Skip to content

Commit

Permalink
removed gnome software service
Browse files Browse the repository at this point in the history
  • Loading branch information
solidc0re authored Sep 10, 2023
1 parent 83b5d6b commit 0a294bd
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 5 deletions.
9 changes: 7 additions & 2 deletions solidcore-install.sh
Original file line number Diff line number Diff line change
Expand Up @@ -198,7 +198,7 @@ long_msg "
>
> 1. Kernel and physical hardening to reduce attack surface
> 2. Drop all incoming connections, prevent IP spoofing and protect against various forms of attack
> 3. Hide sensitive kernel and file information from potential attackers
> 3. More secure DNS lookups and added blocklists
> 4. Stengthen password policies
> 5. Enable automatic updates for rpm-ostree and flatpaks"

Expand All @@ -208,7 +208,7 @@ long_msg "
>
> This script is open source (GPLv3) and has been tested on Silverblue 38 by the author.
>
> Hardening MAY reduce your experience of your device and is not suited for everyone."
> Hardening MAY reduce your experience of your device and is not suitable for everyone."

sleep 2
space_2
Expand Down Expand Up @@ -322,6 +322,7 @@ files_to_backup=(
"/etc/sysconfig/chronyd"
"/etc/systemd/coredump.conf"
"/etc/systemd/system/rpm-ostreed-automatic.timer.d/override.conf"
"/etc/xdg/autostart/org.gnome.Software.desktop"
"/var/lib/dbus/machine-id"
)

Expand All @@ -335,6 +336,10 @@ for source_file in "${files_to_backup[@]}"; do
cp "$source_file" "$backup_file"
fi
done

# Remove Gnome Software update service
rm -f /etc/xdg/autostart/org.gnome.Software.desktop

conf_msg "All backups created"
fi # End of -server flag if statement

Expand Down
7 changes: 4 additions & 3 deletions solidcore-uninstall.sh
Original file line number Diff line number Diff line change
Expand Up @@ -191,6 +191,7 @@ if [[ "$uninstall_response" =~ ^[Yy]$ ]]; then
"/etc/sysconfig/chronyd"
"/etc/systemd/coredump.conf"
"/etc/systemd/system/rpm-ostreed-automatic.timer.d/override.conf"
"/etc/xdg/autostart/org.gnome.Software.desktop"
"/var/lib/dbus/machine-id"
)

Expand All @@ -208,7 +209,7 @@ if [[ "$uninstall_response" =~ ^[Yy]$ ]]; then
conf_msg "Machine ID restored"
else
# Restore the backup file
cp "$backup_file" "$source_file"
cp -f "$backup_file" "$source_file"
conf_msg "Backup restored for: $source_file"
# Remove the backup file
rm "$backup_file"
Expand Down Expand Up @@ -556,8 +557,8 @@ for service in "${services[@]}"; do
done
systemctl daemon-reload
# Re-insert Firewire, USB & webcam modules
insmod dv1394 firewire-core firewire_core firewire-ohci firewire_ohci firewire-sbp2 firewire_sbp2 ohci1394 sbp2 raw1394 video1394 usbcore usb_storage uvcvideo
# Re-insert bluetooth, Firewire, USB & webcam modules
modprobe bluetooth btusb dv1394 firewire-core firewire_core firewire-ohci firewire_ohci firewire-sbp2 firewire_sbp2 ohci1394 sbp2 raw1394 video1394 usbcore usb_storage uvcvideo
# Unblock Thunderbolt
disabled_domains=$(boltctl list | awk '/authorized: no/ {print $1}')
Expand Down

0 comments on commit 0a294bd

Please sign in to comment.