build update

.gitignore

@@ -0,0 +1,2 @@
+banner_service
+SYN-Scan-Firewall

install.sh

@@ -51,13 +51,13 @@ sudo useradd -r -g synfirewall -s /usr/sbin/nologin \
 /usr/bin/sudo /usr/bin/chown synfirewall:synfirewall /etc/SYN-Scan-Firewall
 /usr/bin/sudo /usr/bin/chmod 750 /etc/SYN-Scan-Firewall
 /usr/bin/sudo /usr/bin/cp config-example.yaml /etc/SYN-Scan-Firewall/config.yaml
-/usr/bin/chmod 640 /etc/SYN-Scan-Firewall/config.yaml
+/usr/bin/sudo /usr/bin/chmod 640 /etc/SYN-Scan-Firewall/config.yaml
 /usr/bin/sudo /usr/bin/nano /etc/SYN-Scan-Firewall/config.yaml
 
 /usr/bin/echo "Making lib dir..."
-sudo mkdir -p /var/lib/syn-firewall
-sudo chown synfirewall:synfirewall /var/lib/syn-firewall
-sudo chmod 750 /var/lib/syn-firewall
+/usr/bin/sudo /usr/bin/mkdir -p /var/lib/syn-firewall
+/usr/bin/sudo /usr/bin/chown synfirewall:synfirewall /var/lib/syn-firewall
+/usr/bin/sudo /usr/bin/chmod 750 /var/lib/syn-firewall
 ./reBuild.sh
 
 /usr/bin/echo "Copy over Service Files for SYN-Scan-Firewall"

reBuild.sh

@@ -1,6 +1,14 @@
 #!/bin/bash
 /usr/bin/echo "Building SYN-Scan-Firewall..."
-go build -buildmode=pie -ldflags="-s -w -extldflags=-z,now,-z,relro" -tags=netgo -o SYN-Scan-Firewall SYN-Scan-Firewall.go
+
+# Build with hardening
+go build \
+    -trimpath \
+    -buildmode=pie \
+    -ldflags="-s -w" \
+    -tags="netgo osusergo" \
+    -o SYN-Scan-Firewall \
+    SYN-Scan-Firewall.go
 
 /usr/bin/echo "Setting up local bin..."
 /usr/bin/sudo /usr/bin/cp SYN-Scan-Firewall /usr/local/bin/