mirror of
https://github.com/tasket/Qubes-VM-hardening.git
synced 2024-12-23 22:59:34 -05:00
10 lines
344 B
Bash
10 lines
344 B
Bash
#!/bin/sh -e
|
|
# Debian: /etc/rc.local
|
|
|
|
## Protect sh and bash init scripts ##
|
|
## to prevent privilege escalation attacks ##
|
|
chfiles="/home/user/.bashrc /home/user/.bash_profile /home/user/.bash_login /home/user/.bash_logout /home/user/.profile"
|
|
touch $chfiles || true
|
|
chown -f root:root $chfiles || true
|
|
chattr -f +i $chfiles || true
|