2022-10-01 22:59:41 +00:00
|
|
|
#!/bin/sh
|
|
|
|
|
#
|
|
|
|
|
#install required programs
|
2023-03-21 04:02:09 +00:00
|
|
|
sudo pacman -S apparmor
|
2022-10-01 22:59:41 +00:00
|
|
|
|
|
|
|
|
#enable apparmor service
|
|
|
|
|
sudo systemctl enable apparmor.service
|
|
|
|
|
sudo systemctl start apparmor.service
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
echo "============================================"
|
|
|
|
|
echo " Applying Hardening Configuration"
|
|
|
|
|
echo "============================================"
|
|
|
|
|
echo ""
|
|
|
|
|
echo "append this to your kernel params file:"
|
|
|
|
|
echo " lsm=landlock,lockdown,yama,integrity,apparmor,bpf"
|
|
|
|
|
echo " systemd-boot: /boot/loader/entries/*.conf, append to end of line beginning with \"options\""
|
|
|
|
|
echo " grub: /etc/default/grub"
|
|
|
|
|
echo ""
|
|
|
|
|
echo " run this script again after rebooting to ensure all settings are applied correctly."
|
|
|
|
|
echo " press enter to continue."
|
|
|
|
|
read input
|
