diff options
| author | Frederic Lepied <flepied@mandriva.com> | 2001-12-02 06:03:03 +0000 |
|---|---|---|
| committer | Frederic Lepied <flepied@mandriva.com> | 2001-12-02 06:03:03 +0000 |
| commit | 6bee859a12623d0b04d3672fade41b8b181bdb19 (patch) | |
| tree | c0c8e5ff0ed1e3f6508386f5684c39dbd9a4771b /init-sh/levelsnf.sh | |
| parent | 622336d30f57e10f89dff90691fec753bead9e98 (diff) | |
| download | msec-6bee859a12623d0b04d3672fade41b8b181bdb19.tar msec-6bee859a12623d0b04d3672fade41b8b181bdb19.tar.gz msec-6bee859a12623d0b04d3672fade41b8b181bdb19.tar.bz2 msec-6bee859a12623d0b04d3672fade41b8b181bdb19.tar.xz msec-6bee859a12623d0b04d3672fade41b8b181bdb19.zip | |
added sysctl.conf, host.conf and /etc/issue{.net} customization.
Diffstat (limited to 'init-sh/levelsnf.sh')
| -rwxr-xr-x | init-sh/levelsnf.sh | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/init-sh/levelsnf.sh b/init-sh/levelsnf.sh index 349d200..6aba191 100755 --- a/init-sh/levelsnf.sh +++ b/init-sh/levelsnf.sh @@ -87,6 +87,38 @@ AddRules "0 4 * * * root /usr/share/msec/security.sh" /etc/crontab echo "Setting secure level variable to snf :" AddRules "SECURE_LEVEL=snf" /etc/sysconfig/msec +# Console timeout +echo "Setting console timeout :" +AddRules "TMOUT=180" /etc/sysconfig/msec + +# No history file +echo "No history file :" +AddRules "HISTFILESIZE=0" /etc/sysconfig/msec + +# Ip spoofing protection +echo "IP spoofing protection :" +AddRules "nospoof on" /etc/host.conf +AddRules "spoofalert on" /etc/host.conf + +# icmp echo +echo "Ignoring icmp echo :" +AddRules "net.ipv4.icmp_echo_ignore_all=1" /etc/sysctl.conf +AddRules "net.ipv4.icmp_echo_ignore_broadcasts=1" /etc/sysctl.conf + +# bad error +echo "Enabling bad error message Protection :" +AddRules "net.ipv4.icmp_ignore_bogus_error_responses=1" /etc/sysctl.conf + +# log strange packets +echo "Enabling logging Spoofed Packets, Source Routed Packets, Redirect Packets :" +AddRules "net.ipv4.conf.all.log_martians=1" /etc/sysctl.conf + +LoadSysctl + +# issues +echo "Removing /etc/issue.net :" +RemoveIssueNet + export SECURE_LEVEL=snf IFS=" |