diff options
Diffstat (limited to 'init-sh/level4.sh')
-rwxr-xr-x | init-sh/level4.sh | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/init-sh/level4.sh b/init-sh/level4.sh index 69df158..b4d3d7a 100755 --- a/init-sh/level4.sh +++ b/init-sh/level4.sh @@ -111,6 +111,38 @@ if [[ -f /lib/libsafe.so.2 ]]; then AddRules "/lib/libsafe.so.2" /etc/ld.so.preload fi +# Console timeout +echo "Setting console timeout :" +AddRules "TMOUT=7200" /etc/sysconfig/msec + +# No history file +echo "No history file :" +AddRules "HISTFILESIZE=0" /etc/sysconfig/msec + +# Ip spoofing protection +echo "IP spoofing protection :" +AddRules "nospoof on" /etc/host.conf +AddRules "spoofalert on" /etc/host.conf + +# icmp echo +echo "Ignoring icmp echo :" +AddRules "net.ipv4.icmp_echo_ignore_all=1" /etc/sysctl.conf +AddRules "net.ipv4.icmp_echo_ignore_broadcasts=1" /etc/sysctl.conf + +# bad error +echo "Enabling bad error message Protection :" +AddRules "net.ipv4.icmp_ignore_bogus_error_responses=1" /etc/sysctl.conf + +# log strange packets +echo "Enabling logging Spoofed Packets, Source Routed Packets, Redirect Packets :" +AddRules "net.ipv4.conf.all.log_martians=1" /etc/sysctl.conf + +LoadSysctl + +# issues +echo "Removing /etc/issue.net :" +RemoveIssueNet + # Do not boot on a shell ForbidReboot |