aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorYoann Vandoorselaere <yoann@mandriva.com>2000-04-14 16:35:47 +0000
committerYoann Vandoorselaere <yoann@mandriva.com>2000-04-14 16:35:47 +0000
commitab99d20693624454a3deeefeb1f502cbb02a4e0f (patch)
tree820a1e92e2d0e3d7ad5960438a5df7093af7f44b
parente29a077281f5a00c03931445293d2899e864f124 (diff)
downloadmsec-ab99d20693624454a3deeefeb1f502cbb02a4e0f.tar
msec-ab99d20693624454a3deeefeb1f502cbb02a4e0f.tar.gz
msec-ab99d20693624454a3deeefeb1f502cbb02a4e0f.tar.bz2
msec-ab99d20693624454a3deeefeb1f502cbb02a4e0f.tar.xz
msec-ab99d20693624454a3deeefeb1f502cbb02a4e0f.zip
*** empty log message ***
-rwxr-xr-xinit-sh/custom.sh13
-rwxr-xr-xinit-sh/level0.sh6
-rwxr-xr-xinit-sh/level1.sh7
-rwxr-xr-xinit-sh/level2.sh6
-rwxr-xr-xinit-sh/level3.sh6
-rwxr-xr-xinit-sh/level4.sh8
-rwxr-xr-xinit-sh/level5.sh9
7 files changed, 51 insertions, 4 deletions
diff --git a/init-sh/custom.sh b/init-sh/custom.sh
index 7cf7439..38f18cc 100755
--- a/init-sh/custom.sh
+++ b/init-sh/custom.sh
@@ -84,7 +84,8 @@ echo "this is done by searching in the stack frame the one which contain the"
echo "destination address, and by substracting the frame address to the destination buffer one"
WaitAnswer; clear
if [[ ${answer} == yes ]]; then
- AddRules "export LD_PRELOAD=/usr/lib/libsafe.so.1.2" /etc/profile
+ AddRules "export LD_PRELOAD=/usr/lib/libsafe.so.1.3" /etc/profile
+ AddRules "export LD_PRELOAD=/usr/lib/libsafe.so.1.3" /etc/zprofile
fi
fi
@@ -227,8 +228,10 @@ WaitAnswer; clear
if [[ ${answer} == yes ]]; then
export SECURE_LEVEL="4"
AddRules "SECURE_LEVEL=\"4\"" /etc/profile
+ AddRules "SECURE_LEVEL=\"4\"" /etc/zprofile
else
AddRules "SECURE_LEVEL=\"3\"" /etc/profile
+ AddRules "SECURE_LEVEL=\"3\"" /etc/zprofile
fi
###
@@ -246,15 +249,19 @@ done
case "${answer}" in
"easy")
AddRules "umask 002" /etc/profile
+ AddRules "umask 002" /etc/zprofile
;;
"normal")
AddRules "umask 022" /etc/profile
+ AddRules "umask 022" /etc/zprofile
;;
"restricted")
AddRules "if [[ \${UID} == 0 ]]; then umask 022; else umask 077; fi" /etc/profile
+ AddRules "if [[ \${UID} == 0 ]]; then umask 022; else umask 077; fi" /etc/zprofile
;;
"paranoid")
AddRules "umask 077" /etc/profile
+ AddRules "umask 077" /etc/zprofile
;;
esac
@@ -388,11 +395,15 @@ echo "However this is a *high* security risk."
WaitAnswer; clear
if [[ ${answer} == yes ]]; then
AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games:." /etc/profile quiet
+ AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games:." /etc/zprofile quiet
else
AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games" /etc/profile quiet
+ AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games" /etc/zprofile quiet
fi
AddRules "export PATH SECURE_LEVEL" /etc/profile
+AddRules "export PATH SECURE_LEVEL" /etc/zprofile
+
diff --git a/init-sh/level0.sh b/init-sh/level0.sh
index 00dc54c..b67bdd8 100755
--- a/init-sh/level0.sh
+++ b/init-sh/level0.sh
@@ -63,11 +63,17 @@ echo -e "done.\n"
export SECURE_LEVEL=0
echo "Setting secure level variable to 0 :"
AddRules "SECURE_LEVEL=0" /etc/profile
+AddRules "SECURE_LEVEL=0" /etc/zprofile
+
echo "Setting umask to 002 (u=rw,g=rw,o=r) :"
AddRules "umask 002" /etc/profile
+AddRules "umask 002" /etc/zprofile
+
echo "Adding \"non secure\" PATH variable :"
AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games:." /etc/profile quiet
AddRules "export PATH SECURE_LEVEL" /etc/profile
+AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games:." /etc/zprofile quiet
+AddRules "export PATH SECURE_LEVEL" /etc/zprofile
# Xserver
echo "Allowing users to connect X server from everywhere :"
diff --git a/init-sh/level1.sh b/init-sh/level1.sh
index 0c17880..3aa5b04 100755
--- a/init-sh/level1.sh
+++ b/init-sh/level1.sh
@@ -63,12 +63,17 @@ echo -e "done.\n"
export SECURE_LEVEL=1
echo "Setting secure level variable to 1 :"
AddRules "SECURE_LEVEL=1" /etc/profile
+AddRules "SECURE_LEVEL=1" /etc/zprofile
+
echo "Setting umask to 002 (u=rw,g=rw,o=r) :"
AddRules "umask 002" /etc/profile
+AddRules "umask 002" /etc/zprofile
+
echo "Adding \"non secure\" PATH variable :"
AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games:." /etc/profile quiet
