Tomster/QubesOS-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/QubesOS-Scripts synced 2024-11-22 01:41:34 -05:00
Code

Compare commits

base: Tomster:c6475d524cb04dbafae3f293a63168941e12d6fe
Branches Tags
Tomster:main
...
compare: Tomster:5500bc5164b653cf12d5051a44b57ee544b84801
Branches Tags
Tomster:main

2 Commits
c6475d524c ... 5500bc5164

Author SHA1 Message Date
Tommy
5500bc5164
Not overwrite USERGROUP_ENAB on anything but Ubuntu 
The nonsense with umask is introduced by Canonical's infinite wisdom:
https://git.launchpad.net/ubuntu/+source/pam/tree/debian/patches/pam_umask_usergroups_from_login.defs.patch?h=ubuntu/noble
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583958
We don't need to break sensible distributions because of Ubuntu nonsenses
 2024-07-09 15:23:55 -07:00
Tommy
615623328a
Remove unwanted groups 
Signed-off-by: Tommy <contact@tommytran.io>
 2024-07-05 21:33:48 -07:00
5 changed files with 4 additions and 6 deletions
Show Stats Expand all files Collapse all files

1
debian-gnome/debian-gnome.sh
View File

@ -28,7 +28,6 @@ sudo systemctl mask debug-shell.service
umask 077 umask 077
sudo sed -i 's/^UMASK.*/UMASK 077/g' /etc/login.defs sudo sed -i 's/^UMASK.*/UMASK 077/g' /etc/login.defs
sudo sed -i 's/^HOME_MODE/#HOME_MODE/g' /etc/login.defs sudo sed -i 's/^HOME_MODE/#HOME_MODE/g' /etc/login.defs
sudo sed -i 's/^USERGROUPS_ENAB.*/USERGROUPS_ENAB no/g' /etc/login.defs
sudo sed -i 's/umask 022/umask 077/g' /etc/bashrc sudo sed -i 's/umask 022/umask 077/g' /etc/bashrc
# Make home directory private # Make home directory private

4
fedora-gnome/fedora-gnome.sh
View File

@ -28,7 +28,6 @@ sudo systemctl mask kdump.service
umask 077 umask 077
sudo sed -i 's/^UMASK.*/UMASK 077/g' /etc/login.defs sudo sed -i 's/^UMASK.*/UMASK 077/g' /etc/login.defs
sudo sed -i 's/^HOME_MODE/#HOME_MODE/g' /etc/login.defs sudo sed -i 's/^HOME_MODE/#HOME_MODE/g' /etc/login.defs
sudo sed -i 's/^USERGROUPS_ENAB.*/USERGROUPS_ENAB no/g' /etc/login.defs
sudo sed -i 's/umask 022/umask 077/g' /etc/bashrc sudo sed -i 's/umask 022/umask 077/g' /etc/bashrc
# Make home directory private # Make home directory private
@ -92,6 +91,9 @@ echo 'XDG_CURRENT_DESKTOP=GNOME' | sudo tee -a /etc/environment
# Mark packages as manualy installed to avoid removal # Mark packages as manualy installed to avoid removal
sudo dnf mark install flatpak gnome-menus qubes-menus sudo dnf mark install flatpak gnome-menus qubes-menus
# Remove unwanted groups
sudo dnf -y group remove 'Container Management' 'Desktop accessibility' 'Firefox Web Browser' 'Guest Desktop Agents' 'LibreOffice' 'Printing Support'
# Remove unnecessary stuff from the Qubes template # Remove unnecessary stuff from the Qubes template
sudo dnf -y remove gnome-software httpd keepassxc thunderbird sudo dnf -y remove gnome-software httpd keepassxc thunderbird

1
fedora-minimal/fedora-minimal.sh
View File

@ -28,7 +28,6 @@ systemctl mask kdump.service
umask 077 umask 077
sudo sed -i 's/^UMASK.*/UMASK 077/g' /etc/login.defs sudo sed -i 's/^UMASK.*/UMASK 077/g' /etc/login.defs
sudo sed -i 's/^HOME_MODE/#HOME_MODE/g' /etc/login.defs sudo sed -i 's/^HOME_MODE/#HOME_MODE/g' /etc/login.defs
sudo sed -i 's/^USERGROUPS_ENAB.*/USERGROUPS_ENAB no/g' /etc/login.defs
sudo sed -i 's/umask 022/umask 077/g' /etc/bashrc sudo sed -i 's/umask 022/umask 077/g' /etc/bashrc
# Make home directory private # Make home directory private

1
whonix/whonix-gw.sh
View File

@ -25,7 +25,6 @@ unpriv(){
umask 077 umask 077
sudo sed -i 's/^UMASK.*/UMASK 077/g' /etc/login.defs sudo sed -i 's/^UMASK.*/UMASK 077/g' /etc/login.defs
sudo sed -i 's/^HOME_MODE/#HOME_MODE/g' /etc/login.defs sudo sed -i 's/^HOME_MODE/#HOME_MODE/g' /etc/login.defs
sudo sed -i 's/^USERGROUPS_ENAB.*/USERGROUPS_ENAB no/g' /etc/login.defs
sudo sed -i 's/umask 022/umask 077/g' /etc/bashrc sudo sed -i 's/umask 022/umask 077/g' /etc/bashrc
# Make home directory private # Make home directory private

1
whonix/whonix-ws.sh
View File

@ -25,7 +25,6 @@ unpriv(){
umask 077 umask 077
sudo sed -i 's/^UMASK.*/UMASK 077/g' /etc/login.defs sudo sed -i 's/^UMASK.*/UMASK 077/g' /etc/login.defs
sudo sed -i 's/^HOME_MODE/#HOME_MODE/g' /etc/login.defs sudo sed -i 's/^HOME_MODE/#HOME_MODE/g' /etc/login.defs
sudo sed -i 's/^USERGROUPS_ENAB.*/USERGROUPS_ENAB no/g' /etc/login.defs
sudo sed -i 's/umask 022/umask 077/g' /etc/bashrc sudo sed -i 's/umask 022/umask 077/g' /etc/bashrc
# Make home directory private # Make home directory private