diff options
| author | Eugeni Dodonov <eugeni@mandriva.org> | 2009-03-11 23:16:48 +0000 |
|---|---|---|
| committer | Eugeni Dodonov <eugeni@mandriva.org> | 2009-03-11 23:16:48 +0000 |
| commit | e76cb515ee0f26d9009f2a5561629dbbb4502741 (patch) | |
| tree | 93de12f97c703d84da4254c4aaabae6d2637d8ad /src | |
| parent | d5123ac6ca536bcdccf9319a3e2c6392f69212ff (diff) | |
| download | msec-e76cb515ee0f26d9009f2a5561629dbbb4502741.tar msec-e76cb515ee0f26d9009f2a5561629dbbb4502741.tar.gz msec-e76cb515ee0f26d9009f2a5561629dbbb4502741.tar.bz2 msec-e76cb515ee0f26d9009f2a5561629dbbb4502741.tar.xz msec-e76cb515ee0f26d9009f2a5561629dbbb4502741.zip | |
Changed server files to support remote/local services.
Diffstat (limited to 'src')
| -rw-r--r-- | src/msec/config.py | 2 | ||||
| -rwxr-xr-x | src/msec/libmsec.py | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/src/msec/config.py b/src/msec/config.py index c79910e..1402c59 100644 --- a/src/msec/config.py +++ b/src/msec/config.py @@ -91,7 +91,7 @@ SETTINGS = {'BASE_LEVEL': ("libmsec.base_level", 'ALLOW_XAUTH_FROM_ROOT': ("libmsec.allow_xauth_from_root", ['yes', 'no']), 'ALLOW_XSERVER_TO_LISTEN': ("libmsec.allow_xserver_to_listen", ['yes', 'no']), 'AUTHORIZE_SERVICES': ("libmsec.authorize_services", ['yes', 'no', 'local']), - 'CREATE_SERVER_LINK': ("libmsec.create_server_link", ['no', 'standard', 'secure']), + 'CREATE_SERVER_LINK': ("libmsec.create_server_link", ['no', 'remote', 'local']), 'ENABLE_AT_CRONTAB': ("libmsec.enable_at_crontab", ['yes', 'no']), 'ENABLE_CONSOLE_LOG': ("libmsec.enable_console_log", ['yes', 'no']), 'ENABLE_DNS_SPOOFING_PROTECTION':("libmsec.enable_ip_spoofing_protection", ['yes', 'no']), diff --git a/src/msec/libmsec.py b/src/msec/libmsec.py index 6c1d8b9..e39f8a8 100755 --- a/src/msec/libmsec.py +++ b/src/msec/libmsec.py @@ -826,7 +826,7 @@ class MSEC: pass def create_server_link(self, param): - ''' Creates the symlink /etc/security/msec/server to point to /etc/security/msec/server.SERVER_LEVEL. The /etc/security/msec/server is used by chkconfig --add to decide to add a service if it is present in the file during the installation of packages.''' + ''' Creates the symlink /etc/security/msec/server to point to /etc/security/msec/server.SERVER_LEVEL. The /etc/security/msec/server is used by chkconfig --add to decide to add a service if it is present in the file during the installation of packages. By default, two presets are provided: local (which only enables local services) and remote (which also enables some remote services considered safe). Note that the allowed services must be placed manually into the server.SERVER_LEVEL files when necessary.''' server = self.configfiles.get_config_file(SERVER) if param == "no": |