diff options
Diffstat (limited to 'init-sh/level3.sh')
| -rwxr-xr-x | init-sh/level3.sh | 64 |
1 files changed, 32 insertions, 32 deletions
diff --git a/init-sh/level3.sh b/init-sh/level3.sh index 1c1cfd9..bfb71ea 100755 --- a/init-sh/level3.sh +++ b/init-sh/level3.sh @@ -12,48 +12,48 @@ else fi # All events logged on tty12 +echo "Loging all messages on tty12 : " AddRules "*.* /dev/tty12" /etc/syslog.conf # login as root from the console allowed +echo "Login as root is allowed (on the console) : " AddRules "tty1" /etc/securetty -AddRules "tty2" /etc/securetty -AddRules "tty3" /etc/securetty -AddRules "tty4" /etc/securetty -AddRules "tty5" /etc/securetty -AddRules "tty6" /etc/securetty - -# Suid Check -AddRules "CHECK_SUID_ROOT=yes" /etc/security/msec/security.conf -AddRules "CHECK_SUID_GROUP=yes" /etc/security/msec/security.conf -AddRules "CHECK_WRITABLE=yes" /etc/security/msec/security.conf -AddRules "CHECK_UNOWNED=yes" /etc/security/msec/security.conf -AddRules "CHECK_PROMISC=no" /etc/security/msec/security.conf -AddRules "TTY_WARN=no" /etc/security/msec/security.conf +AddRules "tty2" /etc/securetty quiet +AddRules "tty3" /etc/securetty quiet +AddRules "tty4" /etc/securetty quiet +AddRules "tty5" /etc/securetty quiet +AddRules "tty6" /etc/securetty quiet + +# / +echo "Updating file check variable : " +echo -e "\t- Check suid root file : yes." +AddRules "CHECK_SUID_ROOT=yes" /etc/security/msec/security.conf quiet +echo -e "\t- Check suid goup file : yes." +AddRules "CHECK_SUID_GROUP=yes" /etc/security/msec/security.conf quiet +echo -e "\t- Check world writable file : yes." +AddRules "CHECK_WRITABLE=yes" /etc/security/msec/security.conf quiet +echo -e "\t- Check unowned file : yes." +AddRules "CHECK_UNOWNED=yes" /etc/security/msec/security.conf quiet +echo -e "\t- Check promiscuous mode : \"no\" :" +AddRules "CHECK_PROMISC=no" /etc/security/msec/security.conf quiet +echo -e "\t- Security warning on tty : \"no\" :" +AddRules "TTY_WARN=no" /etc/security/msec/security.conf quiet +echo -e "\t- Security warning on syslog : \"yes\" :" AddRules "SYSLOG_WARN=yes" /etc/security/msec/security.conf # Crontab +echo "Adding permission check in crontab (scheduled every midnight) :" AddRules "0 0-23 * * * root nice --adjustment=+19 /etc/security/msec/cron-sh/file_check.sh" /etc/crontab +echo -n "Running lilo to record new config : " +/sbin/lilo >& /dev/null +echo -e "done.\n" -# Permissions +# /etc/profile +echo "Setting secure level variable to 3 :" +AddRules "SECURE_LEVEL=3" /etc/profile +echo "Setting umask to 022 (user = rw, group = r, o = r) :" AddRules "umask 022" /etc/profile -AddRules "SECURE_LEVEL=3 /etc/profile - -/sbin/lilo - - -# Path +echo "Adding a \"normal\" PATH variable : " AddRules "PATH=\$PATH:/usr/X11R6/bin" /etc/profile - - - - - - - - - - - - |