ThisBashscriptjustremovesapre-installedTelemetry,apre-installedsoftwareandlibswithsomepotentionalorahighrisk.Scriptremovesthemtomakeyourexperiencebetterandmoresecure.Also,thescriptinstallsanadditionalsoftwarefortheprotection.
Pleasedonotimagineitsecuresyourmachineagainstseriousadversarieshowever.
Thisscriptdoes:SystemupdateandsoftwareupgradeAmazon&advertwebappsremovingAptUrlRemoving(tool,whichgivespossibilitiestostartinstallationbyclickingonurl,canbeexecutedwithjs,whichisnotsecure)GuestsessiondisableforLightDMRemotelogindisableforLightDmDNSencryption(dnscrypt-proxy)[shouldtobemanuallyconfiguredandaddedtoufw.Justreadtheendofthescriptandgoogle"HowToInstallDNSCryptonUbuntu"]FireWall(UFW)[shouldtobemanuallyconfiguredforanotheryoursoftware]Antivirus(ClamAV)BruteForceprotection(Fail2Ban)BasicTelemetryRemoving(ZeitGeist)andunsecurelibsandpre-installedsoftwarewithhighandpotentionalrisks(like,forexample,Vino-VNCserverforaremotedesktopsharingandsystemcontrolorlibhttp-daemon-perl-httpserverforperlorgdbserver-remotetoolforgnomedebug.Somesoftwarehaveapotentionalrisks(bettertoremove,ifyoudon'tuseit,becauseofopeningports,forexample.Please,readthecommentsinthescriptanduseonlystrings,thatyouneed)Additionalrecomendations(aboutfirefoxplugins,sandboxforsoftware,ownlatestkernelfromsourcesforyoursystem,etc.)Howtouse:DownloadallthefilesMakeubuntu-secure.shexecutablewithsudochmod+xubuntu-secure.shcommand.Readallthecodelinesinthefileanduncommentsomecommands,ifyouneedthem,andcommentstrings,whichyoudon'twanttouse,savethechanges.Executethescriptfromterminal:sudo./ubuntu-secure.shWhattodomore:Installadditionalpluginstofirefox,likethis:PrivacyBadgerGhosterySelf-destructingcookiesNoScriptHTTPSeverywherePrivaConf(alsogoogle"FirefoxDebloatinabout:config"andmanuallyswitchoffsomeproblems)Removeanysoftware,thatyoudon'tuseConfigureSandBox-likesystemsforasomenot-wellproprietarysoftwarelike,forexample,skype.LearnAppArmor,SeLinuxandtrytoimplementitConfiguremanuallythekernelandcompileitfromasourcecodewithmodules,thatyouneedonlySomeimportantnotes:Also,pleaseunderstandthisimportantnotes:
Thisscriptiskindofasmallhelper,itisnotafullprotection,don'tuseit,ifyoudon'tunderstandwhatitdoes.Readthecodefirstandmakesure,thatallisokforyou.Ithasnotbeentestedforthelastubuntuversions(sobecarefuly,whenyouuseit,forexampleremovingofsomezeitgeistlibscantouchUnitydependencies)Thankyou!Thankyouforyourinteresttothescript.Anyissues,advicesandpullrequestsarewelcome.
评论