modified: install_shell/audit_patch.sh

deleted:    install_shell/cgroup-d5000-install/42-2014-01-15-062120/README
	deleted:    install_shell/cgroup-d5000-install/42-2014-01-15-062120/install.sh
	modified:   install_shell/cgroup-d5000-install/install.sh
	modified:   install_shell/create_users.sh
	modified:   install_shell/ntpd_cron_patch.sh
	modified:   install_shell/other.sh
	modified:   install_shell/set_network.sh
	modified:   install_shell/set_ssh.sh
	modified:   setup.sh

Signed-off-by: Qin Bo <bqin@linx-info.com>
This commit is contained in:
Qin Bo
2014-02-19 11:12:23 +08:00
parent 2235771f09
commit 39d88f389f
10 changed files with 1 additions and 261 deletions

View File

@@ -5,22 +5,6 @@ USER_NAME=$1
USER_HOME=$2
USER_SHELL=$3
#revise grub.conf
chown sysadmin:users /boot/grub
chown sysadmin:sysadmin /boot/grub/menu.lst
chown sysadmin:users /boot/grub/grub.conf.sample
grep 'kernel_type' /boot/grub/menu.lst &>/dev/null
if [ $? != 0 ];then
sed -i '/vmlinuz-root-n/s/$/& kernel_type=noroot/g' /boot/grub/menu.lst
fi
#add smartd link
ln -sf /etc/rc.d/init.d/smartd /etc/rc.d/rc5.d/S101smartd
ln -sf /etc/rc.d/init.d/smartd /etc/rc.d/rc3.d/S101smartd
#revise order
grep 4.2.35 /etc/issue &> /dev/null
if [ $? = 0 ];then
@@ -36,52 +20,6 @@ if [ $? != 0 ];then
echo "lsm_linx" >> /etc/sysconfig/modules
fi
#for proftp
FTP_CONFIG=/etc/proftpd/proftpd.conf
grep MaxClients $FTP_CONFIG &> /dev/null
if [ $? != 0 ];then
sed -i "/MaxInstances/a\#MaxClients 200" $FTP_CONFIG
fi
grep TimesGMT $FTP_CONFIG &>/dev/null
if [ $? != 0 ];then
sed -i "/MaxInstances/a\#TimesGMT off" $FTP_CONFIG
fi
grep UseReverseDNS $FTP_CONFIG &>/dev/null
if [ $? != 0 ];then
sed -i "/MaxInstances/a\#UseReverseDNS off" $FTP_CONFIG
fi
grep IdentLookups $FTP_CONFIG &>/dev/null
if [ $? != 0 ];then
sed -i "/MaxInstances/a\#IdentLookups off" $FTP_CONFIG
fi
#flag_4_2_40=`grep '4.2.40' /etc/issue|awk '{print $5}'`
#if [ -z ${flag_4_2_40} ];then
# grep ^UseUTF8 ${FTP_CONFIG} &> /dev/null
# if [ $? -ne 0 ];then
# echo "UseUTF8 off">> ${FTP_CONFIG}
# fi
#else
# grep ^useencoding ${FTP_CONFIG} &> /dev/null
# if [ $? -ne 0 ];then
# echo "useencoding gbk gbk">> ${FTP_CONFIG}
# fi
#fi
grep ^useencoding ${FTP_CONFIG} &> /dev/null
if [ $? -ne 0 ];then
echo "useencoding gbk gbk">> ${FTP_CONFIG}
fi
grep ^DefaultRoot ${FTP_CONFIG} &> /dev/null
if [ $? -ne 0 ];then
echo "DefaultRoot ~">> ${FTP_CONFIG}
fi
# revise /etc/rc.d/init.d/functions
sed -i '/ENTER/s/^/# &/g' /etc/rc.d/init.d/functions
@@ -115,10 +53,6 @@ chmod 755 /usr/sbin/linx-watch-top.sh
if [ -f /var/spool/cron/crontabs/root ];then
rm /var/spool/cron/crontabs/root
fi
#恢复被netkit-base包覆盖的/etc/inetd.conf文件
cp inetd.conf /etc
chown root.root /etc/inetd.conf
chmod 644 /etc/inetd.conf
chown audadmin.audadmin /var/log/kernel*
chmod 644 /var/log/kernel*
@@ -163,10 +97,6 @@ cp os.sh /usr/sbin
cp pci.ids /usr/share
chown sysadmin.sysadmin /usr/sbin/get_parameter_log.sh
chmod 755 /usr/sbin/get_parameter_log.sh
chown sysadmin.sysadmin /usr/sbin/dmidecode
chmod 755 /usr/sbin/dmidecode
chown sysadmin.sysadmin /usr/sbin/lshw
chmod 755 /usr/sbin/lshw
chown sysadmin.sysadmin /usr/sbin/check_sec_local.sh
chmod 755 /usr/sbin/check_sec_local.sh
chown sysadmin.sysadmin /usr/sbin/os.sh
@@ -221,12 +151,6 @@ else
chown ${USER_NAME}.${USER_NAME} ${USER_HOME}/.profile
fi
fi
#setcap "cap_sys_admin,cap_sys_rawio,cap_sys_time+ep" /sbin/hwclock
cp -a shadow-cap.conf /etc/security/capability/
setcap -f /etc/security/capability/shadow-cap.conf
setcap "cap_chown,cap_dac_read_search,cap_fowner,cap_setgid,cap_setuid,cap_setpcap,cap_sys_resource+ep" /bin/login
chown netadmin.netadmin /etc/rc.d/rc.local
touch /var/log/corosync.log
chown audadmin.audadmin /var/log/corosync.log
setcap "cap_dac_read_search,cap_sys_admin,cap_dac_override+ep" /usr/sbin/syslogd
cp -a sysklogd /etc/rc.d/init.d