diff options
| -rw-r--r-- | all | 3 | ||||
| -rwxr-xr-x | etc.bash | 6 | ||||
| -rw-r--r-- | etc/pam.d/greetd | 9 |
3 files changed, 18 insertions, 0 deletions
@@ -44,6 +44,7 @@ python-systemd reflector ripgrep rsync +rtkit shotwell smartmontools snap-pac @@ -61,3 +62,5 @@ typst-lsp-bin typstfmt unzip usbutils +wireless-regdb +xorg-xrdb @@ -6,6 +6,7 @@ sudo cp -v ./etc/kernel/cmdline /etc/kernel/ sudo cp -v ./etc/modprobe.d/blacklist-security.conf /etc/modprobe.d/ sudo cp -v ./etc/pam.d/system-local-login /etc/pam.d/ sudo cp -v ./etc/pam.d/system-login /etc/pam.d/ +sudo cp -v ./etc/pam.d/greetd /etc/pam.d/ sudo cp -v ./etc/login.defs /etc/ sudo cp -v ./etc/updatedb.conf /etc/ sudo cp -v ./etc/sudoers.d/00-hardening /etc/sudoers.d/ @@ -44,3 +45,8 @@ sudo cp -v ./etc/systemd/system/fail2ban.service.d/override.conf /etc/systemd/sy echo "==> Applying cups.service hardening..." sudo cp -v ./etc/systemd/system/cups.service.d/override.conf /etc/systemd/system/cups.service.d/ + +# cups +sudo mkdir -p /var/log/cups +sudo chown -R root:lp /var/log/cups +sudo chmod 755 /var/log/cups diff --git a/etc/pam.d/greetd b/etc/pam.d/greetd new file mode 100644 index 0000000..148de0b --- /dev/null +++ b/etc/pam.d/greetd @@ -0,0 +1,9 @@ +#%PAM-1.0 + +auth required pam_securetty.so +auth requisite pam_nologin.so +auth include system-local-login +auth optional pam_gnome_keyring.so +account include system-local-login +session include system-local-login +session optional pam_gnome_keyring.so auto_start |