V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

func/cdi_4400_hardening/4440_hardening_files.sh

@@ -22,9 +22,10 @@ guard_sourcing
 #   0: on success
 #######################################
 hardening_files() {
-  chmod 0700 /etc/cron.d /etc/cron.daily /etc/cron.hourly /etc/cron.monthly /etc/cron.weekly
-  chmod 0700 /etc/sudoers.d
-  chmod 0700 /etc/crontab
+  chmod 0700 "${TARGET}/etc/cron.d" "${TARGET}/etc/cron.daily" "${TARGET}/etc/cron.hourly" "${TARGET}/etc/cron.monthly" \
+             "${TARGET}/etc/cron.weekly"
+  chmod 0700 "${TARGET}/etc/sudoers.d"
+  chmod 0700 "${TARGET}/etc/crontab"
   guard_dir && return 0
 }
 # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh

func/cdi_4400_hardening/4460_hardening_memory.sh

@@ -50,6 +50,8 @@ hardening_memory() {
 
 [Coredump]
 Storage=none
+
+# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh
 EOF
   chmod 0644 "${TARGET}/etc/systemd/coredump.conf.d/disable.conf"
 

func/cdi_4600_verification/4610_finalize_system.sh

@@ -13,7 +13,7 @@
 guard_sourcing
 
 #######################################
-# Set locale, locale overrides and configure keyboard layout.
+# Finalize the system.
 # Globals:
 #   TARGET
 # Arguments:
@@ -21,11 +21,7 @@ guard_sourcing
 # Returns:
 #   0: on success
 #######################################
-setup_locales() {
-
-  ### Set the X11 keyboard layout (for graphical environments).
-  do_in_target "${TARGET}" localectl set-x11-keymap "${locale_keyboard_xkb_keymap}"
-
+finalize_system() {
   guard_dir && return 0
 }
 # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh