From 71a00ba4045ee40dc52b80818c1acf5a0435f9d3 Mon Sep 17 00:00:00 2001 From: Tommaso Chiti Date: Mon, 10 May 2021 08:11:38 +0200 Subject: [PATCH] Update easy-arch.sh --- easy-arch.sh | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/easy-arch.sh b/easy-arch.sh index ab72aa9..90638a0 100644 --- a/easy-arch.sh +++ b/easy-arch.sh @@ -175,10 +175,9 @@ EOF echo "Configuring /etc/mkinitcpio.conf for LUKS hook." sed -i -e 's,modconf block filesystems keyboard,keyboard keymap modconf block encrypt filesystems,g' /mnt/etc/mkinitcpio.conf -# Setting up LUKS Keyfile, BTRFS Booting and encryption in GRUB and initramfs. +# Setting up LUKS2 encryption and apparmor. UUID=$(blkid $Cryptroot | cut -f2 -d'"') -sed -i "s,quiet,quiet cryptdevice=UUID=$UUID:cryptroot root=$BTRFS,g" /mnt/etc/default/grub -sed -i "s#root=/dev/mapper/cryptroot#root=/dev/mapper/cryptroot lsm=lockdown,yama,apparmor,bpf#g" /mnt/etc/default/grub +sed -i "s,quiet,quiet cryptdevice=UUID=$UUID:cryptroot root=$BTRFS lsm=lockdown,yama,apparmor,bpf,g" /mnt/etc/default/grub # Security kernel settings. echo "kernel.kptr_restrict = 2" > /mnt/etc/sysctl.d/51-kptr-restrict.conf