Qubes-VM-hardening/rc.local

#!/bin/sh -e
# Debian: /etc/rc.local

 #########################################################
##  Protect sh, bash, X and desktop init scripts         ##
##  to prevent privilege escalation attacks              ##
##  and malware persistence - for Qubes Linux templates  ##
chfiles=".bashrc .bash_profile .bash_login .bash_logout .profile \
.xprofile .xinitrc .xserverrc .xsession"
chdirs=".config/autostart .config/plasma-workspace/env .config/plasma-workspace/shutdown \
.config/autostart-scripts"

cd /home/user
mkdir -p $chdirs ||true
touch $chfiles || true
chattr -R -f +i $chfiles $chdirs || true
#touch /home/user/FIXED || true

# end of script
exit 0