2018-04-12 15:24:46 -04:00
|
|
|
#!/bin/bash
|
|
|
|
|
# From https://github.com/tasket/Qubes-VM-hardening
|
2019-07-13 05:39:42 -04:00
|
|
|
# installer version 0.8.4
|
2018-04-12 15:24:46 -04:00
|
|
|
|
2018-04-03 10:53:15 -04:00
|
|
|
set -e
|
2018-02-20 17:40:29 -05:00
|
|
|
[ `id -u` -eq 0 ] || exit
|
|
|
|
|
|
2018-03-29 07:35:34 -04:00
|
|
|
echo "Disabling the pre-release service (if present)..."
|
2018-04-03 10:53:15 -04:00
|
|
|
systemctl disable vm-sudo-protect.service || true
|
2018-03-29 07:22:22 -04:00
|
|
|
|
2018-04-03 10:53:15 -04:00
|
|
|
echo "Installing vm-boot-protect.service..."
|
2018-03-29 02:57:06 -04:00
|
|
|
cp vm-boot-protect.sh /usr/lib/qubes/init
|
|
|
|
|
chmod +x /usr/lib/qubes/init/vm-boot-protect.sh
|
|
|
|
|
cp vm-boot-protect.service /lib/systemd/system
|
2018-02-20 17:40:29 -05:00
|
|
|
systemctl daemon-reload
|
2018-03-29 02:57:06 -04:00
|
|
|
systemctl enable vm-boot-protect.service
|
2018-02-20 17:40:29 -05:00
|
|
|
|
2018-04-03 10:53:15 -04:00
|
|
|
echo "Adding defaults in /etc/default/vms..."
|
2019-01-29 23:09:53 -05:00
|
|
|
mkdir -p /etc/default/vms
|
2018-04-03 10:53:15 -04:00
|
|
|
# Careful... ownership & mode are not preserved here!
|
2018-04-14 11:18:55 -04:00
|
|
|
cp -riv default/vms/* /etc/default/vms
|
2018-04-03 10:53:15 -04:00
|
|
|
|
2018-04-12 15:24:46 -04:00
|
|
|
echo -e "\nvm-boot-protect installed!\n"
|
|
|
|
|
|
|
|
|
|
bash ./configure-sudo-prompt
|
|
|
|
|
exit 0
|
2018-02-20 17:40:29 -05:00
|
|
|
|
