Skip to content

README.md

Latest commit

 

History

History
43 lines (40 loc) · 1.23 KB

README.md

File metadata and controls

43 lines (40 loc) · 1.23 KB
Raw

raspbian-debloat-harden

Simple script to cleanup some unnecessary applications and hardening a stock Raspbian installation

What this script does:

  1. Removes the following applications along with their dependencies:

        ant 
    claws-mail 
    code-the-classics 
    ffmpeg 
    exim4-base 
    geany 
    hplip 
    mu-editor 
    printer-driver-escpr 
    printer-driver-gutenprint 
    python-games 
    qpdfview 
    vlc 
    bluej 
    greenfoot-unbundled 
    scratch 
    nuscratch 
    sense-emu-tools 
    sonic-pi 
    thonny 
    smartsim 
    libreoffice

  2. Disables the following servies:

         sshd
     avahi-daemon
     cups

  3. Updates all packages and performs a dist-upgrade

  4. Installs ufw enables it and blocks all incoming connections. (ufw default deny incoming)

  5. Installs apparmor apparmor-profiles apparmor-utils and enforces all rules in /etc/apparmor.d/*

  6. Blacklists usbhid module

  7. Fixes sudoers file, changes (ALL:ALL) to (ALL) for root and %sudo

  8. Removes $USER from adm gpio i2c lpadmin plugdev spi sudo groups