diff options
Diffstat (limited to 'init-sh/level1.sh')
| -rwxr-xr-x | init-sh/level1.sh | 49 |
1 files changed, 49 insertions, 0 deletions
diff --git a/init-sh/level1.sh b/init-sh/level1.sh new file mode 100755 index 0000000..acd0622 --- /dev/null +++ b/init-sh/level1.sh @@ -0,0 +1,49 @@ +#!/bin/bash + +# +# Security level implementation... +# Writen by Vandoorselaere Yoann <yoann@mandrakesoft.com> +# + +if [ -f /etc/security/msec/init-sh/lib.sh ]; then + . /etc/security/msec/init-sh/lib.sh +else + exit 1 +fi + +# login as root on console granted... +AddRules "tty1" /etc/securetty +AddRules "tty2" /etc/securetty +AddRules "tty3" /etc/securetty +AddRules "tty4" /etc/securetty +AddRules "tty5" /etc/securetty +AddRules "tty6" /etc/securetty + +# Suid Check +AddRules "CHECK_SUID=no" /etc/security/msec/security.conf +AddRules "CHECK_PROMISC=no" /etc/security/msec/security.conf +AddRules "TTY_WARN=no" /etc/security/msec/security.conf +AddRules "SYSLOG_WARN=yes" /etc/security/msec/security.conf + +# umask +AddRules "umask 022" /etc/profile + +# Group +usermod -G audio "${USERNAME}" + +# For X auth : +xhost + localhost 2>&1 >& /dev/null + +# lilo update +lilo + +# Path +if [ ${HAVE_X}==1 ]; then + AddRules "PATH=$PATH:/usr/X11R6/bin:." /etc/profile +else + AddRUles "PATH=$PATH:." /etc/profile +fi + + + + |