1 files changed, 62 insertions, 0 deletions
diff --git a/profile.d/msec.csh b/profile.d/msec.csh
new file mode 100755
index 0000000..0a6bd70
--- /dev/null
+++ b/profile.d/msec.csh
@@ -0,0 +1,62 @@
+# shell security options
+
+if ( -r /etc/security/shell ) then
+	eval `sed -n 's/^\([^#]*\)=\([^#]*\)/set \1=\2;/p' < /etc/security/shell`
+endif
+
+if ( $uid >= 500 ) then
+    if ( ${?UMASK_USER} ) then
+	umask ${UMASK_USER}
+    else
+	umask 022
+    endif
+else
+    if ( ${?UMASK_ROOT} ) then
+	umask ${UMASK_ROOT}
+    else
+	umask 002
+    endif
+endif
+
+
+# (pixel) tcsh doesn't handle directory in the PATH being non-readable
+# in security high, /usr/bin is 751, aka non-readable
+# using unhash *after modifying PATH* fixes the pb
+# So while modifying the PATH, do not rely on the PATH until unhash is done
+
+if ! { (echo "${PATH}" | /bin/grep -q /usr/X11R6/bin) } then
+	setenv PATH "${PATH}:/usr/X11R6/bin"
+endif
+
+if ! { (echo "${PATH}" | /bin/grep -q /usr/games) } then
+	setenv PATH "${PATH}:/usr/games"
+endif
+
+if ( ${?SECURE_LEVEL} ) then
+    if ( ${SECURE_LEVEL} <= 1 ) then
+        if ! { (echo "${PATH}" | /bin/fgrep -q :.) } then
+        	setenv PATH "${PATH}:."
+        endif
+    endif
+endif
+
+# using unhash *after modifying PATH* (see above)
+if (! -r /usr/bin) then
+  unhash
+endif
+
+
+# translate sh variables from /etc/security/shell to their equivalent in csh
+if ( ${?TMOUT} ) then
+    set autologout=`expr $TMOUT / 60`
+endif
+
+if ( ${?HISTFILESIZE} ) then
+    set history=$HISTFILESIZE
+endif
+
+if ( ${?SECURE_LEVEL} ) then
+    setenv SECURE_LEVEL ${SECURE_LEVEL}
+endif
+
+# msec.csh ends here