From 1dd3dd9c62a208b5deb919e6e901cd5b7848fd45 Mon Sep 17 00:00:00 2001 From: Alex Date: Sun, 12 Mar 2023 23:25:00 -0500 Subject: [PATCH 1/3] remove wireplumber-docs --- installers/arch/ajh-base/PKGBUILD | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/installers/arch/ajh-base/PKGBUILD b/installers/arch/ajh-base/PKGBUILD index f0c2f9b..e037066 100644 --- a/installers/arch/ajh-base/PKGBUILD +++ b/installers/arch/ajh-base/PKGBUILD @@ -1,7 +1,7 @@ pkgname="ajh-base" pkgver="1.0.0" pkgver="1" -pkgrel="8" +pkgrel="9" pkgdesc="Install my config for Arch based systems." arch=("x86_64") @@ -13,7 +13,6 @@ depends=( "pipewire-jack" "gst-plugin-pipewire" "wireplumber" -"wireplumber-docs" "alsa-utils" "freetype2" "gst-libav" From 29aca47aa36ab302c4a395789208e46c7b223654 Mon Sep 17 00:00:00 2001 From: Alex Date: Mon, 20 Mar 2023 23:02:09 -0500 Subject: [PATCH 2/3] *remove allowing poweroff and reboot in doas.conf since it is not needed *add pass dir and gnupg dir to setup-dirs.sh script *remove some lines from harden.sh --- installers/arch/scripts/harden.sh | 14 +------------- installers/arch/scripts/opendoas.sh | 4 ++-- installers/arch/scripts/setup-dirs.sh | 16 ++++++++++------ 3 files changed, 13 insertions(+), 21 deletions(-) diff --git a/installers/arch/scripts/harden.sh b/installers/arch/scripts/harden.sh index 8ae287b..c14a87e 100755 --- a/installers/arch/scripts/harden.sh +++ b/installers/arch/scripts/harden.sh @@ -1,20 +1,12 @@ #!/bin/sh # #install required programs -sudo pacman -S apparmor firejail +sudo pacman -S apparmor #enable apparmor service sudo systemctl enable apparmor.service sudo systemctl start apparmor.service -#configure apparmor to use firejail and configure firejail to automatically run for supported programs -sudo apparmor_parser -r /etc/apparmor.d/firejail-default -sudo firecfg - -add user to /etc/firejail/firejail.users if it is not already in the file -if [ -z "$(grep "$USER" /etc/firejail/firejail.users)" ]; then - sudo sh -c "echo '$USER' >> /etc/firejail/firejail.users" -fi echo "============================================" echo " Applying Hardening Configuration" @@ -28,7 +20,3 @@ echo "" echo " run this script again after rebooting to ensure all settings are applied correctly." echo " press enter to continue." read input - -#add any firejail configuration here - #fix mpv not being able to open some files, allows mmpv to play videos in the ~/media dir -sudo sh -c 'echo "whitelist $HOME/media" >> /etc/firejail/whitelist-player-common.local' diff --git a/installers/arch/scripts/opendoas.sh b/installers/arch/scripts/opendoas.sh index d40e510..9d0c1ce 100755 --- a/installers/arch/scripts/opendoas.sh +++ b/installers/arch/scripts/opendoas.sh @@ -2,8 +2,8 @@ sudo pacman -S opendoas echo "permit persist $USER as root" > ~/.cache/doas.conf -echo "permit nopass :wheel as root cmd /sbin/poweroff" >> ~/.cache/doas.conf -echo "permit nopass :wheel as root cmd /sbin/reboot" >> ~/.cache/doas.conf +#echo "permit nopass :wheel as root cmd /sbin/poweroff" >> ~/.cache/doas.conf +#echo "permit nopass :wheel as root cmd /sbin/reboot" >> ~/.cache/doas.conf sudo cp ~/.cache/doas.conf /etc/doas.conf yay -S doas-sudo-shim diff --git a/installers/arch/scripts/setup-dirs.sh b/installers/arch/scripts/setup-dirs.sh index 0ce11e5..00d3580 100755 --- a/installers/arch/scripts/setup-dirs.sh +++ b/installers/arch/scripts/setup-dirs.sh @@ -1,12 +1,16 @@ #!/bin/sh -FILES_DIR="$HOME/.files/" +FILES_DIR="$HOME/.files" -ln -s "$HOME"/.files/dl "$HOME"/dl -ln -s "$HOME"/.files/docs "$HOME"/docs -ln -s "$HOME"/.files/media "$HOME"/media -ln -s "$HOME"/.files/.ssh "$HOME"/.ssh +#directories +ln -s "$FILES_DIR"/dl "$HOME"/dl +ln -s "$FILES_DIR"/docs "$HOME"/docs +ln -s "$FILES_DIR"/media "$HOME"/media +ln -s "$FILES_DIR"/.ssh "$HOME"/.ssh +ln -s "$FILES_DIR"/.local/share/password-store "$HOME"/.local/share/ +ln -s "$FILES_DIR"/.local/share/gnupg "$HOME"/.local/share/ -ln -s "$HOME"/.files/.gitconfig "$HOME"/.gitconfig +#files +ln -s "$FILES_DIR"/.gitconfig "$HOME"/.gitconfig mkdir -p ~/.var/app/ ln -s "$HOME"/.files/.var/app/io.gitlab.librewolf-community ~/.var/app/io.gitlab.librewolf-community From 3f9b3d4a28e300a0da88c3d02c08dd330276f8f5 Mon Sep 17 00:00:00 2001 From: Alex Date: Mon, 20 Mar 2023 23:09:09 -0500 Subject: [PATCH 3/3] add line to setup-dirs.sh --- installers/arch/scripts/setup-dirs.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/installers/arch/scripts/setup-dirs.sh b/installers/arch/scripts/setup-dirs.sh index 00d3580..7a7576d 100755 --- a/installers/arch/scripts/setup-dirs.sh +++ b/installers/arch/scripts/setup-dirs.sh @@ -8,6 +8,7 @@ ln -s "$FILES_DIR"/media "$HOME"/media ln -s "$FILES_DIR"/.ssh "$HOME"/.ssh ln -s "$FILES_DIR"/.local/share/password-store "$HOME"/.local/share/ ln -s "$FILES_DIR"/.local/share/gnupg "$HOME"/.local/share/ +ln -s "$FILES_DIR"/dbhome "$HOME"/ #files ln -s "$FILES_DIR"/.gitconfig "$HOME"/.gitconfig