin/gcc
|
sudo apt install nano iputils-ping
|
||||||
sudo ln -s /usr/bin/gcc-12 /usr/bin/gcc
|
|
||||||
|
|
||||||
# Make home directory private
|
# Make home directory private
|
||||||
sudo chmod 700 /home/*
|
sudo chmod 700 /home/*
|
||||||
@ -60,7 +59,7 @@ sudo chmod 644 /etc/ssh/ssh_config.d/10-custom.conf
|
|||||||
sudo mkdir -p /etc/systemd/system/ssh.service.d
|
sudo mkdir -p /etc/systemd/system/ssh.service.d
|
||||||
unpriv curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/systemd/system/sshd.service.d/local.conf | sudo tee /etc/systemd/system/ssh.service.d/override.conf
|
unpriv curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/systemd/system/sshd.service.d/local.conf | sudo tee /etc/systemd/system/ssh.service.d/override.conf
|
||||||
sudo systemctl daemon-reload
|
sudo systemctl daemon-reload
|
||||||
sudo systemctl restart sshd
|
sudo systemctl restart ssh
|
||||||
|
|
||||||
# Kernel hardening
|
# Kernel hardening
|
||||||
unpriv curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/modprobe.d/30_security-misc.conf | sudo tee /etc/modprobe.d/30_security-misc.conf
|
unpriv curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/modprobe.d/30_security-misc.conf | sudo tee /etc/modprobe.d/30_security-misc.conf
|
Loading…
Reference in New Issue
Block a user