modified: install_shell/audit_patch.sh
deleted: install_shell/cgroup-d5000-install/42-2014-01-15-062120/README deleted: install_shell/cgroup-d5000-install/42-2014-01-15-062120/install.sh modified: install_shell/cgroup-d5000-install/install.sh modified: install_shell/create_users.sh modified: install_shell/ntpd_cron_patch.sh modified: install_shell/other.sh modified: install_shell/set_network.sh modified: install_shell/set_ssh.sh modified: setup.sh Signed-off-by: Qin Bo <bqin@linx-info.com>
This commit is contained in:
@@ -5,22 +5,6 @@ USER_NAME=$1
|
||||
USER_HOME=$2
|
||||
USER_SHELL=$3
|
||||
|
||||
#revise grub.conf
|
||||
chown sysadmin:users /boot/grub
|
||||
chown sysadmin:sysadmin /boot/grub/menu.lst
|
||||
chown sysadmin:users /boot/grub/grub.conf.sample
|
||||
|
||||
grep 'kernel_type' /boot/grub/menu.lst &>/dev/null
|
||||
if [ $? != 0 ];then
|
||||
sed -i '/vmlinuz-root-n/s/$/& kernel_type=noroot/g' /boot/grub/menu.lst
|
||||
fi
|
||||
|
||||
|
||||
#add smartd link
|
||||
|
||||
ln -sf /etc/rc.d/init.d/smartd /etc/rc.d/rc5.d/S101smartd
|
||||
ln -sf /etc/rc.d/init.d/smartd /etc/rc.d/rc3.d/S101smartd
|
||||
|
||||
#revise order
|
||||
grep 4.2.35 /etc/issue &> /dev/null
|
||||
if [ $? = 0 ];then
|
||||
@@ -36,52 +20,6 @@ if [ $? != 0 ];then
|
||||
echo "lsm_linx" >> /etc/sysconfig/modules
|
||||
fi
|
||||
|
||||
|
||||
#for proftp
|
||||
FTP_CONFIG=/etc/proftpd/proftpd.conf
|
||||
grep MaxClients $FTP_CONFIG &> /dev/null
|
||||
if [ $? != 0 ];then
|
||||
sed -i "/MaxInstances/a\#MaxClients 200" $FTP_CONFIG
|
||||
fi
|
||||
|
||||
grep TimesGMT $FTP_CONFIG &>/dev/null
|
||||
if [ $? != 0 ];then
|
||||
sed -i "/MaxInstances/a\#TimesGMT off" $FTP_CONFIG
|
||||
fi
|
||||
|
||||
grep UseReverseDNS $FTP_CONFIG &>/dev/null
|
||||
if [ $? != 0 ];then
|
||||
sed -i "/MaxInstances/a\#UseReverseDNS off" $FTP_CONFIG
|
||||
fi
|
||||
|
||||
grep IdentLookups $FTP_CONFIG &>/dev/null
|
||||
if [ $? != 0 ];then
|
||||
sed -i "/MaxInstances/a\#IdentLookups off" $FTP_CONFIG
|
||||
fi
|
||||
#flag_4_2_40=`grep '4.2.40' /etc/issue|awk '{print $5}'`
|
||||
#if [ -z ${flag_4_2_40} ];then
|
||||
# grep ^UseUTF8 ${FTP_CONFIG} &> /dev/null
|
||||
# if [ $? -ne 0 ];then
|
||||
# echo "UseUTF8 off">> ${FTP_CONFIG}
|
||||
# fi
|
||||
|
||||
#else
|
||||
# grep ^useencoding ${FTP_CONFIG} &> /dev/null
|
||||
# if [ $? -ne 0 ];then
|
||||
# echo "useencoding gbk gbk">> ${FTP_CONFIG}
|
||||
# fi
|
||||
#fi
|
||||
|
||||
grep ^useencoding ${FTP_CONFIG} &> /dev/null
|
||||
if [ $? -ne 0 ];then
|
||||
echo "useencoding gbk gbk">> ${FTP_CONFIG}
|
||||
fi
|
||||
|
||||
grep ^DefaultRoot ${FTP_CONFIG} &> /dev/null
|
||||
if [ $? -ne 0 ];then
|
||||
echo "DefaultRoot ~">> ${FTP_CONFIG}
|
||||
fi
|
||||
|
||||
# revise /etc/rc.d/init.d/functions
|
||||
sed -i '/ENTER/s/^/# &/g' /etc/rc.d/init.d/functions
|
||||
|
||||
@@ -115,10 +53,6 @@ chmod 755 /usr/sbin/linx-watch-top.sh
|
||||
if [ -f /var/spool/cron/crontabs/root ];then
|
||||
rm /var/spool/cron/crontabs/root
|
||||
fi
|
||||
#恢复被netkit-base包覆盖的/etc/inetd.conf文件
|
||||
cp inetd.conf /etc
|
||||
chown root.root /etc/inetd.conf
|
||||
chmod 644 /etc/inetd.conf
|
||||
|
||||
chown audadmin.audadmin /var/log/kernel*
|
||||
chmod 644 /var/log/kernel*
|
||||
@@ -163,10 +97,6 @@ cp os.sh /usr/sbin
|
||||
cp pci.ids /usr/share
|
||||
chown sysadmin.sysadmin /usr/sbin/get_parameter_log.sh
|
||||
chmod 755 /usr/sbin/get_parameter_log.sh
|
||||
chown sysadmin.sysadmin /usr/sbin/dmidecode
|
||||
chmod 755 /usr/sbin/dmidecode
|
||||
chown sysadmin.sysadmin /usr/sbin/lshw
|
||||
chmod 755 /usr/sbin/lshw
|
||||
chown sysadmin.sysadmin /usr/sbin/check_sec_local.sh
|
||||
chmod 755 /usr/sbin/check_sec_local.sh
|
||||
chown sysadmin.sysadmin /usr/sbin/os.sh
|
||||
@@ -221,12 +151,6 @@ else
|
||||
chown ${USER_NAME}.${USER_NAME} ${USER_HOME}/.profile
|
||||
fi
|
||||
fi
|
||||
#setcap "cap_sys_admin,cap_sys_rawio,cap_sys_time+ep" /sbin/hwclock
|
||||
cp -a shadow-cap.conf /etc/security/capability/
|
||||
setcap -f /etc/security/capability/shadow-cap.conf
|
||||
setcap "cap_chown,cap_dac_read_search,cap_fowner,cap_setgid,cap_setuid,cap_setpcap,cap_sys_resource+ep" /bin/login
|
||||
chown netadmin.netadmin /etc/rc.d/rc.local
|
||||
touch /var/log/corosync.log
|
||||
chown audadmin.audadmin /var/log/corosync.log
|
||||
setcap "cap_dac_read_search,cap_sys_admin,cap_dac_override+ep" /usr/sbin/syslogd
|
||||
cp -a sysklogd /etc/rc.d/init.d
|
||||
|
||||
Reference in New Issue
Block a user