titanz/QubesOS-Scripts
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix NetworkManager hardening

Browse Source
This commit is contained in:
Tommy
2024-12-25 05:24:11 -07:00
committed by GitHub
parent 742a5ea93d
commit ea20334cd4
2 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
etc/systemd/system/NetworkManager.service.d/98-qubes-fix.conf
View File

@@ -1,3 +0,0 @@
[Service]
ExecStartPre=
ExecStartPre=+/usr/lib/qubes/network-manager-prepare-conf-dir

3
fedora-gnome/fedora-gnome.sh
View File

@@ -84,8 +84,9 @@ download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/main/etc
# We don't need the usual mac address randomization and stuff here, because this template is not used for sys-net
sudo mkdir -p /etc/systemd/system/NetworkManager.service.d
download https://raw.githubusercontent.com/TommyTran732/QubesOS-Scripts/refs/heads/main/etc/systemd/system/NetworkManager.service.d/98-qubes-fix.conf /etc/systemd/system/NetworkManager.service.d/98-qubes-fix.conf
download https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd/system/NetworkManager.service.d/99-brace.conf /etc/systemd/system/NetworkManager.service.d/99-brace.conf
sudo sed -i 's@ReadOnlyPaths=/etc/NetworkManager@#ReadOnlyPaths=/etc/NetworkManager@' /etc/systemd/system/NetworkManager.service.d/99-brace.conf
sudo sed -i 's@ReadWritePaths=-/etc/NetworkManager/system-connections@#ReadWritePaths=-/etc/NetworkManager/system-connections@' /etc/systemd/system/NetworkManager.service.d/99-brace.conf
# Disable GJS and WebkitGTK JIT
download https://raw.githubusercontent.com/TommyTran732/Linux-Setup-Scripts/main/etc/environment /etc/environment