#!/bin/bash # # Security level implementation... # Writen by Vandoorselaere Yoann # if [ -f /etc/security/msec/init-sh/lib.sh ]; then . /etc/security/msec/init-sh/lib.sh else exit 1 fi # login as root on console granted... AddRules "tty1" /etc/securetty AddRules "tty2" /etc/securetty AddRules "tty3" /etc/securetty AddRules "tty4" /etc/securetty AddRules "tty5" /etc/securetty AddRules "tty6" /etc/securetty # Suid Check AddRules "CHECK_SUID=no" /etc/security/msec/security.conf AddRules "CHECK_PROMISC=no" /etc/security/msec/security.conf AddRules "TTY_WARN=no" /etc/security/msec/security.conf AddRules "SYSLOG_WARN=yes" /etc/security/msec/security.conf # umask AddRules "umask 022" /etc/profile # Group usermod -G audio "${USERNAME}" # For X auth : xhost + localhost 2>&1 >& /dev/null # lilo update lilo # Path if [ ${HAVE_X}==1 ]; then AddRules "PATH=$PATH:/usr/X11R6/bin:." /etc/profile else AddRUles "PATH=$PATH:." /etc/profile fi