summaryrefslogtreecommitdiff
path: root/etc.bash
diff options
context:
space:
mode:
Diffstat (limited to 'etc.bash')
-rwxr-xr-xetc.bash27
1 files changed, 14 insertions, 13 deletions
diff --git a/etc.bash b/etc.bash
index 77fb690..87b67b8 100755
--- a/etc.bash
+++ b/etc.bash
@@ -1,18 +1,19 @@
#!/bin/bash
-sudo cp -rv etc/keyd/* /etc/keyd/
-sudo cp -v etc/pacman.conf /etc/
-sudo cp -v etc/kernel/cmdline /etc/kernel/
-sudo cp -v etc/modprobe.d/blacklist-security.conf /etc/modprobe.d/
-sudo cp -v etc/pam.d/system-local-login /etc/pam.d/
-sudo cp -v etc/pam.d/system-login /etc/pam.d/
-sudo cp -v etc/login.defs /etc/
-sudo cp -v etc/updatedb.conf /etc/
-sudo cp -v etc/systemd/coredump.conf /etc/systemd/
-sudo cp -v etc/sysctl.d/99-security.conf /etc/sysctl.d/
+sudo cp -rv ./etc/keyd/* /etc/keyd/
+sudo cp -v ./etc/pacman.conf /etc/
+sudo cp -v ./etc/kernel/cmdline /etc/kernel/
+sudo cp -v ./etc/modprobe.d/blacklist-security.conf /etc/modprobe.d/
+sudo cp -v ./etc/pam.d/system-local-login /etc/pam.d/
+sudo cp -v ./etc/pam.d/system-login /etc/pam.d/
+sudo cp -v ./etc/login.defs /etc/
+sudo cp -v ./etc/updatedb.conf /etc/
+sudo cp -v ./etc/sudoers.d/00-hardening /etc/sudoers.d/
+sudo cp -v ./etc/systemd/coredump.conf /etc/systemd/
+sudo cp -v ./etc/sysctl.d/99-security.conf /etc/sysctl.d/
sudo sysctl --system
-grep tmpfs /etc/fstab || sudo cat etc/fstab >> /etc/fstab
+grep tmpfs /etc/fstab || sudo cat ./etc/fstab >> /etc/fstab
# firewall
sudo ufw default deny incoming
@@ -25,5 +26,5 @@ sudo systemctl enable --now ufw
sudo systemctl enable --now fstrim.timer
# linux-hardened
-sudo cp -v etc/mkinitcpio.d/linux-hardened.preset /etc/mkinitcpio.d
-sudo mkinitcpio -p linux-hardened
+sudo cp -v ./etc/mkinitcpio.d/linux-hardened.preset /etc/mkinitcpio.d
+sudo mkinitcpio -P