Subversion Repositories ALCASAR

Rev

Rev 2206 | Rev 2213 | Go to most recent revision | Show entire file | Ignore whitespace | Details | Blame | Last modification | View Log

Rev 2206 Rev 2211
Line 1... Line 1...
1 
#!/bin/bash
 1 
#!/bin/bash
2 
#  $Id: alcasar.sh 2206 2017-05-06 17:58:56Z richard $
2 
#  $Id: alcasar.sh 2211 2017-05-08 16:39:43Z richard $
3 
 
 3 
 
4 
# alcasar.sh
 4 
# alcasar.sh
5 
 
 5 
 
6 
# ALCASAR Install script -  CopyLeft ALCASAR Team [Rexy + 3abtux + Steweb + Crox + ...]
6 
# ALCASAR Install script -  CopyLeft ALCASAR Team [Rexy + 3abtux + Steweb + Crox + ...]
7 
# Ce programme est un logiciel libre ; This software is free and open source
 7 
# Ce programme est un logiciel libre ; This software is free and open source
Line 1872... Line 1872...
1872 
##################################################################
 1872 
##################################################################
1873 
msec()
 1873 
msec()
1874 
{
 1874 
{
1875 
 
 1875 
 
1876 
# Apply fileserver security level
 1876 
# Apply fileserver security level
1877 
$SED "s?BASE_LEVEL=.*?BASE_LEVEL=fileserver?g" /etc/security/msec/security.conf
 1877 
[ -e /etc/security/msec/security.conf.default ] || cp /etc/security/msec/security.conf /etc/security/msec/security.conf.default
1878 
# Disable Magic SysReq Keys
 - 
 
1879 
$SED "s?^ALLOW_REBOOT=.*?ALLOW_REBOOT=no?g" /etc/security/msec/level.fileserver
 1878 
echo "BASE_LEVEL=fileserver" > /etc/security/msec/security.conf
1880 
 
 1879 
 
1881 
# Set permissions monitoring and enforcement
 1880 
# Set permissions monitoring and enforcement
1882 
cat <<EOF > /etc/security/msec/perm.local
 1881 
cat <<EOF > /etc/security/msec/perm.local
1883 
/var/log/firefwall/                     root.apache     750
 1882 
/var/log/firefwall/                     root.apache     750
1884 
/var/log/firewall/*                     root.apache     640
 1883 
/var/log/firewall/*                     root.apache     640
Line 1890... Line 1889...
1890 
/etc/raddb/ldap.attrmap                 root.radius     640
 1889 
/etc/raddb/ldap.attrmap                 root.radius     640
1891 
/etc/raddb/hints                        root.radius     640
 1890 
/etc/raddb/hints                        root.radius     640
1892 
/etc/raddb/huntgroups                   root.radius     640
 1891 
/etc/raddb/huntgroups                   root.radius     640
1893 
/etc/raddb/attrs.access_reject          root.radius     640
 1892 
/etc/raddb/attrs.access_reject          root.radius     640
1894 
/etc/raddb/attrs.accounting_response    root.radius     640
 1893 
/etc/raddb/attrs.accounting_response    root.radius     640
1895 
/etc/raddb/acct_users                   root.raidus     640
 1894 
/etc/raddb/acct_users                   root.radius     640
1896 
/etc/raddb/preproxy_users               root.radius     640
 1895 
/etc/raddb/preproxy_users               root.radius     640
1897 
/etc/raddb/modules/ldap                 radius.apache   660
 1896 
/etc/raddb/modules/ldap                 radius.apache   660
1898 
/etc/raddb/sites-available/alcasar      radius.apache   660
 1897 
/etc/raddb/sites-available/alcasar      radius.apache   660
1899 
/etc/pki/*                              root.apache     750
 1898 
/etc/pki/*                              root.apache     750
1900 
/var/log/netflow/porttracker            apache.apache   770
 1899 
/var/log/netflow/porttracker            root.apache     770
1901 
/var/log/netflow/porttracker/*          apache.apache   770
 1900 
/var/log/netflow/porttracker/*          root.apache     660
1902 
EOF
 1901 
EOF
1903 
# apply now
 1902 
# apply now hourly & daily checks
1904 
/usr/sbin/msec
 1903 
/usr/sbin/msec
- 
 
 1904 
/etc/cron.weekly/msec
1905 
 
 1905 
 
1906 
} # END msec()
 1906 
} # END msec()
1907 
 
 1907 
 
1908 
##################################################################
 1908 
##################################################################
1909 
##		Fonction "post_install"			##
 1909 
##		Fonction "post_install"			##