From e77f29ccde48d9f68c47c96a4464eaa878526499 Mon Sep 17 00:00:00 2001 From: Gorden Mende Date: Fri, 8 Jul 2022 11:56:13 +0200 Subject: [PATCH] hardened system --- .etckeeper | 14 +++++++------- issue | 28 +++++++++++++++++++++++++--- issue.net | 31 ++++++++++++++++++++++++++++--- 3 files changed, 60 insertions(+), 13 deletions(-) diff --git a/.etckeeper b/.etckeeper index 24e9b56a..02967845 100755 --- a/.etckeeper +++ b/.etckeeper @@ -430,14 +430,14 @@ maybe chmod 0644 'console-setup/compose.VISCII.inc' maybe chmod 0644 'console-setup/remap.inc' maybe chmod 0755 'cracklib' maybe chmod 0644 'cracklib/cracklib.conf' -maybe chmod 0755 'cron.d' +maybe chmod 0700 'cron.d' maybe chmod 0644 'cron.d/.placeholder' maybe chmod 0644 'cron.d/amavisd-new' maybe chmod 0644 'cron.d/e2scrub_all' maybe chmod 0644 'cron.d/kernel' maybe chmod 0644 'cron.d/php' maybe chmod 0644 'cron.d/sysstat' -maybe chmod 0755 'cron.daily' +maybe chmod 0700 'cron.daily' maybe chmod 0644 'cron.daily/.placeholder' maybe chmod 0755 'cron.daily/00logwatch' maybe chmod 0755 'cron.daily/acct' @@ -454,18 +454,18 @@ maybe chmod 0755 'cron.daily/mlocate' maybe chmod 0755 'cron.daily/ntp' maybe chmod 0755 'cron.daily/rkhunter' maybe chmod 0755 'cron.daily/sysstat' -maybe chmod 0755 'cron.hourly' +maybe chmod 0700 'cron.hourly' maybe chmod 0644 'cron.hourly/.placeholder' -maybe chmod 0755 'cron.monthly' +maybe chmod 0700 'cron.monthly' maybe chmod 0644 'cron.monthly/.placeholder' maybe chmod 0755 'cron.monthly/acct' maybe chmod 0755 'cron.monthly/debsums' -maybe chmod 0755 'cron.weekly' +maybe chmod 0700 'cron.weekly' maybe chmod 0644 'cron.weekly/.placeholder' maybe chmod 0755 'cron.weekly/debsums' maybe chmod 0755 'cron.weekly/man-db' maybe chmod 0755 'cron.weekly/rkhunter' -maybe chmod 0644 'crontab' +maybe chmod 0600 'crontab' maybe chmod 0755 'cruft' maybe chmod 0755 'cruft/filters-unex' maybe chmod 0644 'cruft/filters-unex/etckeeper' @@ -4172,7 +4172,7 @@ maybe chmod 0644 'ssh/ssh_host_key' maybe chmod 0644 'ssh/ssh_host_key.pub' maybe chmod 0600 'ssh/ssh_host_rsa_key' maybe chmod 0644 'ssh/ssh_host_rsa_key.pub' -maybe chmod 0644 'ssh/sshd_config' +maybe chmod 0600 'ssh/sshd_config' maybe chmod 0755 'ssh/sshd_config.d' maybe chmod 0755 'ssl' maybe chmod 0755 'ssl/certs' diff --git a/issue b/issue index c9e8b5ec..628d5a0e 100644 --- a/issue +++ b/issue @@ -1,3 +1,25 @@ -Welcome to solusar.de! -Today is \d \t @ \n -Unauthorized login is forbidden and will be reported! + ##### + ####### + @ ##O#O## + ###### @@# #VVVVV# + ## # ## VVV ## + ## @@@ ### #### ### ### ##### ###### # ## + ## @ @# ### ## ## ## ### ## # ## + ## @ @# ## ## ## ## ### # ### + ## @@# ## ## ## ## ### QQ# ##Q + ## # @@# ## ## ## ## ## ## QQQQQQ# #QQQQQQ + ## ## @@# # ## ## ### ### ## ## QQQQQQQ# #QQQQQQQ + ############ ### #### #### #### ### ##### ###### QQQQQ#######QQQQQ + + +******************************************************************** +* * +* This system is for the use of authorized users only. Usage of * +* this system may be monitored and recorded by system personnel. * +* * +* Anyone using this system expressly consents to such monitoring * +* and is advised that if such monitoring reveals possible * +* evidence of criminal activity, system personnel may provide the * +* evidence from such monitoring to law enforcement officials. * +* * +******************************************************************** diff --git a/issue.net b/issue.net index c9e8b5ec..b3b82eee 100644 --- a/issue.net +++ b/issue.net @@ -1,3 +1,28 @@ -Welcome to solusar.de! -Today is \d \t @ \n -Unauthorized login is forbidden and will be reported! + ##### + ####### + @ ##O#O## + ###### @@# #VVVVV# + ## # ## VVV ## + ## @@@ ### #### ### ### ##### ###### # ## + ## @ @# ### ## ## ## ### ## # ## + ## @ @# ## ## ## ## ### # ### + ## @@# ## ## ## ## ### QQ# ##Q + ## # @@# ## ## ## ## ## ## QQQQQQ# #QQQQQQ + ## ## @@# # ## ## ### ### ## ## QQQQQQQ# #QQQQQQQ + ############ ### #### #### #### ### ##### ###### QQQQQ#######QQQQQ + + +******************************************************************** +* * +* This system is for the use of authorized users only. Usage of * +* this system may be monitored and recorded by system personnel. * +* * +* Anyone using this system expressly consents to such monitoring * +* and is advised that if such monitoring reveals possible * +* evidence of criminal activity, system personnel may provide the * +* evidence from such monitoring to law enforcement officials. * +* * +******************************************************************** + + +