Run cups-browsed as a locked service account with a dedicated cache and a focused systemd sandbox. Restrict automatic queues to driverless IPP printers, remove wheel from passwordless CUPS administration, replace cups-pdf with Polkit-backed setup, and migrate existing systems safely. Reported-By: Erik Hunstad (Bad Sector Labs) Co-Authored-By: Daybreak Blue <noreply@openai.com>
13 lines
647 B
Bash
13 lines
647 B
Bash
run_logged "$OMARCHY_INSTALL/config/theme-system.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/increase-lockout-limit.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/lockscreen-pam.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/fix-powerprofilesctl-shebang.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/ssh-command-path.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/ssh-keepalive.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/docker.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/snapper.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/locate.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/printing.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/enable-services.sh"
|
|
run_logged "$OMARCHY_INSTALL/config/firewall.sh"
|