Qubes-VM-hardening/rc.local

#!/bin/sh -e
# Debian: /etc/rc.local

##  Protect sh and bash init scripts         ##
##  to prevent privilege escalation attacks  ##
chfiles="/home/user/.bashrc /home/user/.bash_profile /home/user/.bash_login /home/user/.bash_logout /home/user/.profile"
touch $chfiles || true
chown -f root:root $chfiles || true
chattr -f +i $chfiles || true


# end of script
exit 0
Create rc.local 2017-03-14 21:58:09 -04:00			`#!/bin/sh -e`
			`# Debian: /etc/rc.local`

			`## Protect sh and bash init scripts ##`
			`## to prevent privilege escalation attacks ##`
			`chfiles="/home/user/.bashrc /home/user/.bash_profile /home/user/.bash_login /home/user/.bash_logout /home/user/.profile"`
			`touch $chfiles \|\| true`
Prevent abort 2017-03-14 22:11:29 -04:00			`chown -f root:root $chfiles \|\| true`
			`chattr -f +i $chfiles \|\| true`
Update rc.local 2017-03-15 01:39:36 -04:00

			`# end of script`
			`exit 0`