mirror of
https://github.com/tommytran732/Linux-Setup-Scripts
synced 2024-11-22 01:21:33 -05:00
Compare commits
3 Commits
2f5d07bc51
...
17a73f8976
Author | SHA1 | Date | |
---|---|---|---|
17a73f8976 | |||
159f947132 | |||
287f97e9f4 |
@ -25,6 +25,7 @@ unpriv(){
|
||||
}
|
||||
|
||||
# Compliance
|
||||
sudo rm /etc/systemd/system/ctrl-alt-del.target
|
||||
sudo systemctl mask ctrl-alt-del.target
|
||||
sudo systemctl mask debug-shell.service
|
||||
sudo systemctl mask kdump.service
|
||||
@ -75,11 +76,7 @@ sudo sysctl -p
|
||||
# Systemd Hardening
|
||||
sudo mkdir -p /etc/systemd/system/NetworkManager.service.d
|
||||
unpriv curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd/system/NetworkManager.service.d/99-brace.conf | sudo tee /etc/systemd/system/NetworkManager.service.d/99-brace.conf
|
||||
sudo mkdir -p /etc/systemd/system/irqbalance.service.d
|
||||
unpriv curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd/system/irqbalance.service.d/99-brace.conf | sudo tee /etc/systemd/system/irqbalance.service.d/99-brace.conf
|
||||
|
||||
sudo systemctl restart NetworkManager
|
||||
sudo systemctl restart irqbalance
|
||||
|
||||
# Disable automount
|
||||
unpriv curl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/automount-disable | sudo tee /etc/dconf/db/local.d/automount-disable
|
@ -25,6 +25,7 @@ unpriv(){
|
||||
}
|
||||
|
||||
# Compliance
|
||||
sudo rm /etc/systemd/system/ctrl-alt-del.target
|
||||
sudo systemctl mask ctrl-alt-del.target
|
||||
sudo systemctl mask debug-shell.service
|
||||
sudo systemctl mask kdump.service
|
||||
@ -204,4 +205,4 @@ if [ "$virt_type" = '' ]; then
|
||||
unpriv curl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/systemd/system/fwupd-refresh.service.d/override.conf | sudo tee /etc/systemd/system/fwupd-refresh.service.d/override.conf
|
||||
sudo systemctl daemon-reload
|
||||
sudo systemctl enable --now fwupd-refresh.timer
|
||||
fi
|
||||
fi
|
||||
|
Loading…
Reference in New Issue
Block a user