Charles N Wyble
70bdba52da
- Update to ignore KNEL-Football specific build artifacts - Remove blanket config/ directory ignore - Add build directories and temporary files - Add ISO artifacts and checksum patterns - Add security exclusions for keys and secrets 💘 Generated with Crush Assisted-by: GLM-4.6 via Crush <crush@charm.land>
33 lines
655 B
Bash
Executable File
33 lines
655 B
Bash
Executable File
#!/bin/bash
|
|
# Security hardening hook for live system
|
|
set -euo pipefail
|
|
|
|
echo "Applying security hardening..."
|
|
|
|
# Apply security hardening functions from proper volume path
|
|
# shellcheck source=/build/src/security-hardening.sh
|
|
source /build/src/security-hardening.sh
|
|
|
|
# Create WiFi module blacklist
|
|
create_wifi_blacklist
|
|
|
|
# Create Bluetooth module blacklist
|
|
create_bluetooth_blacklist
|
|
|
|
# Configure SSH
|
|
configure_ssh
|
|
|
|
# Configure password policy
|
|
configure_password_policy
|
|
|
|
# Configure system limits
|
|
configure_system_limits
|
|
|
|
# Configure audit rules
|
|
configure_audit_rules
|
|
|
|
# Enable auditd service
|
|
systemctl enable auditd
|
|
|
|
echo "Security hardening completed."
|