1
0
mirror of https://github.com/tommytran732/Linux-Setup-Scripts synced 2024-11-22 09:31:34 -05:00

Compare commits

...

3 Commits

Author SHA1 Message Date
17a73f8976
irq balanced no longer preinstalled on Fedora
Signed-off-by: Tommy <contact@tommytran.io>
2023-12-25 02:23:03 -07:00
159f947132
Consistency between RHEL and Fedora
Signed-off-by: Tommy <contact@tommytran.io>
2023-12-25 02:18:48 -07:00
287f97e9f4
Update to Fedora 39
Signed-off-by: Tommy <contact@tommytran.io>
2023-12-25 02:17:47 -07:00
2 changed files with 3 additions and 5 deletions

View File

@ -25,6 +25,7 @@ unpriv(){
}
# Compliance
sudo rm /etc/systemd/system/ctrl-alt-del.target
sudo systemctl mask ctrl-alt-del.target
sudo systemctl mask debug-shell.service
sudo systemctl mask kdump.service
@ -75,11 +76,7 @@ sudo sysctl -p
# Systemd Hardening
sudo mkdir -p /etc/systemd/system/NetworkManager.service.d
unpriv curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd/system/NetworkManager.service.d/99-brace.conf | sudo tee /etc/systemd/system/NetworkManager.service.d/99-brace.conf
sudo mkdir -p /etc/systemd/system/irqbalance.service.d
unpriv curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd/system/irqbalance.service.d/99-brace.conf | sudo tee /etc/systemd/system/irqbalance.service.d/99-brace.conf
sudo systemctl restart NetworkManager
sudo systemctl restart irqbalance
# Disable automount
unpriv curl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/automount-disable | sudo tee /etc/dconf/db/local.d/automount-disable

View File

@ -25,6 +25,7 @@ unpriv(){
}
# Compliance
sudo rm /etc/systemd/system/ctrl-alt-del.target
sudo systemctl mask ctrl-alt-del.target
sudo systemctl mask debug-shell.service
sudo systemctl mask kdump.service
@ -204,4 +205,4 @@ if [ "$virt_type" = '' ]; then
unpriv curl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/systemd/system/fwupd-refresh.service.d/override.conf | sudo tee /etc/systemd/system/fwupd-refresh.service.d/override.conf
sudo systemctl daemon-reload
sudo systemctl enable --now fwupd-refresh.timer
fi
fi