hardenend malloc. json config. networking + default firewalling.

config/filesystem_chroot_install.sh

@@ -33,10 +33,6 @@ chmod u+s /usr/bin/ping
 mkdir -p ~/.config
 touch ~/.config/gnome-initial-setup-done
 
-#configure permissions for opensnitch firewall
-chown -R root:root /etc/opensnitchd/
-chmod 777 /etc/opensnitchd/settings.conf
-
 #enable services
 systemctl enable systemd-resolved
 systemctl enable systemd-networkd
@@ -51,3 +47,8 @@ curl -fsSLo /etc/apt/sources.list.d/brave-browser-release.sources https://brave-
 apt update
 apt install -y brave-browser
 
+#configure permissions for opensnitch firewall
+rsync -a /usr/src/opensnitchd/ /etc/opensnitchd/
+chown -R root:root /etc/opensnitchd/
+chmod 777 /etc/opensnitchd/settings.conf
+