mustard/QubesOS-Scripts
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fixed brace links and usb drive kernel module

Browse source
This commit is contained in:
mustard 2024-10-07 23:02:10 +02:00
parent be31f8cfca
commit b3637c14c4
2 changed files with 12 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
amogus
View file

@ -15,3 +15,6 @@ session required pam_limits.so
-session optional pam_systemd.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session required pam_unix.so
# install hfsplus /bin/false

15
fedora-40.sh
View file

@ -43,7 +43,10 @@ sudo chmod 644 /etc/ssh/ssh_config.d/10-custom.conf
# Security kernel settings
dl https://raw.githubusercontent.com/secureblue/secureblue/live/files/system/etc/modprobe.d/blacklist.conf /etc/modprobe.d/workstation-blacklist.conf
sudo sed -i 's/^install hfsplus \/bin\/false/# install hfsplus \/bin\/false/' /etc/modprobe.d/workstation-blacklist.conf
sudo chmod 644 /etc/modprobe.d/workstation-blacklist.conf
dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/sysctl.d/99-workstation.conf /etc/sysctl.d/99-workstation.conf
sudo chmod 644 /etc/sysctl.d/99-workstation.conf
# Dracut doesn't seem to work - need to investigate
@ -51,7 +54,7 @@ sudo chmod 644 /etc/sysctl.d/99-workstation.conf
sudo sysctl -p
# Disable coredump
dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/security/limits.d/30-disable-coredump.conf /etc/security/limits.d/30-disable-coredump.conf
dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/secur ity/limits.d/30-disable-coredump.conf /etc/security/limits.d/30-disable-coredump.conf
sudo chmod 644 /etc/security/limits.d/30-disable-coredump.conf
sudo mkdir -p /etc/systemd/coredump.conf.d
sudo chmod 755 /etc/systemd/coredump.conf.d
@ -62,11 +65,11 @@ sudo chmod 644 /etc/systemd/coredump.conf.d/disable.conf
umask 022
mkdir -p /etc/dconf/db/local.d/locks
#dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/locks/automount-disable /etc/dconf/db/local.d/locks/automount-disable
dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/locks/automount-disable /etc/dconf/db/local.d/locks/automount-disable
dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/locks/privacy /etc/dconf/db/local.d/locks/privacy
dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/adw-gtk3-dark /etc/dconf/db/local.d/adw-gtk3-dark
#dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/automount-disable /etc/dconf/db/local.d/automount-disable
dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/automount-disable /etc/dconf/db/local.d/automount-disable
dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/prefer-dark /etc/dconf/db/local.d/prefer-dark
dl https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/dconf/db/local.d/privacy /etc/dconf/db/local.d/privacy
@ -105,7 +108,7 @@ sudo dnf -y remove gnome-software httpd keepassxc thunderbird
sudo dnf -y remove fedora-bookmarks fedora-chromium-config
# Remove Network + hardware tools packages
sudo dnf -y remove avahi cifs* '*cups' dmidecode dnsmasq geolite2* mtr net-snmp-libs net-tools nfs-utils nmap-ncat nmap-ncat opensc openssh-server rsync rygel sgpio tcpdump teamd traceroute usb_modeswitch
sudo dnf -y remove avahi cifs* '*cups' dmidecode dnsmasq geolite2* mtr net-snmp-libs net-tools nfs-utils nmap-ncat nmap-ncat opensc openssh-server rsync rygel sgpio tcpdump teamd traceroute usb_modeswitch
# Remove support for some languages and spelling
sudo dnf -y remove '*anthy*' '*hangul*' ibus-typing-booster '*m17n*' '*pinyin*' '*speech*' texlive-libs words '*zhuyin*'
@ -156,8 +159,8 @@ sudo dnf install -y android-tools mediawriter gnome-disk-utility
# Install brace firefox (arkenfox) config
dl https://raw.githubusercontent.com/divestedcg/Brace/refs/heads/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-arkenfox.js /usr/lib64/firefox/browser/defaults/preferences/userjs-arkenfox.js
dl https://github.com/divestedcg/Brace/blob/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-brace.js /usr/lib64/firefox/browser/defaults/preferences/userjs-brace.js
dl https://github.com/divestedcg/Brace/blob/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-brace-perf.js /usr/lib64/firefox/browser/defaults/preferences/userjs-brace-perf.js
dl https://raw.githubusercontent.com/divestedcg/Brace/refs/heads/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-brace.js /usr/lib64/firefox/browser/defaults/preferences/userjs-brace.js
dl https://raw.githubusercontent.com/divestedcg/Brace/refs/heads/master/brace/usr/lib/firefox/browser/defaults/preferences/userjs-brace-perf.js /usr/lib64/firefox/browser/defaults/preferences/userjs-brace-perf.js
dl https://raw.githubusercontent.com/divestedcg/Brace/refs/heads/master/brace/usr/lib/firefox/distribution/policies.json /usr/lib64/firefox/distribution/policies.json
# sudo prompt in dom0, see https://forum.qubes-os.org/t/replacing-passwordless-root-with-a-dom0-prompt/19074/21