aboutsummaryrefslogtreecommitdiffstats
path: root/init-sh/level2.sh
diff options
context:
space:
mode:
authorYoann Vandoorselaere <yoann@mandriva.com>1999-11-30 15:47:11 +0000
committerYoann Vandoorselaere <yoann@mandriva.com>1999-11-30 15:47:11 +0000
commit6993d7456f2e542095deec62549d467e6e9a7057 (patch)
tree0ab7fbc7733b95c70c32012bf84a42354082bf72 /init-sh/level2.sh
parent79c42eeb075ae7d7bbb3b03165267d5ebe81bb63 (diff)
downloadmsec-6993d7456f2e542095deec62549d467e6e9a7057.tar
msec-6993d7456f2e542095deec62549d467e6e9a7057.tar.gz
msec-6993d7456f2e542095deec62549d467e6e9a7057.tar.bz2
msec-6993d7456f2e542095deec62549d467e6e9a7057.tar.xz
msec-6993d7456f2e542095deec62549d467e6e9a7057.zip
Many cron security check added.
Now report what it does ( msec ).
Diffstat (limited to 'init-sh/level2.sh')
-rwxr-xr-xinit-sh/level2.sh37
1 files changed, 24 insertions, 13 deletions
diff --git a/init-sh/level2.sh b/init-sh/level2.sh
index b9385f9..ec80c5d 100755
--- a/init-sh/level2.sh
+++ b/init-sh/level2.sh
@@ -20,22 +20,33 @@ AddRules "tty4" /etc/securetty quiet
AddRules "tty5" /etc/securetty quiet
AddRules "tty6" /etc/securetty
-# security.conf
-echo "Updating file check variable :"
+# Security check
+echo "Updating file check variable : "
echo -e "\t- Check suid root file : yes."
-AddRules "CHECK_SUID_ROOT=yes" /etc/security/msec/security.conf quiet
-echo -e "\t- Check suid goup file : no."
-AddRules "CHECK_SUID_GROUP=no" /etc/security/msec/security.conf quiet
-echo -e "\t- Check world writable file : no."
-AddRules "CHECK_WRITABLE=no" /etc/security/msec/security.conf quiet
+ AddRules "CHECK_SUID_ROOT=yes" /etc/security/msec/security.conf quiet
+echo -e "\t- Check suid root file integrity (backdoor check) : yes."
+ AddRules "CHECK_SUID_MD5=yes" /etc/security/msec/security.conf quiet
+echo -e "\t- Check suid group file : yes."
+ AddRules "CHECK_SUID_GROUP=no" /etc/security/msec/security.conf quiet
+echo -e "\t- Check world writable file : yes."
+ AddRules "CHECK_WRITABLE=yes" /etc/security/msec/security.conf quiet
echo -e "\t- Check unowned file : no."
-AddRules "CHECK_UNOWNED=no" /etc/security/msec/security.conf quiet
+ AddRules "CHECK_UNOWNED=no" /etc/security/msec/security.conf quiet
echo -e "\t- Check promiscuous mode : no."
-AddRules "CHECK_PROMISC=no" /etc/security/msec/security.conf quiet
-echo -e "\t- Security warning on tty : no."
-AddRules "TTY_WARN=no" /etc/security/msec/security.conf quiet
-echo -e "\t- Security warning in syslog : yes."
-AddRules "SYSLOG_WARN=yes" /etc/security/msec/security.conf
+ AddRules "CHECK_PROMISC=no" /etc/security/msec/security.conf quiet
+echo -e "\t- Check listening port : no."
+ AddRules "CHECK_OPEN_PORT=no" /etc/security/msec/security.conf quiet
+echo -e "\t- Check for dangerous .[sr]hosts file : no."
+ AddRules "CHECK_RHOST=no" /etc/security/msec/security.conf quiet
+echo -e "\t- Check passwd file integrity : no."
+ AddRules "CHECK_PASSWD=no" /etc/security/msec/security.conf quiet
+echo -e "\t- Check shadow file integrity : no."
+ AddRules "CHECK_SHADOW=no" /etc/security/msec/security.conf quiet
+echo -e "\t- Security warning on tty : \"no\" :"
+ AddRules "TTY_WARN=no" /etc/security/msec/security.conf quiet
+echo -e "\t- Security warning in syslog : \"yes\" :"
+ AddRules "SYSLOG_WARN=yes" /etc/security/msec/security.conf
+# end security check
# lilo update
echo -n "Running lilo to record new config : "