From b57ec8c0e56015553c468e7282905fa8582632ba Mon Sep 17 00:00:00 2001 From: Denis Chevalier Date: Thu, 6 Aug 2026 13:48:44 +0200 Subject: move sysctl, mkinitcpio and systemctl commands to sysctl.bash --- etc.bash | 18 ------------------ 1 file changed, 18 deletions(-) (limited to 'etc.bash') diff --git a/etc.bash b/etc.bash index 9e5a253..1477d17 100755 --- a/etc.bash +++ b/etc.bash @@ -11,7 +11,6 @@ sudo cp -v ./etc/updatedb.conf /etc/ sudo cp -v ./etc/sudoers.d/00-hardening /etc/sudoers.d/ sudo cp -v ./etc/systemd/coredump.conf /etc/systemd/ sudo cp -v ./etc/sysctl.d/99-security.conf /etc/sysctl.d/ -sudo sysctl --system grep tmpfs /etc/fstab || sudo cat ./etc/fstab >> /etc/fstab @@ -27,14 +26,9 @@ sudo systemctl enable --now ufw # fail2ban sudo cp -v ./etc/fail2ban/jail.d/sshd.conf /etc/fail2ban/jail.d/ -sudo systemctl enable --now fail2ban - -# fs trim -sudo systemctl enable --now fstrim.timer # linux-hardened sudo cp -v ./etc/mkinitcpio.d/linux-hardened.preset /etc/mkinitcpio.d -sudo mkinitcpio -P # harden systemd services echo "==> Creating drop-in override directories..." @@ -50,15 +44,3 @@ sudo cp -v ./etc/systemd/system/fail2ban.service.d/override.conf /etc/systemd/sy echo "==> Applying cups.service hardening..." sudo cp -v ./etc/systemd/system/cups.service.d/override.conf /etc/systemd/system/cups.service.d/ - -sudo systemctl daemon-reload - -echo "==> Restarting services..." -for svc in sshd fail2ban cups; do - if systemctl is-active --quiet "$svc"; then - echo " Restarting active service: $svc" - sudo systemctl restart "$svc" - else - echo " Skipping restart for inactive service: $svc" - fi -done -- cgit