| Line 1... |
Line 1... |
| 1 |
#!/bin/bash
|
1 |
#!/bin/bash
|
| 2 |
# $Id: alcasar.sh 2818 2020-05-10 21:53:28Z rexy $
|
2 |
# $Id: alcasar.sh 2821 2020-05-22 17:47:43Z rexy $
|
| 3 |
|
3 |
|
| 4 |
# alcasar.sh
|
4 |
# alcasar.sh
|
| 5 |
# ALCASAR is a Free and open source NAC created by Franck BOUIJOUX (3abtux), Pascal LEVANT and Richard REY (Rexy)
|
5 |
# ALCASAR is a Free and open source NAC created by Franck BOUIJOUX (3abtux), Pascal LEVANT and Richard REY (Rexy)
|
| 6 |
# This script is distributed under the Gnu General Public License (GPL)
|
6 |
# This script is distributed under the Gnu General Public License (GPL)
|
| 7 |
# team@alcasar.net
|
7 |
# team@alcasar.net
|
| Line 758... |
Line 758... |
| 758 |
CA()
|
758 |
CA()
|
| 759 |
{
|
759 |
{
|
| 760 |
$DIR_DEST_BIN/alcasar-CA.sh
|
760 |
$DIR_DEST_BIN/alcasar-CA.sh
|
| 761 |
chmod 755 /etc/pki/
|
761 |
chmod 755 /etc/pki/
|
| 762 |
chown root:apache /etc/pki/CA; chmod 750 /etc/pki/CA
|
762 |
chown root:apache /etc/pki/CA; chmod 750 /etc/pki/CA
|
| 763 |
chmod 640 /etc/pki/CA/*
|
763 |
chown root:apache /etc/pki/CA/alcasar-ca.crt; chmod 640 /etc/pki/CA/alcasar-ca.crt
|
| 764 |
chown root:root /etc/pki/CA/private; chmod 700 /etc/pki/CA/private
|
764 |
chown root:root /etc/pki/CA/private; chmod 700 /etc/pki/CA/private
|
| 765 |
chmod 600 /etc/pki/CA/private/*
|
765 |
chmod 600 /etc/pki/CA/private/*
|
| 766 |
chown -R root:apache /etc/pki/tls/private; chmod 750 /etc/pki/tls/private
|
766 |
chown -R root:apache /etc/pki/tls/private; chmod 750 /etc/pki/tls/private
|
| 767 |
chmod 640 /etc/pki/tls/private/*
|
767 |
chmod 640 /etc/pki/tls/private/*
|
| 768 |
chmod 644 /etc/pki/tls/certs/* # "freshclam" need to access to that bundle
|
768 |
chmod 644 /etc/pki/tls/certs/* # "freshclam" need to access to that bundle
|