diff --git a/arch-hardening.sh b/arch-hardening.sh index f8496bd..ad01bd4 100644 --- a/arch-hardening.sh +++ b/arch-hardening.sh @@ -280,7 +280,7 @@ sudo systemctl enable --now rngd #sudo systemctl enable --now haveged # [CRYP-8006] Ensure MemoryOverwriteRequest-bit set -sudo tee /usr/lib/systemd/system-shutdown/mor-bit-wipe.sh > /dev/null <<'EOL' +sudo tee /usr/lib/systemd/system-shutdown/mor-bit-wipe.shutdown > /dev/null <<'EOL' #!/bin/bash # Path to the MemoryOverwriteRequestControl UEFI variable @@ -301,7 +301,7 @@ fi exit 0 EOL -sudo chmod +x /usr/lib/systemd/system-shutdown/mor-bit-wipe.sh +sudo chmod 755 /usr/lib/systemd/system-shutdown/mor-bit-wipe.shutdown # [AUTH-9230] Ensure password hashing algorithm is set to YESCRYPT and hashing rounds to minimum of 5000 and maximum of 5000000 sudo sed -i 's/^ENCRYPT_METHOD .*/ENCRYPT_METHOD YESCRYPT/' /etc/login.defs