diff options
| -rw-r--r-- | doc/msec.spec | 5 | ||||
| -rwxr-xr-x | init-sh/level4.sh | 9 | ||||
| -rwxr-xr-x | init-sh/level5.sh | 16 |
3 files changed, 16 insertions, 14 deletions
diff --git a/doc/msec.spec b/doc/msec.spec index 5324cbf..936c56b 100644 --- a/doc/msec.spec +++ b/doc/msec.spec @@ -1,7 +1,7 @@ Summary: Security Level & Program for the Linux Mandrake distribution Name: msec Version: 0.3 -Release: 5mdk +Release: 6mdk Source: ftp://mandrakesoft.com/pub/yoann/msec-0.3.tar.gz Copyright: GPL Group: System Environment/Base @@ -47,6 +47,9 @@ rm -rf $RPM_BUILD_ROOT %changelog * Thu Nov 25 1999 Yoann Vandoorselaere <yoann@mandrakesoft.com> +- Call chkconfig with the new --msec option. + +* Thu Nov 25 1999 Yoann Vandoorselaere <yoann@mandrakesoft.com> - Cleaned up tree. * Thu Nov 25 1999 Yoann Vandoorselaere <yoann@mandrakesoft.com> diff --git a/init-sh/level4.sh b/init-sh/level4.sh index 283817a..f8e00a1 100755 --- a/init-sh/level4.sh +++ b/init-sh/level4.sh @@ -47,6 +47,15 @@ AddRules "0 0-23 * * * root nice --adjustment=+19 /etc/security/msec/cron- LiloUpdate; /sbin/lilo +# Server update +AddRules "SECURE_LEVEL=4" /etc/profile +export SECURE_LEVEL=4 + +for service in `chkconfig --list | awk '{print $1}'`; do + chkconfig --del "${service}" + chkconfig --msec --add "${service}" +done + # Permissions AddRules "umask 022" /etc/profile diff --git a/init-sh/level5.sh b/init-sh/level5.sh index f2b7a55..f78de51 100755 --- a/init-sh/level5.sh +++ b/init-sh/level5.sh @@ -39,24 +39,14 @@ LiloUpdate; /sbin/lilo # Disable all server : +AddRules "SECURE_LEVEL=5" /etc/profile IFS=" " +export SECURE_LEVEL=5 for service in `chkconfig --list | awk '{print $1}'`; do - if [ "${service}" == "xfs" ]; then - if [ ${HAVE_X}==1 ]; then - continue; - fi - fi - - if [ "${service}" == "network" ]; then continue; fi - if [ "${service}" == "keytable" ]; then continue; fi - if [ "${service}" == "crond" ]; then continue; fi - if [ "${service}" == "gpm" ]; then continue; fi - if [ "${service}" == "syslog" ]; then continue; fi - - chkconfig --del "${service}" + chkconfig --msec --add "${service}" done # Permissions |