AddRules "export PATH SECURE_LEVEL" /etc/profile
-
+AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games:." /etc/zprofile quiet
+AddRules "export PATH SECURE_LEVEL" /etc/zprofile
# Xserver
echo "Allowing users to connect X server from localhost :"
diff --git a/init-sh/level2.sh b/init-sh/level2.sh
index 9348529..5e11b9f 100755
--- a/init-sh/level2.sh
+++ b/init-sh/level2.sh
@@ -64,11 +64,17 @@ echo -e "done.\n"
export SECURE_LEVEL=2
echo "Setting secure level variable to 2 :"
AddRules "SECURE_LEVEL=2" /etc/profile
+AddRules "SECURE_LEVEL=2" /etc/zprofile
+
echo "Setting umask to 022 (u=rw,g=r,o=r) :"
AddRules "umask 022" /etc/profile
+AddRules "umask 022" /etc/zprofile
+
echo "Adding \"normal\" PATH variable :"
AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games" /etc/profile quiet
AddRules "export PATH SECURE_LEVEL" /etc/profile
+AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games" /etc/zprofile quiet
+AddRules "export PATH SECURE_LEVEL" /etc/zprofile
# Xserver
echo "Allowing users to connect X server from localhost :"
diff --git a/init-sh/level3.sh b/init-sh/level3.sh
index bf53c66..20cb713 100755
--- a/init-sh/level3.sh
+++ b/init-sh/level3.sh
@@ -71,11 +71,17 @@ echo -e "done.\n"
export SECURE_LEVEL=3
echo "Setting secure level variable to 3 :"
AddRules "SECURE_LEVEL=3" /etc/profile
+AddRules "SECURE_LEVEL=3" /etc/zprofile
+
echo "Setting umask to 022 (u=rw,g=r,o=r) :"
AddRules "umask 022" /etc/profile
+AddRules "umask 022" /etc/zprofile
+
echo "Adding a \"normal\" PATH variable : "
AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games" /etc/profile quiet
AddRules "export PATH SECURE_LEVEL" /etc/profile
+AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games" /etc/zprofile quiet
+AddRules "export PATH SECURE_LEVEL" /etc/zprofile
# Do not boot on a shell
echo -n "Setting up inittab to authorize any user to issue ctrl-alt-del : "
diff --git a/init-sh/level4.sh b/init-sh/level4.sh
index f10fb54..ab72a2e 100755
--- a/init-sh/level4.sh
+++ b/init-sh/level4.sh
@@ -82,6 +82,8 @@ echo -e "done.\n"
# Server update
echo "Setting secure level variable to 4 :"
AddRules "SECURE_LEVEL=4" /etc/profile
+AddRules "SECURE_LEVEL=4" /etc/zprofile
+
export SECURE_LEVEL=4
IFS="
@@ -105,14 +107,18 @@ echo -e "done.\n";
# /etc/profile
echo "Setting umask to 022 (u=rw,g=rx) for root, 077 (u=rw) for user :"
AddRules "if [[ \${UID} == 0 ]]; then umask 022; else umask 077; fi" /etc/profile
+AddRules "if [[ \${UID} == 0 ]]; then umask 022; else umask 077; fi" /etc/zprofile
echo "Adding \"normal\" PATH variable :"
AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games" /etc/profile quiet
AddRules "export PATH SECURE_LEVEL" /etc/profile
+AddRules "PATH=\$PATH:/usr/X11R6/bin:/usr/games" /etc/zprofile quiet
+AddRules "export PATH SECURE_LEVEL" /etc/zprofile
if [[ -f /usr/lib/libsafe.so.1.2 ]]; then
echo "Enabling stack overflow protection :"
- AddRules "export LD_PRELOAD=/usr/lib/libsafe.so.1.2" /etc/profile
+ AddRules "export LD_PRELOAD=/usr/lib/libsafe.so.1.3" /etc/profile
+ AddRules "export LD_PRELOAD=/usr/lib/libsafe.so.1.3" /etc/zprofile
fi
# Do not boot on a shell
diff --git a/init-sh/level5.sh b/init-sh/level5.sh
index 0d9b58c..195b354 100755
--- a/init-sh/level5.sh
+++ b/init-sh/level5.sh
@@ -96,6 +96,8 @@ echo -e "done.\n"
# Disable all server :
echo "Setting secure level variable to 5 :"
AddRules "SECURE_LEVEL=5" /etc/profile
+AddRules "SECURE_LEVEL=5" /etc/zprofile
+
IFS="
"
@@ -119,14 +121,19 @@ echo -e "done.\n";
# /etc/profile
echo "Setting umask to 077 (u=rw) :"
AddRules "umask 077" /etc/profile
+AddRules "umask 077" /etc/zprofile
echo "Adding \"normal\" PATH variable :"
AddRules "PATH=\$PATH:/usr/X11R6/bin" /etc/profile quiet
AddRules "export PATH SECURE_LEVEL" /etc/profile
+AddRules "PATH=\$PATH:/usr/X11R6/bin" /etc/zprofile quiet
+AddRules "export PATH SECURE_LEVEL" /etc/zprofile
+
if [[ -f /usr/lib/libsafe.so.1.2 ]]; then
echo "Enabling stack overflow protection :"
- AddRules "export LD_PRELOAD=/usr/lib/libsafe.so.1.2" /etc/profile
+ AddRules "export LD_PRELOAD=/usr/lib/libsafe.so.1.3" /etc/profile
+ AddRules "export LD_PRELOAD=/usr/lib/libsafe.so.1.3" /etc/zprofile
fi
# Do not boot on a shell