diff --git a/config/hooks/live/9999_zzzz.chroot b/config/hooks/live/9999_zzzz.chroot index 0f54de0..f01a7c9 100644 --- a/config/hooks/live/9999_zzzz.chroot +++ b/config/hooks/live/9999_zzzz.chroot @@ -18,7 +18,7 @@ declare var_dm="" var_unit_dir="" var_link="/etc/systemd/system/default.target" ### Remove CDLB artifacts ------------------------------------------------------------------------------------------------------ rm -f /root/ciss_xdg_tmp.sh rm -fr /root/build -find / -xdev \( -path /proc -o -path /sys -o -path /dev -o -path /run \) -prune -o -type f -name '.keep' -exec rm -f -- {} + +find /.ciss /etc /home /root /usr /var -type f -name '.keep' -print -delete ### Securing '/.ciss' ---------------------------------------------------------------------------------------------------------- find /.ciss -type d -exec chmod 0700 {} + diff --git a/var/bash.var.sh b/var/bash.var.sh index 0e85393..b309c1a 100644 --- a/var/bash.var.sh +++ b/var/bash.var.sh @@ -35,11 +35,11 @@ shopt -u extglob # If set, enable the extended pattern matching features shopt -u nullglob # If set, filename expansion patterns that match no files expand to nothing and are removed. ### Deterministic environment -declare -gx LC_ALL=C.UTF-8 -declare -gx LANG=C.UTF-8 -declare -gx TZ=UTC -declare -gx PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" declare -gx IFS=$' \t\n' +declare -gx LANG=C.UTF-8 +declare -gx LC_ALL=C.UTF-8 +declare -gx PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" +declare -gx TZ=UTC umask 0022