Tomster/Linux-Setup-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/Linux-Setup-Scripts synced 2024-11-24 02:01:33 -05:00
Code

Compare commits

base: Tomster:f8f99d3b707b60f9f7c887b3492ec99c729a1043
Branches Tags
Tomster:main
..
compare: Tomster:e8aaefa9843bbbb6a16f9faf4a9edb4dc1d50fda
Branches Tags
Tomster:main

No commits in common. "f8f99d3b707b60f9f7c887b3492ec99c729a1043" and "e8aaefa9843bbbb6a16f9faf4a9edb4dc1d50fda" have entirely different histories.
f8f99d3b70 ... e8aaefa984

1 changed files with 5 additions and 4 deletions
Show Stats Expand all files Collapse all files

9
Ubuntu-22.04-Desktop.sh
View File

@ -9,7 +9,7 @@ sudo apt update -y
sudo apt full-upgrade -y sudo apt full-upgrade -y
sudo apt install -y usg sudo apt install -y usg
sudo apt autoremove -y sudo apt autoremove -y
sudo usg fix cis_level2_workstation sudo usg fix cis_level2_server
# Remove AIDE # Remove AIDE
sudo apt purge -y aide* sudo apt purge -y aide*
@ -26,7 +26,8 @@ echo "umask 077" | sudo tee --append /etc/profile
# Setup NTS # Setup NTS
sudo systemctl disable systemd-timesyncd sudo systemctl disable systemd-timesyncd
sudo apt install -y curl chrony sudo apt install -y chrony
rm -rf /etc/chrony/chrony.conf
sudo curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf -o /etc/chrony/chrony.conf sudo curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.conf -o /etc/chrony/chrony.conf
sudo systemctl restart chronyd sudo systemctl restart chronyd
@ -46,7 +47,7 @@ sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/
sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/sysctl.d/30_security-misc.conf -o /etc/sysctl.d/30_security-misc.conf sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/sysctl.d/30_security-misc.conf -o /etc/sysctl.d/30_security-misc.conf
sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/sysctl.d/30_silent-kernel-printk.conf -o /etc/sysctl.d/30_silent-kernel-printk.conf sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/sysctl.d/30_silent-kernel-printk.conf -o /etc/sysctl.d/30_silent-kernel-printk.conf
sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/sysctl.d/30_security-misc_kexec-disable.conf -o /etc/sysctl.d/30_security-misc_kexec-disable.conf sudo curl https://raw.githubusercontent.com/Kicksecure/security-misc/master/etc/sysctl.d/30_security-misc_kexec-disable.conf -o /etc/sysctl.d/30_security-misc_kexec-disable.conf
sudo sed -i 's/kernel.yama.ptrace_scope=2/kernel.yama.ptrace_scope=3/g' /etc/sysctl.d/30_security-misc.conf sed -i 's/kernel.yama.ptrace_scope=2/kernel.yama.ptrace_scope=3/g' /etc/sysctl.d/30_security-misc.conf
# Systemd Hardening # Systemd Hardening
sudo mkdir -p /etc/systemd/system/NetworkManager.service.d sudo mkdir -p /etc/systemd/system/NetworkManager.service.d
@ -114,4 +115,4 @@ sudo systemctl restart NetworkManager
# Enable fstrim.timer # Enable fstrim.timer
sudo apt install tuned -y sudo apt install tuned -y
sudo systemctl enable --now fstrim.timer sudo systemctl enable --now fstrim.timer