From b3637c14c42ffd275b4f10aa63c8282280d9b545 Mon Sep 17 00:00:00 2001 From: mustard Date: Mon, 7 Oct 2024 23:02:10 +0200 Subject: [PATCH] Fixed brace links and usb drive kernel module --- amogus | 3 +++ fedora-40.sh | 15 +++++++++------ 2 files changed, 12 insertions(+), 6 deletions(-) diff --git a/amogus b/amogus index cfa065e..39f8ac9 100644 --- a/amogus +++ b/amogus @@ -15,3 +15,6 @@ session required pam_limits.so -session optional pam_systemd.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so + + +# install hfsplus /bin/false diff --git a/fedora-40.sh b/fedora-40.sh index 1b0d985..f4f6a6d 100644 --- a/fedora-40.sh +++ b/fedora-40.sh @@ -43,7 +43,10 @@ sudo chmod 644 /etc/ssh/ssh_config.d/10-custom.conf # Security kernel settings dl https://raw.githubusercontent.com/secureblue/secureblue/live/files/system/etc/modprobe.d/blacklist.conf /etc/modprobe.d/workstation-blacklist.conf + +sudo sed -i 's/^install hfsplus \/bin\/false/# install hfsplus \/bin\/false/' /etc/modprobe.d/workstation-blacklist.conf sudo chmod 644 /etc/modprobe.d/workstation-blacklist.conf + dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/sysctl.d/99-workstation.conf /etc/sysctl.d/99-workstation.conf sudo chmod 644 /etc/sysctl.d/99-workstation.conf # Dracut doesn't seem to work - need to investigate @@ -51,7 +54,7 @@ sudo chmod 644 /etc/sysctl.d/99-workstation.conf sudo sysctl -p # Disable coredump -dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/security/limits.d/30-disable-coredump.conf /etc/security/limits.d/30-disable-coredump.conf +dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/secur ity/limits.d/30-disable-coredump.conf /etc/security/limits.d/30-disable-coredump.conf sudo chmod 644 /etc/security/limits.d/30-disable-coredump.conf sudo mkdir -p /etc/systemd/coredump.conf.d sudo chmod 755 /etc/systemd/coredump.conf.d @@ -62,11 +65,11 @@ sudo chmod 644 /etc/systemd/coredump.conf.d/disable.conf umask 022 mkdir -p /etc/dconf/db/local.d/locks -#dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/locks/automount-disable /etc/dconf/db/local.d/locks/automount-disable +dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/locks/automount-disable /etc/dconf/db/local.d/locks/automount-disable dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/locks/privacy /etc/dconf/db/local.d/locks/privacy dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/adw-gtk3-dark /etc/dconf/db/local.d/adw-gtk3-dark -#dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/automount-disable /etc/dconf/db/local.d/automount-disable +dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/automount-disable /etc/dconf/db/local.d/automount-disable dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/prefer-dark /etc/dconf/db/local.d/prefer-dark dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/privacy /etc/dconf/db/local.d/privacy @@ -105,7 +108,7 @@ sudo dnf -y remove gnome-software httpd keepassxc thunderbird sudo dnf -y remove fedora-bookmarks fedora-chromium-config # Remove Network + hardware tools packages -sudo dnf -y remove avahi cifs* '*cups' dmidecode dnsmasq geolite2* mtr net-snmp-libs net-tools nfs-utils nmap-ncat nmap-ncat opensc openssh-server rsync rygel sgpio tcpdump teamd traceroute usb_modeswitch +sudo dnf -y remove avahi cifs* '*cups' dmidecode dnsmasq geolite2* mtr net-snmp-libs net-tools nfs-utils nmap-ncat nmap-ncat opensc openssh-server rsync rygel sgpio tcpdump teamd traceroute usb_modeswitch # Remove support for some languages and spelling sudo dnf -y remove '*anthy*' '*hangul*' ibus-typing-booster '*m17n*' '*pinyin*' '*speech*' texlive-libs words '*zhuyin*' @@ -156,8 +159,8 @@ sudo dnf install -y android-tools mediawriter gnome-disk-utility # Install brace firefox (arkenfox) config dl https://raw.githubusercontent.com/divestedcg/Brace/refs/heads/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-arkenfox.js /usr/lib64/firefox/browser/defaults/preferences/userjs-arkenfox.js -dl https://github.com/divestedcg/Brace/blob/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-brace.js /usr/lib64/firefox/browser/defaults/preferences/userjs-brace.js -dl https://github.com/divestedcg/Brace/blob/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-brace-perf.js /usr/lib64/firefox/browser/defaults/preferences/userjs-brace-perf.js +dl https://raw.githubusercontent.com/divestedcg/Brace/refs/heads/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-brace.js /usr/lib64/firefox/browser/defaults/preferences/userjs-brace.js +dl https://raw.githubusercontent.com/divestedcg/Brace/refs/heads/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-brace-perf.js /usr/lib64/firefox/browser/defaults/preferences/userjs-brace-perf.js dl https://raw.githubusercontent.com/divestedcg/Brace/refs/heads/master/brace/usr/lib/firefox/distribution/policies.json /usr/lib64/firefox/distribution/policies.json # sudo prompt in dom0, see https://forum.qubes-os.org/t/replacing-passwordless-root-with-a-dom0-prompt/19074/21