mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-01-22 09:31:06 -05:00
26 lines
583 B
Plaintext
26 lines
583 B
Plaintext
|
#!/bin/bash
|
||
|
|
|
||
|
|
## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
|
||
|
|
## See the file COPYING for copying conditions.
|
||
|
|
|
||
|
|
set -x
|
||
|
|
set -e
|
||
|
|
|
||
|
|
systemctl enable hide-hardware-info.service
|
||
|
|
|
||
|
|
touch /etc/noexec
|
||
|
|
|
||
|
|
mkdir -p /etc/sysctl.d
|
||
|
|
|
||
|
|
echo "\
|
||
|
|
## This is an automatically generated file.
|
||
|
|
## This file was automatically generated by:
|
||
|
|
## $0
|
||
|
|
## Edits may be lost!
|
||
|
|
|
||
|
|
## https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG#Configuration
|
||
|
|
lkrg.ci_panic=1
|
||
|
|
lkrg.umh_lock=1" > /etc/sysctl.d/40-security-misc-autogenerated.conf
|
||
|
|
|
||
|
|
pam-auth-update --enable console-lockdown-security-misc
|