From b57cda9734af353d56ddb926f6f1068450d52f58 Mon Sep 17 00:00:00 2001 From: Eugeni Dodonov Date: Tue, 6 Jan 2009 22:30:52 +0000 Subject: Added updated profile.d files. --- profile.d/msec.csh | 62 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 62 insertions(+) create mode 100755 profile.d/msec.csh (limited to 'profile.d/msec.csh') diff --git a/profile.d/msec.csh b/profile.d/msec.csh new file mode 100755 index 0000000..0a6bd70 --- /dev/null +++ b/profile.d/msec.csh @@ -0,0 +1,62 @@ +# shell security options + +if ( -r /etc/security/shell ) then + eval `sed -n 's/^\([^#]*\)=\([^#]*\)/set \1=\2;/p' < /etc/security/shell` +endif + +if ( $uid >= 500 ) then + if ( ${?UMASK_USER} ) then + umask ${UMASK_USER} + else + umask 022 + endif +else + if ( ${?UMASK_ROOT} ) then + umask ${UMASK_ROOT} + else + umask 002 + endif +endif + + +# (pixel) tcsh doesn't handle directory in the PATH being non-readable +# in security high, /usr/bin is 751, aka non-readable +# using unhash *after modifying PATH* fixes the pb +# So while modifying the PATH, do not rely on the PATH until unhash is done + +if ! { (echo "${PATH}" | /bin/grep -q /usr/X11R6/bin) } then + setenv PATH "${PATH}:/usr/X11R6/bin" +endif + +if ! { (echo "${PATH}" | /bin/grep -q /usr/games) } then + setenv PATH "${PATH}:/usr/games" +endif + +if ( ${?SECURE_LEVEL} ) then + if ( ${SECURE_LEVEL} <= 1 ) then + if ! { (echo "${PATH}" | /bin/fgrep -q :.) } then + setenv PATH "${PATH}:." + endif + endif +endif + +# using unhash *after modifying PATH* (see above) +if (! -r /usr/bin) then + unhash +endif + + +# translate sh variables from /etc/security/shell to their equivalent in csh +if ( ${?TMOUT} ) then + set autologout=`expr $TMOUT / 60` +endif + +if ( ${?HISTFILESIZE} ) then + set history=$HISTFILESIZE +endif + +if ( ${?SECURE_LEVEL} ) then + setenv SECURE_LEVEL ${SECURE_LEVEL} +endif + +# msec.csh ends here -- cgit v1.2.1