Lightemerald/linux-scripts
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

adding chipsec and ossec

Browse Source
This commit is contained in:
Lightemerald
2025-12-13 16:06:50 +01:00
parent e38b442bb4
commit bd4a9e8429
1 changed files with 4 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
arch-hardening.sh
View File

@@ -55,15 +55,10 @@ EOL
# [MALW-3276] Ensure rkhunter is installed # [MALW-3276] Ensure rkhunter is installed
sudo pacman -S --noconfirm --needed rkhunter sudo pacman -S --noconfirm --needed rkhunter
sudo rkhunter --propupd sudo rkhunter --propupd
sudo tee /etc/rkhunter.conf > /dev/null <<EOL sudo echo 'SCRIPTWHITELIST=/usr/bin/egrep' | sudo tee -a /etc/rkhunter.conf > /dev/null
# rkhunter configuration file sudo echo 'SCRIPTWHITELIST=/usr/bin/fgrep' | sudo tee -a /etc/rkhunter.conf > /dev/null
sudo echo 'SCRIPTWHITELIST=/usr/bin/ldd' | sudo tee -a /etc/rkhunter.conf > /dev/null
# Whitelist to avoid false positive sudo echo 'SCRIPTWHITELIST=/usr/bin/rkhunter' | sudo tee -a /etc/rkhunter.conf > /dev/null
SCRIPTWHITELIST=/usr/bin/egrep
SCRIPTWHITELIST=/usr/bin/fgrep
SCRIPTWHITELIST=/usr/bin/ldd
SCRIPTWHITELIST=/usr/bin/vendor_perl/GET
EOL
# [MALW-3282] Ensure ClamAV is installed # [MALW-3282] Ensure ClamAV is installed
sudo pacman -S --noconfirm --needed clamav sudo pacman -S --noconfirm --needed clamav