Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-05-07 23:54:58 -04:00
Code Issues Projects Releases Packages Wiki Activity

add usr/bin/hardening-enable

Browse source
This commit is contained in:
Patrick Schleizer 2019-12-08 02:27:09 -05:00
parent 19cc6d7555
commit 1dbca1ea2d
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
4 changed files with 48 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

25
usr/bin/hardening-enable Executable file
View file

@ -0,0 +1,25 @@
#!/bin/bash
## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
## See the file COPYING for copying conditions.
set -x
set -e
systemctl enable hide-hardware-info.service
touch /etc/noexec
mkdir -p /etc/sysctl.d
echo "\
## This is an automatically generated file.
## This file was automatically generated by:
## $0
## Edits may be lost!
## https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG#Configuration
lkrg.ci_panic=1
lkrg.umh_lock=1" > /etc/sysctl.d/40-security-misc-autogenerated.conf
pam-auth-update --enable console-lockdown-security-misc