diff --git a/ProjectCode/Modules/Security/secharden-ssh.sh b/ProjectCode/Modules/Security/secharden-ssh.sh index e1955ff..c8b2aff 100644 --- a/ProjectCode/Modules/Security/secharden-ssh.sh +++ b/ProjectCode/Modules/Security/secharden-ssh.sh @@ -26,17 +26,15 @@ done unset IFS -if [[ ProjectIncludes = 1 ]]; then ProjectIncludeFiles="$(ls -1 --color=none $PROJECT_INCLUDES_FULL_PATH/*)" IFS=$'\n\t' for file in ${ProjectIncludeFiles[@]}; do . "$file" done unset IFS -fi -curl --silent ${DL_ROOT}/ConfigFiles/SSH/Configs/tsys-sshd-config > /etc/ssh/sshd_config -curl --silent ${DL_ROOT}/ConfigFiles/SSH/Configs/ssh-audit_hardening.conf > /etc/ssh/sshd_config.d/ssh-audit_hardening.conf +curl --silent ${DL_ROOT}/ProjectCode/ConfigFiles/SSH/Configs/tsys-sshd-config > /etc/ssh/sshd_config +curl --silent ${DL_ROOT}/ProjectCode/ConfigFiles/SSH/Configs/ssh-audit_hardening.conf > /etc/ssh/sshd_config.d/ssh-audit_hardening.conf # Perms on sshd_config chmod og-rwx /etc/ssh/sshd_config diff --git a/ProjectCode/SetupNewSystem.sh b/ProjectCode/SetupNewSystem.sh index b78206d..acfcdb7 100644 --- a/ProjectCode/SetupNewSystem.sh +++ b/ProjectCode/SetupNewSystem.sh @@ -86,9 +86,14 @@ curl --silent ${DL_ROOT}/ProjectCode/ConfigFiles/ZSH/tsys-zshrc > /etc/zshrc curl --silent ${DL_ROOT}/ProjectCode/ConfigFiles/SMTP/aliases > /etc/aliases curl --silent ${DL_ROOT}/ProjectCode/ConfigFiles/Syslog/rsyslog.conf > /etc/rsyslog.conf -export ROOT_SSH_DIR="/root/.ssh" -export LOCALUSER_SSH_DIR="/home/localuser/.ssh" -export SUBODEV_SSH_DIR="/home/subodev/.ssh" +export ROOT_SSH_DIR +ROOT_SSH_DIR="/root/.ssh" + +export LOCALUSER_SSH_DIR +LOCALUSER_SSH_DIR="/home/localuser/.ssh" + +export SUBODEV_SSH_DIR +SUBODEV_SSH_DIR="/home/subodev/.ssh" if [ ! -d $ROOT_SSH_DIR ]; then mkdir /root/.ssh/