Untitled
Posted by Anonymous on Tue 13th Aug 2019 09:59
raw | new post

echo "kernel.randomize_va_space = 0" > /etc/sysctl.d/01-disable-aslr.conf

l1tf=off mds=off mitigations=off no_stf_barrier noexec=off noibpb noibrs nopti nospec_store_bypass_disable nospectre_v1 nospectre_v2

GRUB_HIDDEN_TIMEOUT=0
GRUB_HIDDEN_TIMEOUT_QUIET=true

dd bs=512 count=4 if=/dev/urandom of=/crypto_keyfile.bin
cryptsetup luksAddKey /dev/sda1 /crypto_keyfile.bin
chmod 000 /crypto_keyfile.bin

Modify /etc/crypttab by changing

sda1_crypt UUID=xxxx.......... none luks,discard

to

sda1_crypt UUID=xxxx......... /crypto_keyfile.bin luks,discard,keyscript=/bin/cat

Create crypto_keyfile and place in /etc/initramfs-tools/hooks with

#!/bin/sh
cp /crypto_keyfile.bin "${DESTDIR}"

Make the file executable and regenerate the ramdisk

chmod 755 /etc/initramfs-tools/hooks/crypto_keyfile
update-initramfs -u -k all

Confirm that the keyfile has been inserted in the ramdisk

lsinitramfs $(ls /boot/initrd.img-*) | grep keyfile

/usr/bin/compton --backend glx --paint-on-overlay --vsync opengl-swc

/usr/share/lightdm/lightdm.conf.d/01_debian.conf
[SeatDefaults]
autologin-user=root

/etc/pam.d/lightdm-autologin
#auth      required pam_succeed_if.so user != root quiet_success

/sbin/rmmod pcspkr

xinput --set-prop 9 'libinput Accel Profile Enabled' 0, 1
xinput --set-prop 9 'libinput Accel Speed' 0.7

browser.bookmarks.max_backups
browser.safebrowsing.blockedURIs.enabled
browser.tabs.showAudioPlayingIcon
datareporting.policy.dataSubmissionEnabled
extensions.blocklist.enabled
extensions.getAddons.cache.enabled
extensions.update.enabled
mousewheel.default.delta_multiplier_x
mousewheel.default.delta_multiplier_y
mousewheel.default.delta_multiplier_z
network.captive-portal-service.enabled
network.dns.disablePrefetch
network.prefetch-next
permissions.memory_only
reader.parse-on-load.enabled
security.nocertdb
toolkit.cosmeticAnimations.enabled
toolkit.telemetry.unified

wget -O firefox.tar.bz2 --no-check-certificate "https://download.mozilla.org/?product=firefox-latest-ssl&os=linux&lang=en-GB"

sed -i 's/geteuid/getppid/' /usr/bin/vlc

openshot

wget -O tor.tar.xz --no-check-certificate "https://www.torproject.org/dist/torbrowser/8.5.4/tor-browser-linux32-8.5.4_en-US.tar.xz"
41fbe8949332d203c98a293ee1e966e72fc8ad7dd3174a32f0777338e8d464ac