diff options
| author | Yoann Vandoorselaere <yoann@mandriva.com> | 1999-11-30 15:47:11 +0000 |
|---|---|---|
| committer | Yoann Vandoorselaere <yoann@mandriva.com> | 1999-11-30 15:47:11 +0000 |
| commit | 6993d7456f2e542095deec62549d467e6e9a7057 (patch) | |
| tree | 0ab7fbc7733b95c70c32012bf84a42354082bf72 /init-sh/level3.sh | |
| parent | 79c42eeb075ae7d7bbb3b03165267d5ebe81bb63 (diff) | |
| download | msec-6993d7456f2e542095deec62549d467e6e9a7057.tar msec-6993d7456f2e542095deec62549d467e6e9a7057.tar.gz msec-6993d7456f2e542095deec62549d467e6e9a7057.tar.bz2 msec-6993d7456f2e542095deec62549d467e6e9a7057.tar.xz msec-6993d7456f2e542095deec62549d467e6e9a7057.zip | |
Many cron security check added.
Now report what it does ( msec ).
Diffstat (limited to 'init-sh/level3.sh')
| -rwxr-xr-x | init-sh/level3.sh | 37 |
1 files changed, 24 insertions, 13 deletions
diff --git a/init-sh/level3.sh b/init-sh/level3.sh index bfb71ea..29ea9b7 100755 --- a/init-sh/level3.sh +++ b/init-sh/level3.sh @@ -24,22 +24,33 @@ AddRules "tty4" /etc/securetty quiet AddRules "tty5" /etc/securetty quiet AddRules "tty6" /etc/securetty quiet -# / +# Security check echo "Updating file check variable : " echo -e "\t- Check suid root file : yes." -AddRules "CHECK_SUID_ROOT=yes" /etc/security/msec/security.conf quiet -echo -e "\t- Check suid goup file : yes." -AddRules "CHECK_SUID_GROUP=yes" /etc/security/msec/security.conf quiet + AddRules "CHECK_SUID_ROOT=yes" /etc/security/msec/security.conf quiet +echo -e "\t- Check suid root file integrity (backdoor check) : yes." + AddRules "CHECK_SUID_MD5=yes" /etc/security/msec/security.conf quiet +echo -e "\t- Check suid group file : no." + AddRules "CHECK_SUID_GROUP=no" /etc/security/msec/security.conf quiet echo -e "\t- Check world writable file : yes." -AddRules "CHECK_WRITABLE=yes" /etc/security/msec/security.conf quiet -echo -e "\t- Check unowned file : yes." -AddRules "CHECK_UNOWNED=yes" /etc/security/msec/security.conf quiet -echo -e "\t- Check promiscuous mode : \"no\" :" -AddRules "CHECK_PROMISC=no" /etc/security/msec/security.conf quiet -echo -e "\t- Security warning on tty : \"no\" :" -AddRules "TTY_WARN=no" /etc/security/msec/security.conf quiet -echo -e "\t- Security warning on syslog : \"yes\" :" -AddRules "SYSLOG_WARN=yes" /etc/security/msec/security.conf + AddRules "CHECK_WRITABLE=yes" /etc/security/msec/security.conf quiet +echo -e "\t- Check unowned file : no." + AddRules "CHECK_UNOWNED=no" /etc/security/msec/security.conf quiet +echo -e "\t- Check promiscuous mode : no." + AddRules "CHECK_PROMISC=yes" /etc/security/msec/security.conf quiet +echo -e "\t- Check listening port : yes." + AddRules "CHECK_OPEN_PORT=yes" /etc/security/msec/security.conf quiet +echo -e "\t- Check for dangerous .[sr]hosts file : yes." + AddRules "CHECK_RHOST=yes" /etc/security/msec/security.conf quiet +echo -e "\t- Check passwd file integrity : yes." + AddRules "CHECK_PASSWD=yes" /etc/security/msec/security.conf quiet +echo -e "\t- Check shadow file integrity : yes." + AddRules "CHECK_SHADOW=yes" /etc/security/msec/security.conf quiet +echo -e "\t- Security warning on tty : \"yes\" :" + AddRules "TTY_WARN=no" /etc/security/msec/security.conf quiet +echo -e "\t- Security warning in syslog : \"yes\" :" + AddRules "SYSLOG_WARN=yes" /etc/security/msec/security.conf +# end security check # Crontab echo "Adding permission check in crontab (scheduled every midnight) :" |