diff options
| author | Yoann Vandoorselaere <yoann@mandriva.com> | 2000-01-04 12:37:33 +0000 |
|---|---|---|
| committer | Yoann Vandoorselaere <yoann@mandriva.com> | 2000-01-04 12:37:33 +0000 |
| commit | 7302e9630ba3d551368b16454b890806056c68b1 (patch) | |
| tree | 3fa91f8e418e390195b95e9a83bc2ddf4a49d7ef /init-sh | |
| parent | 2a35c73522dd3c6a4601d6bd7222524f9cf04450 (diff) | |
| download | msec-7302e9630ba3d551368b16454b890806056c68b1.tar msec-7302e9630ba3d551368b16454b890806056c68b1.tar.gz msec-7302e9630ba3d551368b16454b890806056c68b1.tar.bz2 msec-7302e9630ba3d551368b16454b890806056c68b1.tar.xz msec-7302e9630ba3d551368b16454b890806056c68b1.zip | |
*** empty log message ***
Diffstat (limited to 'init-sh')
| -rwxr-xr-x | init-sh/custom.sh | 46 |
1 files changed, 44 insertions, 2 deletions
diff --git a/init-sh/custom.sh b/init-sh/custom.sh index 99154f9..057a288 100755 --- a/init-sh/custom.sh +++ b/init-sh/custom.sh @@ -9,7 +9,6 @@ if [[ -f /etc/security/msec/init-sh/lib.sh ]]; then . /etc/security/msec/init-sh/lib.sh fi - clear ### @@ -20,6 +19,21 @@ if [[ ${answer} == yes ]]; then fi ### +echo "Do you want to only allow ctrl-alt-del if root is logged locally ?" +echo "( or if an user present in /etc/shutdown.allow is logged locally )" +WaitAnswer; clear +tmpfile=`mktemp tmp/secure.XXXXXX` +cp /etc/inittab ${tmpfile} +if [[ ${answer} == yes ]]; then + cat ${tmpfile} | \ + sed s'/ca::ctrlaltdel:\/sbin\/shutdown -t3 -r now/ca::ctrlaltdel:\/sbin\/shutdown -a -t3 -r now/' > /etc/inittab +else + cat ${tmpfile} | \ + sed s'/ca::ctrlaltdel:\/sbin\/shutdown -a -t3 -r now/ca::ctrlaltdel:\/sbin\/shutdown -t3 -r now/' > /etc/inittab +fi +rm -f ${tmpfile} + +### echo "Do you want to deny any machine to connect to yours ?" WaitAnswer if [[ ${answer} == yes ]]; then @@ -36,7 +50,7 @@ fi echo "Do you want root console login to be allowed ?" WaitAnswer; clear if [[ ${answer} == yes ]]; then - AddRules "tty1" /etc/securetty quiet +g AddRules "tty1" /etc/securetty quiet AddRules "tty2" /etc/securetty quiet AddRules "tty3" /etc/securetty quiet AddRules "tty4" /etc/securetty quiet @@ -117,6 +131,34 @@ if [[ ${answer} == yes ]]; then fi ### +echo "Do you want security report to be done directly on the console ?" +WaitAnswer; clear +if [[ ${answer} == yes ]]; then + AddRules "TTY_WARN=yes" /etc/security/msec/security.conf +else + AddRules "TTY_WARN=no" /etc/security/msec/security.conf +fi +### + +echo "Do you want security report to be done in syslog ?" +WaitAnswer; clear +if [[ ${answer} == yes ]]; then + AddRules "SYSLOG_WARN=yes" /etc/security/msec/security.conf +else + AddRules "SYSLOG_WARN=no" /etc/security/msec/security.conf +fi +### + +echo "Do you want security report to be done by mail ?" +WaitAnswer; clear +if [[ ${answer} == yes ]]; then + AddRules "MAIL_WARN=yes" /etc/security/msec/security.conf +else + AddRules "MAIL_WARN=no" /etc/security/msec/security.conf +fi +### + + LiloUpdate; /sbin/lilo >& /dev/null |