From bd4a9e84293457b30e945ff08cb01a1ac3642ff1 Mon Sep 17 00:00:00 2001
From: Lightemerald <light_emerald@aostia.com>
Date: Sat, 13 Dec 2025 16:06:50 +0100
Subject: [PATCH] adding chipsec and ossec

---
 arch-hardening.sh | 13 ++++---------
 1 file changed, 4 insertions(+), 9 deletions(-)

diff --git a/arch-hardening.sh b/arch-hardening.sh
index 3e75407..9be7311 100644
--- a/arch-hardening.sh
+++ b/arch-hardening.sh
@@ -55,15 +55,10 @@ EOL
 # [MALW-3276] Ensure rkhunter is installed
 sudo pacman -S --noconfirm --needed rkhunter
 sudo rkhunter --propupd
-sudo tee /etc/rkhunter.conf > /dev/null <<EOL
-# rkhunter configuration file
-
-# Whitelist to avoid false positive
-SCRIPTWHITELIST=/usr/bin/egrep
-SCRIPTWHITELIST=/usr/bin/fgrep
-SCRIPTWHITELIST=/usr/bin/ldd
-SCRIPTWHITELIST=/usr/bin/vendor_perl/GET
-EOL
+sudo echo 'SCRIPTWHITELIST=/usr/bin/egrep' | sudo tee -a /etc/rkhunter.conf > /dev/null
+sudo echo 'SCRIPTWHITELIST=/usr/bin/fgrep' | sudo tee -a /etc/rkhunter.conf > /dev/null
+sudo echo 'SCRIPTWHITELIST=/usr/bin/ldd' | sudo tee -a /etc/rkhunter.conf > /dev/null
+sudo echo 'SCRIPTWHITELIST=/usr/bin/rkhunter' | sudo tee -a /etc/rkhunter.conf > /dev/null
 
 # [MALW-3282] Ensure ClamAV is installed
 sudo pacman -S --noconfirm --needed clamav