1
0
mirror of https://github.com/tommytran732/Linux-Setup-Scripts synced 2024-09-19 13:44:43 -04:00

Compare commits

..

3 Commits

Author SHA1 Message Date
f8f99d3b70
Add missing sudo
Signed-off-by: Tommy <contact@tommytran.io>
2023-08-28 01:36:10 -07:00
fee9dffaaa
Add curl
Signed-off-by: Tommy <contact@tommytran.io>
2023-08-28 01:30:35 -07:00
82e1bdd589
Typo fix
Signed-off-by: Tommy <contact@tommytran.io>
2023-08-28 01:06:14 -07:00

View File

@ -9,7 +9,7 @@ sudo apt update -y
sudo apt full-upgrade -y
sudo apt install -y usg
sudo apt autoremove -y
sudo usg fix cis_level2_server
sudo usg fix cis_level2_workstation
# Remove AIDE
sudo apt purge -y aide*
@ -26,8 +26,7 @@ echo "umask 077" | sudo tee --append /etc/profile
# Setup NTS
sudo systemctl disable systemd-timesyncd
sudo apt install -y chrony
rm -rf /etc/chrony/chrony.conf
sudo apt install -y curl chrony
sudo curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf -o /etc/chrony/chrony.conf
sudo systemctl restart chronyd
@ -47,7 +46,7 @@ sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/
sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/sysctl.d/30_security-misc.conf -o /etc/sysctl.d/30_security-misc.conf
sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/sysctl.d/30_silent-kernel-printk.conf -o /etc/sysctl.d/30_silent-kernel-printk.conf
sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/sysctl.d/30_security-misc_kexec-disable.conf -o /etc/sysctl.d/30_security-misc_kexec-disable.conf
sed -i 's/kernel.yama.ptrace_scope=2/kernel.yama.ptrace_scope=3/g' /etc/sysctl.d/30_security-misc.conf
sudo sed -i 's/kernel.yama.ptrace_scope=2/kernel.yama.ptrace_scope=3/g' /etc/sysctl.d/30_security-misc.conf
# Systemd Hardening
sudo mkdir -p /etc/systemd/system/NetworkManager.service.d
@ -115,4 +114,4 @@ sudo systemctl restart NetworkManager
# Enable fstrim.timer
sudo apt install tuned -y
sudo systemctl enable --now fstrim.timer
sudo systemctl enable --now fstrim.timer