security-misc/usr/bin/hardening-enable
2019-12-08 02:27:09 -05:00

26 lines
583 B
Bash
Executable File

#!/bin/bash
## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
## See the file COPYING for copying conditions.
set -x
set -e
systemctl enable hide-hardware-info.service
touch /etc/noexec
mkdir -p /etc/sysctl.d
echo "\
## This is an automatically generated file.
## This file was automatically generated by:
## $0
## Edits may be lost!
## https://www.whonix.org/wiki/Linux_Kernel_Runtime_Guard_LKRG#Configuration
lkrg.ci_panic=1
lkrg.umh_lock=1" > /etc/sysctl.d/40-security-misc-autogenerated.conf
pam-auth-update --enable console-lockdown-security-misc