Tomster/QubesOS-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/QubesOS-Scripts synced 2024-11-12 13:31:32 -05:00
Code

Permission hardener is default on Qubes-Whonix now

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-05-05 07:35:34 -07:00
parent cf45a897b6
commit f885b408d7
Signed by: Tomster
GPG Key ID: 555C902A34EC968F
2 changed files with 0 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
whonix/whonix-gw.sh
View File

@ -25,10 +25,6 @@ sudo chmod 644 /etc/apt/apt.conf.d/99sane-upgrades
# Install packages # Install packages
sudo apt install --no-install-recommends qt5ct qt5-style-plugins arc-theme -y sudo apt install --no-install-recommends qt5ct qt5-style-plugins arc-theme -y
# Enabling SUID Disabler and Permission Hardener
sudo permission-hardener enable
sudo systemctl enable --now permission-hardener
# Restrict /proc and access # Restrict /proc and access
sudo systemctl enable --now proc-hidepid.service sudo systemctl enable --now proc-hidepid.service

4
whonix/whonix-ws.sh
View File

@ -25,10 +25,6 @@ sudo chmod 644 /etc/apt/apt.conf.d/99sane-upgrades
# Install packages # Install packages
sudo apt install --no-install-recommends qt5ct qt5-style-plugins arc-theme git pipewire-pulse -y sudo apt install --no-install-recommends qt5ct qt5-style-plugins arc-theme git pipewire-pulse -y
# Enabling SUID Disabler and Permission Hardener
sudo permission-hardener enable
sudo systemctl enable --now permission-hardener
# Restrict /proc and access # Restrict /proc and access
sudo systemctl enable --now proc-hidepid.service sudo systemctl enable --now proc-hidepid.service