commit:     0b4a7da25051c864ab5ecb23fd869dd6ede7af0a
Author:     Devan Franchini <twitch153 <AT> gentoo <DOT> org>
AuthorDate: Thu Mar 12 02:27:31 2015 +0000
Commit:     Devan Franchini <twitch153 <AT> gentoo <DOT> org>
CommitDate: Thu Mar 12 02:27:48 2015 +0000
URL:        https://gitweb.gentoo.org/proj/releng.git/commit/?id=0b4a7da2

tools-hardened/desktop run-base.sh: setup_systemd() cleans up services

This commit cleans up the services to reflect the services listed at:
http://tinhat.sourceforge.net/?q=technical

 tools-hardened/desktop/run-base.sh | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

diff --git a/tools-hardened/desktop/run-base.sh 
b/tools-hardened/desktop/run-base.sh
index d79469a..7cd525b 100755
--- a/tools-hardened/desktop/run-base.sh
+++ b/tools-hardened/desktop/run-base.sh
@@ -97,9 +97,6 @@ setup_initrc() {
 setup_systemd() {
        ln -sf /proc/self/mounts /etc/mtab
        sed -i -e 
's/#GRUB_CMDLINE_LINUX=""/GRUB_CMDLINE_LINUX="init=\/usr\/lib\/systemd\/systemd"/'
 "${ROOTFS}"/etc/default/grub
-       chroot "${ROOTFS}"/ systemctl enable avahi-daemon.service
-       chroot "${ROOTFS}"/ systemctl enable bluetooth.service
-       chroot "${ROOTFS}"/ systemctl enable cups.service
        chroot "${ROOTFS}"/ systemctl enable dhcpcd.service
        chroot "${ROOTFS}"/ systemctl enable cronie.service
        chroot "${ROOTFS}"/ systemctl enable gdm.service
@@ -109,11 +106,10 @@ setup_systemd() {
        chroot "${ROOTFS}"/ systemctl enable postfix.service
        chroot "${ROOTFS}"/ systemctl disable gdm
        chroot "${ROOTFS}"/ systemctl enable slim
-       chroot "${ROOTFS}"/ systemctl enable smbd.service
        chroot "${ROOTFS}"/ systemctl enable sshd.service
-       #chroot "${ROOTFS}"/ systemctl enable udev.service
-       #chroot "${ROOTFS}"/ systemctl enable udev-settle.service
-       #chroot "${ROOTFS}"/ systemctl enable udev-trigger.service
+       chroot "${ROOTFS}"/ systemctl disable avahi-daemon.service
+       chroot "${ROOTFS}"/ systemctl disable bluetooth.serivce
+       chroot "${ROOTFS}"/ systemctl disable cups.service
 }
 
 cleanup_dirs() {

Reply via email to