Secure ArchLinux Installation part 3 - Basic Hardening

I'm gonna be honest, you probably probably won't find anything groundbreaking here and I'm not gonna act like I've discovered a mother-lode, but with this vid I'm completing the "Secure Linux Laptop" series. I hope you've managed to end up with reasonably secure laptop that is still convenient to use. In the future I'll probably cover things not mentioned in this vid, but they require a whole lot more R&D.

EDIT: Many thanks to @machorius and @gregoireSB93 for pointing out the NTP SNAFU, this part has been cut from the video.

00:00 - Intro 00:30 - Firewall 02:08 - Kernel params 03:16 - Port audit 03:30 - Password manager 04:10 - Final remarks

All scripts and config can be copy&pasted from here: https://github.com/Ataraxxia/secure-arch

Other security security guides worth checking out (possibly scary and really advanced, some tips are meant for servers): https://wiki.archlinux.org/title/security https://madaidans-insecurities.github.io/guides/linux-hardening.html ... https://www.youtube.com/watch?v=ivXTv5ate-M