50 lines
1.6 KiB
Plaintext
50 lines
1.6 KiB
Plaintext
|
# Setec Labs Security Update — Ubuntu 22.10 Kinetic
|
||
|
|
# Release: 2026-03
|
||
|
|
# Target: Ubuntu 22.10 (Kinetic Kudu)
|
||
|
|
# Author: seteclabs.io
|
||
|
|
#
|
||
|
|
# !! WARNING: Ubuntu 22.10 reached End of Life on July 20, 2023 !!
|
||
|
|
# No further security patches are available from Canonical.
|
||
|
|
# This .sec file provides upgrade guidance only.
|
||
|
|
|
||
|
|
[packages]
|
||
|
|
# IMPORTANT: 22.10 repos are archived. Update sources first if needed.
|
||
|
|
# sed -i 's|archive.ubuntu.com|old-releases.ubuntu.com|g' /etc/apt/sources.list
|
||
|
|
# sed -i 's|security.ubuntu.com|old-releases.ubuntu.com|g' /etc/apt/sources.list
|
||
|
|
apt-get update -qq
|
||
|
|
apt-get install -y --only-upgrade openssl libssl3
|
||
|
|
apt-get install -y --only-upgrade openssh-server openssh-client
|
||
|
|
apt-get install -y --only-upgrade curl libcurl4
|
||
|
|
apt-get install -y --only-upgrade sudo
|
||
|
|
|
||
|
|
[sysctl]
|
||
|
|
# Minimal hardening — upgrade ASAP
|
||
|
|
net.ipv4.tcp_syncookies = 1
|
||
|
|
net.ipv4.conf.all.rp_filter = 1
|
||
|
|
net.ipv4.conf.all.accept_redirects = 0
|
||
|
|
net.ipv4.conf.all.send_redirects = 0
|
||
|
|
kernel.randomize_va_space = 2
|
||
|
|
fs.protected_hardlinks = 1
|
||
|
|
fs.protected_symlinks = 1
|
||
|
|
|
||
|
|
[services]
|
||
|
|
systemctl restart ssh
|
||
|
|
|
||
|
|
[files]
|
||
|
|
chmod 600 /etc/ssh/sshd_config
|
||
|
|
|
||
|
|
[custom]
|
||
|
|
# Display EOL warning prominently
|
||
|
|
bash:-:echo '=========================================='
|
||
|
|
bash:-:echo 'WARNING: Ubuntu 22.10 is END OF LIFE'
|
||
|
|
bash:-:echo 'No security patches since July 2023!'
|
||
|
|
bash:-:echo '=========================================='
|
||
|
|
bash:-:echo ''
|
||
|
|
bash:-:echo 'Recommended upgrade path:'
|
||
|
|
bash:-:echo ' 22.10 -> 23.04 -> 23.10 -> 24.04 LTS'
|
||
|
|
bash:-:echo ''
|
||
|
|
bash:-:echo 'Or fresh install Ubuntu 24.04 LTS (recommended)'
|
||
|
|
bash:-:echo ''
|
||
|
|
bash:-:echo 'To begin upgrade: do-release-upgrade'
|
||
|
|
bash:-:echo '=========================================='
|