mirror of
https://github.com/tasket/Qubes-VM-hardening.git
synced 2024-12-18 04:24:19 -05:00
10 lines
328 B
Plaintext
10 lines
328 B
Plaintext
|
#!/bin/sh -e
|
||
|
|
# Debian: /etc/rc.local
|
||
|
|
|
||
|
|
## Protect sh and bash init scripts ##
|
||
|
|
## to prevent privilege escalation attacks ##
|
||
|
|
chfiles="/home/user/.bashrc /home/user/.bash_profile /home/user/.bash_login /home/user/.bash_logout /home/user/.profile"
|
||
|
|
touch $chfiles || true
|
||
|
|
chown -f root:root $chfiles
|
||
|
|
chattr -f +i $chfiles
|