aboutsummaryrefslogtreecommitdiffstats
path: root/conf/level.secure
blob: bf021db12c09494d56bdb59db29f4239a02c5ae6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
BASE_LEVEL=secure
ALLOW_X_CONNECTIONS=no
CHECK_WRITABLE=yes
ENABLE_IP_SPOOFING_PROTECTION=yes
MAIL_EMPTY_CONTENT=yes
ACCEPT_BROADCASTED_ICMP_ECHO=no
CHECK_PERMS=yes
CHECK_USER_FILES=yes
ENABLE_SUDO=no
ALLOW_XSERVER_TO_LISTEN=no
CHECK_CHKROOTKIT=yes
SHELL_HISTORY_SIZE=100
ALLOW_REBOOT=no
CHECK_SUID_ROOT=yes
SYSLOG_WARN=yes
ENABLE_AT_CRONTAB=no
ACCEPT_BOGUS_ERROR_RESPONSES=no
CHECK_PASSWD=yes
PASSWORD_HISTORY=2
CHECK_SUID_MD5=yes
CHECK_SHOSTS=yes
MAIL_USER=root
ALLOW_AUTOLOGIN=no
ENABLE_PAM_WHEEL_FOR_SU=yes
CHECK_SHADOW=yes
ALLOW_ROOT_LOGIN=no
CHECK_UNOWNED=yes
FIX_UNOWNED=yes
CHECK_USERS=yes
CHECK_GROUPS=yes
ENABLE_CONSOLE_LOG=no
ALLOW_USER_LIST=no
ENABLE_DNS_SPOOFING_PROTECTION=yes
CREATE_SERVER_LINK=remote
ENABLE_PASSWORD=yes
NOTIFY_WARN=no
WIN_PARTS_UMASK=022
CHECK_OPEN_PORT=yes
CHECK_FIREWALL=yes
SHELL_TIMEOUT=600
ALLOW_REMOTE_ROOT_LOGIN=no
ENABLE_LOG_STRANGE_PACKETS=yes
USER_UMASK=077
CHECK_RPM_PACKAGES=yes
CHECK_RPM_INTEGRITY=yes
SECURE_TMP=yes
ENABLE_SULOGIN=yes
ENABLE_PAM_ROOT_FROM_WHEEL=no
MAIL_WARN=yes
ALLOW_XAUTH_FROM_ROOT=no
CHECK_SECURITY=yes
ACCEPT_ICMP_ECHO=yes
PASSWORD_LENGTH=6,1,1
AUTHORIZE_SERVICES=local
ROOT_UMASK=077
ENABLE_MSEC_CRON=yes
TTY_WARN=yes
CHECK_SGID=yes
CHECK_PROMISC=yes
ENABLE_STARTUP_MSEC=yes
ENABLE_STARTUP_PERMS=yes
ALLOW_CURDIR_IN_PATH=no
CHECK_ON_BATTERY=no