Remove sudo and the like from Whonix Workstation script

Signed-off-by: Ganwtrs <morga.nwinters-99@aliasvault.net>
This commit is contained in:
Ganwtrs 2025-12-08 18:11:23 -08:00 committed by GitHub
parent 9a2fe57124
commit 5e0bf3c71b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -19,11 +19,11 @@
set -eu set -eu
unpriv(){ unpriv(){
sudo -u nobody "${@}" -u nobody "${@}"
} }
download() { download() {
unpriv curl -s --proxy http://127.0.0.1:8082 "${1}" | sudo tee "${2}" > /dev/null unpriv curl -s --proxy http://127.0.0.1:8082 "${1}" | tee "${2}" > /dev/null
} }
# Setting umask to 077 # Setting umask to 077
@ -31,7 +31,7 @@ download() {
umask 077 umask 077
sed -i 's/^UMASK.*/UMASK 077/g' /etc/login.defs sed -i 's/^UMASK.*/UMASK 077/g' /etc/login.defs
sed -i 's/^HOME_MODE/#HOME_MODE/g' /etc/login.defs sed -i 's/^HOME_MODE/#HOME_MODE/g' /etc/login.defs
echo 'umask 077' | sudo tee -a /etc/bash.bashrc echo 'umask 077' | tee -a /etc/bash.bashrc
# Make home directory private # Make home directory private
chmod 700 /home/* chmod 700 /home/*
@ -43,6 +43,9 @@ chmod 644 /etc/apt/apt.conf.d/99sane-upgrades
# Install packages # Install packages
apt-get install --no-install-recommends arc-theme pipewire-pulse qt5-style-plugins -y apt-get install --no-install-recommends arc-theme pipewire-pulse qt5-style-plugins -y
# Uninstall packages
apt-get purge -y sudo su runuser
# Restrict /proc and access # Restrict /proc and access
systemctl enable --now proc-hidepid.service systemctl enable --now proc-hidepid.service
@ -57,8 +60,8 @@ download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc
# Theming # Theming
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/environment /etc/environment download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/environment /etc/environment
sudo mkdir -p /etc/gtk-3.0 mkdir -p /etc/gtk-3.0
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/gtk-3.0/settings.ini /etc/gtk-3.0/settings.ini download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/gtk-3.0/settings.ini /etc/gtk-3.0/settings.ini
sudo mkdir -p /etc/gtk-4.0 mkdir -p /etc/gtk-4.0
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/gtk-4.0/settings.ini /etc/gtk-4.0/settings.ini download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc/gtk-4.0/settings.ini /etc/gtk-4.0/settings.ini