diff --git a/easy-arch.sh b/easy-arch.sh index ab72aa9..90638a0 100644 --- a/easy-arch.sh +++ b/easy-arch.sh @@ -175,10 +175,9 @@ EOF echo "Configuring /etc/mkinitcpio.conf for LUKS hook." sed -i -e 's,modconf block filesystems keyboard,keyboard keymap modconf block encrypt filesystems,g' /mnt/etc/mkinitcpio.conf -# Setting up LUKS Keyfile, BTRFS Booting and encryption in GRUB and initramfs. +# Setting up LUKS2 encryption and apparmor. UUID=$(blkid $Cryptroot | cut -f2 -d'"') -sed -i "s,quiet,quiet cryptdevice=UUID=$UUID:cryptroot root=$BTRFS,g" /mnt/etc/default/grub -sed -i "s#root=/dev/mapper/cryptroot#root=/dev/mapper/cryptroot lsm=lockdown,yama,apparmor,bpf#g" /mnt/etc/default/grub +sed -i "s,quiet,quiet cryptdevice=UUID=$UUID:cryptroot root=$BTRFS lsm=lockdown,yama,apparmor,bpf,g" /mnt/etc/default/grub # Security kernel settings. echo "kernel.kptr_restrict = 2" > /mnt/etc/sysctl.d/51-kptr-restrict.conf