From 2d916c3c091662dbbd349cf0d8bf4dadd5a824b5 Mon Sep 17 00:00:00 2001 From: Tommy Date: Tue, 2 Jul 2024 17:39:47 -0700 Subject: [PATCH] Replace Divested HMalloc with SecureBlue Signed-off-by: Tommy --- fedora-gnome/fedora-gnome.sh | 7 +++---- fedora-minimal/fedora-minimal.sh | 9 ++++----- 2 files changed, 7 insertions(+), 9 deletions(-) diff --git a/fedora-gnome/fedora-gnome.sh b/fedora-gnome/fedora-gnome.sh index 9cd065e..03f3f98 100644 --- a/fedora-gnome/fedora-gnome.sh +++ b/fedora-gnome/fedora-gnome.sh @@ -134,11 +134,10 @@ sudo dnf config-manager --set-disabled fedora-cisco-openh264 sudo dnf -y install qubes-ctap qubes-gpg-split adw-gtk3-theme ncurses gnome-console gnome-shell # Setup hardened_malloc -sudo dnf -y install 'https://divested.dev/rpm/fedora/divested-release-20231210-2.noarch.rpm' -sudo dnf config-manager --save --setopt=divested.includepkgs=divested-release,real-ucode,microcode_ctl,amd-ucode-firmware,hardened_malloc -sudo sed -i 's/^metalink=.*/&?protocol=https/g' /etc/yum.repos.d/divested-release.repo -sudo dnf -y install hardened_malloc +sudo dnf copr enable secureblue/hardened_malloc -y +sudo dnf install -y hardened_malloc echo 'libhardened_malloc.so' | sudo tee /etc/ld.so.preload +sudo chmod 644 /etc/ld.so.preload # Setup DNF unpriv curl -s --proxy http://127.0.0.1:8082 https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dnf/dnf.conf | sudo tee /etc/dnf/dnf.conf > /dev/null diff --git a/fedora-minimal/fedora-minimal.sh b/fedora-minimal/fedora-minimal.sh index 56418bb..fad6fdb 100644 --- a/fedora-minimal/fedora-minimal.sh +++ b/fedora-minimal/fedora-minimal.sh @@ -55,8 +55,7 @@ sudo sysctl -p unpriv curl --proxy http://127.0.0.1:8082 https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/systemd/zram-generator.conf | sudo tee /etc/systemd/zram-generator.conf > /dev/null # Setup hardened_malloc -dnf install 'https://divested.dev/rpm/fedora/divested-release-20231210-2.noarch.rpm' -y -sed -i 's/^metalink=.*/&?protocol=https/g' /etc/yum.repos.d/divested-release.repo -dnf config-manager --save --setopt=divested.includepkgs=divested-release,real-ucode,microcode_ctl,amd-ucode-firmware,hardened_malloc -dnf install hardened_malloc -y -echo 'libhardened_malloc.so' | sudo tee /etc/ld.so.preload \ No newline at end of file +sudo dnf copr enable secureblue/hardened_malloc -y +sudo dnf install -y hardened_malloc +echo 'libhardened_malloc.so' | sudo tee /etc/ld.so.preload +sudo chmod 644 /etc/ld.so.preload \ No newline at end of file