diff options
| -rw-r--r-- | etc/mkinitcpio.d/linux-hardened.preset | 19 | ||||
| -rw-r--r-- | etc/mkinitcpio.d/linux-lts.preset | 19 | ||||
| -rw-r--r-- | etc/mkinitcpio.d/linux.preset | 19 | ||||
| -rwxr-xr-x | setup.sh | 5 |
4 files changed, 0 insertions, 62 deletions
diff --git a/etc/mkinitcpio.d/linux-hardened.preset b/etc/mkinitcpio.d/linux-hardened.preset deleted file mode 100644 index 9574be5..0000000 --- a/etc/mkinitcpio.d/linux-hardened.preset +++ /dev/null @@ -1,19 +0,0 @@ -# mkinitcpio preset file for the 'linux-hardened' package - -#ALL_config="/etc/mkinitcpio.conf" -ALL_kver="/boot/vmlinuz-linux-hardened" -ALL_microcode=(/boot/intel-ucode.img) -#ALL_kerneldest="/boot/vmlinuz-linux-hardened" - -PRESETS=('default') -#PRESETS=('default' 'fallback') - -#default_config="/etc/mkinitcpio.conf" -# default_image="/boot/initramfs-linux-hardened.img" -default_uki="/boot/EFI/Linux/arch-linux-hardened.efi" -default_options="--splash /usr/share/systemd/bootctl/splash-arch.bmp" - -#fallback_config="/etc/mkinitcpio.conf" -#fallback_image="/boot/initramfs-linux-hardened-fallback.img" -fallback_uki="/boot/EFI/Linux/arch-linux-hardened-fallback.efi" -#fallback_options="-S autodetect" diff --git a/etc/mkinitcpio.d/linux-lts.preset b/etc/mkinitcpio.d/linux-lts.preset deleted file mode 100644 index f48eb34..0000000 --- a/etc/mkinitcpio.d/linux-lts.preset +++ /dev/null @@ -1,19 +0,0 @@ -# mkinitcpio preset file for the 'linux-lts' package - -#ALL_config="/etc/mkinitcpio.conf" -ALL_kver="/boot/vmlinuz-linux-lts" -ALL_microcode=(/boot/intel-ucode.img) -#ALL_kerneldest="/boot/vmlinuz-linux-lts" - -PRESETS=('default') -#PRESETS=('default' 'fallback') - -#default_config="/etc/mkinitcpio.conf" -#default_image="/boot/initramfs-linux-lts.img" -default_uki="/boot/EFI/Linux/arch-linux-lts.efi" -default_options="--splash /usr/share/systemd/bootctl/splash-arch.bmp" - -#fallback_config="/etc/mkinitcpio.conf" -##fallback_image="/boot/initramfs-linux-lts-fallback.img" -fallback_uki="/boot/EFI/Linux/arch-linux-lts-fallback.efi" -#fallback_options="-S autodetect" diff --git a/etc/mkinitcpio.d/linux.preset b/etc/mkinitcpio.d/linux.preset deleted file mode 100644 index abecd7b..0000000 --- a/etc/mkinitcpio.d/linux.preset +++ /dev/null @@ -1,19 +0,0 @@ -# mkinitcpio preset file for the 'linux' package - -#ALL_config="/etc/mkinitcpio.conf" -ALL_kver="/boot/vmlinuz-linux" -ALL_microcode=(/boot/intel-ucode.img) -#ALL_kerneldest="/boot/vmlinuz-linux" - -PRESETS=('default') -#PRESETS=('default' 'fallback') - -#default_config="/etc/mkinitcpio.conf" -#default_image="/boot/initramfs-linux.img" -default_uki="/boot/EFI/Linux/arch-linux.efi" -default_options="--splash /usr/share/systemd/bootctl/splash-arch.bmp" - -#fallback_config="/etc/mkinitcpio.conf" -##fallback_image="/boot/initramfs-linux-fallback.img" -fallback_uki="/boot/EFI/Linux/arch-linux-fallback.efi" -#fallback_options="-S autodetect" @@ -148,11 +148,6 @@ sudo systemctl enable --now ufw # Configure Fail2ban sudo cp -v ./etc/fail2ban/jail.d/sshd.conf /etc/fail2ban/jail.d/ -# Mkinitcpio presets -sudo cp -v ./etc/mkinitcpio.d/linux-hardened.preset /etc/mkinitcpio.d/ 2>/dev/null || true -sudo cp -v ./etc/mkinitcpio.d/linux-lts.preset /etc/mkinitcpio.d/ 2>/dev/null || true -sudo cp -v ./etc/mkinitcpio.d/linux.preset /etc/mkinitcpio.d/ 2>/dev/null || true - # Systemd Service Hardening Drop-ins log_info "Applying systemd service drop-in hardening overrides..." for svc in sshd fail2ban cups; do |