my-scripts/installers/arch/scripts/harden.sh

23 lines
729 B
Bash
Raw Normal View History

2022-10-01 22:59:41 +00:00
#!/bin/sh
#
#install required programs
sudo pacman -S apparmor
2022-10-01 22:59:41 +00:00
#enable apparmor service
sudo systemctl enable apparmor.service
sudo systemctl start apparmor.service
echo "============================================"
echo " Applying Hardening Configuration"
echo "============================================"
echo ""
echo "append this to your kernel params file:"
echo " lsm=landlock,lockdown,yama,integrity,apparmor,bpf"
echo " systemd-boot: /boot/loader/entries/*.conf, append to end of line beginning with \"options\""
echo " grub: /etc/default/grub"
echo ""
echo " run this script again after rebooting to ensure all settings are applied correctly."
echo " press enter to continue."
read input