aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorFrederic Lepied <flepied@mandriva.com>2002-07-24 23:06:12 +0000
committerFrederic Lepied <flepied@mandriva.com>2002-07-24 23:06:12 +0000
commit6248dca1f5eb30832df0353c3da4b78ca68a0ef4 (patch)
treeb5454198696365e2ef0a32c8d614251c8aa5298a
parente5dcc59c1af9be91b37b6568232835cf724e4912 (diff)
downloadmsec-6248dca1f5eb30832df0353c3da4b78ca68a0ef4.tar
msec-6248dca1f5eb30832df0353c3da4b78ca68a0ef4.tar.gz
msec-6248dca1f5eb30832df0353c3da4b78ca68a0ef4.tar.bz2
msec-6248dca1f5eb30832df0353c3da4b78ca68a0ef4.tar.xz
msec-6248dca1f5eb30832df0353c3da4b78ca68a0ef4.zip
call splitted function with the same args.
-rwxr-xr-xshare/msec.py17
1 files changed, 13 insertions, 4 deletions
diff --git a/share/msec.py b/share/msec.py
index f281bae..bf50286 100755
--- a/share/msec.py
+++ b/share/msec.py
@@ -101,7 +101,8 @@ if len(args) == 0:
sys.exit(1)
else:
level = args[0]
-
+ changing_level()
+
try:
level = int(level)
except ValueError:
@@ -135,6 +136,7 @@ else:
password_length(plength, level / 4, level / 4)
enable_ip_spoofing_protection(server)
+enable_dns_spoofing_protection(server)
# differences between level 5 and others
if level == 5:
@@ -157,10 +159,12 @@ if level >= 4:
set_user_umask('077')
set_shell_history_size(10)
allow_root_login(0)
+ allow_remote_root_login(0)
enable_sulogin(1)
allow_user_list(0)
enable_promisc_check(1)
accept_icmp_echo(0)
+ accept_broadcasted_icmp_echo(0)
accept_bogus_error_responses(0)
allow_reboot(0)
enable_at_crontab(0)
@@ -172,10 +176,12 @@ else:
set_user_umask('022')
set_shell_history_size(-1)
allow_root_login(1)
+ allow_remote_root_login(1)
enable_sulogin(0)
allow_user_list(1)
enable_promisc_check(0)
accept_icmp_echo(1)
+ accept_broadcasted_icmp_echo(1)
accept_bogus_error_responses(1)
allow_reboot(1)
enable_at_crontab(1)
@@ -201,12 +207,15 @@ if level != 0:
enable_security_check(1)
enable_password(1)
if level < 3:
- allow_x_connections(LOCAL, 1)
+ allow_x_connections(LOCAL)
+ allow_xserver_to_listen(1)
else:
if level == 3:
- allow_x_connections(NONE, 1)
+ allow_x_connections(NONE)
+ allow_xserver_to_listen(1)
else:
- allow_x_connections(NONE, 0)
+ allow_x_connections(NONE)
+ allow_xserver_to_listen(0)
else:
enable_security_check(0)
enable_password(0)