pastebin - collaborative debugging tool
kpaste.kpaste.net RSS


Untitled
Posted by Anonymous on Tue 25th Jun 2019 21:31
raw | new post

  1. echo "kernel.randomize_va_space = 0" > /etc/sysctl.d/01-disable-aslr.conf
  2.  
  3. l1tf=off mds=off mitigations=off no_stf_barrier noexec32=off noexec=off noibpb noibrs nopti nospec_store_bypass_disable nospectre_v1 nospectre_v2
  4.  
  5. /usr/bin/compton --backend glx --paint-on-overlay --vsync opengl-swc
  6.  
  7. /usr/share/lightdm/lightdm.conf.d/01_debian.conf
  8. [SeatDefaults]
  9. autologin-user=root
  10. /etc/pam.d/lightdm-autologin
  11. #auth      required pam_succeed_if.so user != root quiet_success
  12.  
  13. /sbin/rmmod pcspkr
  14.  
  15. browser.bookmarks.max_backups
  16. browser.newtabpage.directory.ping
  17. browser.newtabpage.directory.source
  18. browser.safebrowsing.blockedURIs.enabled
  19. browser.tabs.animate
  20. browser.tabs.showAudioPlayingIcon
  21. datareporting.policy.dataSubmissionEnabled
  22. extensions.blocklist.enabled
  23. extensions.getAddons.cache.enabled
  24. extensions.update.enabled
  25. gfx.downloadable_fonts.enabled
  26. lightweightThemes.update.enabled
  27. mousewheel.default.delta_multiplier_x
  28. mousewheel.default.delta_multiplier_y
  29. mousewheel.default.delta_multiplier_z
  30. network.captive-portal-service.enabled
  31. network.dns.disablePrefetch
  32. network.prefetch-next
  33. permissions.memory_only
  34. reader.parse-on-load.enabled
  35. security.nocertdb
  36. toolkit.telemetry.unified
  37.  
  38. wget -O firefox.tar.bz2 --no-check-certificate "https://download.mozilla.org/?product=firefox-latest&os=linux64&lang=en-GB"
  39.  
  40. dd bs=512 count=4 if=/dev/urandom of=/crypto_keyfile.bin
  41. cryptsetup luksAddKey /dev/sda1 /crypto_keyfile.bin
  42. chmod 000 /crypto_keyfile.bin
  43.  
  44. Modify /etc/crypttab by changing …
  45.  
  46. sda1_crypt UUID=xxxx.......... none luks,discard
  47.  
  48. … to …
  49.  
  50. sda1_crypt UUID=xxxx......... /crypto_keyfile.bin luks,discard,keyscript=/bin/cat
  51.  
  52. Create crypto_keyfile and place in /etc/initramfs-tools/hooks with …
  53.  
  54. #!/bin/sh
  55. cp /crypto_keyfile.bin "${DESTDIR}"
  56.  
  57. Make the file executable and regenerate the ramdisk …
  58.  
  59. chmod 755 /etc/initramfs-tools/hooks/crypto_keyfile
  60. update-initramfs -u -k all
  61.  
  62. Confirm that the keyfile has been inserted in the ramdisk …
  63.  
  64. lsinitramfs $(ls /boot/initrd.img-*) | grep keyfile

Submit a correction or amendment below (click here to make a fresh posting)
After submitting an amendment, you'll be able to view the differences between the old and new posts easily.

Syntax highlighting:

To highlight particular lines, prefix each line with {%HIGHLIGHT}





All content is user-submitted.
The administrators of this site (kpaste.net) are not responsible for their content.
Abuse reports should be emailed to us at