| 1824,7 → 1824,7 |
|---|
| # sshd autorise les connections root par certificat |
| $SED "s?^PermitRootLogin.*?PermitRootLogin without-password?g" /etc/ssh/sshd_config |
| # Put the default values in conf file |
| echo "SSH=off" >> $CONF_FILE |
| echo "SSH=on" >> $CONF_FILE |
| echo "SSH_ADMIN_FROM=0.0.0.0/0.0.0.0" >> $CONF_FILE |
| echo "LDAP=off" >> $CONF_FILE |
| echo "LDAP_IP=0.0.0.0/0.0.0.0" >> $CONF_FILE |
| 1878,7 → 1878,7 |
|---|
| WantedBy=multi-user.target |
| EOF |
| # processes launched at boot time (Systemctl) |
| for i in alcasar-load_balancing mysqld httpd ntpd iptables dnsmasq dnsmasq-blacklist dnsmasq-whitelist dnsmasq-blackhole radiusd nfsen dansguardian freshclam ulogd-ssh ulogd-traceability ulogd-ext-access chilli fail2ban havp tinyproxy vnstat |
| for i in alcasar-load_balancing mysqld httpd ntpd iptables dnsmasq dnsmasq-blacklist dnsmasq-whitelist dnsmasq-blackhole radiusd nfsen dansguardian freshclam ulogd-ssh ulogd-traceability ulogd-ext-access chilli fail2ban havp tinyproxy vnstat sshd |
| do |
| /usr/bin/systemctl -q enable $i.service |
| done |
| 1929,11 → 1929,6 |
|---|
| $SED "/^kernel/s/BOOT_IMAGE=linux /BOOT_IMAGE=linux-nonfb /" /boot/grub/menu.lst |
| $SED "/^gfxmenu/d" /boot/grub/menu.lst |
| fi |
| # Remove unused services and users |
| for svc in sshd |
| do |
| /usr/bin/systemctl -q enable $svc.service |
| done |
| # Load and apply the previous conf file |
| if [ "$mode" = "update" ] |
| then |