KNEL/FetchApply
2
0
Fork 0
Code Pull Requests Actions Packages Releases 1 Activity

preparing for sec hardening and cleaning up linter stuff

Browse Source
This commit is contained in:
Charles N Wyble
2025-06-23 18:28:09 -05:00
parent 3730e7ac54
commit 83c8fc02a9
1 changed files with 47 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

56
newSrv.sh
View File

@ -21,6 +21,7 @@ LOCALUSER_CHECK="$(getent passwd|grep -c localuser)"
function pi-detect() function pi-detect()
{ {
echo Now running "$FUNCNAME"....
if [ -f /sys/firmware/devicetree/base/model ] ; then if [ -f /sys/firmware/devicetree/base/model ] ; then
export IS_RASPI="1" export IS_RASPI="1"
fi fi
@ -28,6 +29,7 @@ fi
if [ ! -f /sys/firmware/devicetree/base/model ] ; then if [ ! -f /sys/firmware/devicetree/base/model ] ; then
export IS_RASPI="0" export IS_RASPI="0"
fi fi
echo Completed running "$FUNCNAME"
} }
function global-oam() function global-oam()
@ -48,7 +50,7 @@ echo Completed running "$FUNCNAME"
function global-systemServiceConfigurationFiles() function global-systemServiceConfigurationFiles()
{ {
echo "Now running $FUNCNAME...." echo Now running "$FUNCNAME"....
curl --silent https://dl.knownelement.com/FetchApplyDistPoint/tsys-zshrc > /etc/zshrc curl --silent https://dl.knownelement.com/FetchApplyDistPoint/tsys-zshrc > /etc/zshrc
curl --silent https://dl.knownelement.com/FetchApplyDistPoint/aliases > /etc/aliases curl --silent https://dl.knownelement.com/FetchApplyDistPoint/aliases > /etc/aliases
@ -86,12 +88,12 @@ curl --silent https://dl.knownelement.com/FetchApplyDistPoint/ssh-authorized-key
fi fi
echo "Completed running $FUNCNAME" echo Completed running "$FUNCNAME"
} }
function global-installPackages() function global-installPackages()
{ {
echo "Now running $FUNCNAME...." echo Now running "$FUNCNAME"....
# Setup webmin repo, used for RBAC/2fa PAM # Setup webmin repo, used for RBAC/2fa PAM
@ -215,13 +217,13 @@ export DEBIAN_FRONTEND="noninteractive" && apt-get -qq --yes -o Dpkg::Options::=
# power-profiles-daemon # power-profiles-daemon
fi fi
echo "Completed running $FUNCNAME" echo Completed running "$FUNCNAME"
} }
function global-postPackageConfiguration() function global-postPackageConfiguration()
{ {
echo "Now running $FUNCNAME...." echo Now running "$FUNCNAME"
apt-file update apt-file update
@ -244,7 +246,6 @@ chsh -s "$(which zsh)" localuser
fi fi
###Post package deployment bits ###Post package deployment bits
curl --silent https://dl.knownelement.com/FetchApplyDistPoint/ntp.conf > /etc/ntp.conf
curl --silent https://dl.knownelement.com/FetchApplyDistPoint/dhclient.conf > /etc/dhcp/dhclient.conf curl --silent https://dl.knownelement.com/FetchApplyDistPoint/dhclient.conf > /etc/dhcp/dhclient.conf
systemctl stop snmpd && /etc/init.d/snmpd stop systemctl stop snmpd && /etc/init.d/snmpd stop
@ -265,7 +266,15 @@ systemctl daemon-reload && systemctl restart snmpd && /etc/init.d/snmpd restart
systemctl stop rsyslog && systemctl start rsyslog && logger "hi hi from $(hostname)" systemctl stop rsyslog && systemctl start rsyslog && logger "hi hi from $(hostname)"
systemctl restart ntp if [ "$KALI_CHECK" -eq 0 ]; then
curl --silent https://dl.knownelement.com/FetchApplyDistPoint/ntp.conf > /etc/ntpsec/ntp.conf
systemctl restart ntp
fi
if [ "$KALI_CHECK" -eq 1 ]; then
curl --silent https://dl.knownelement.com/FetchApplyDistPoint/ntp.conf > /etc/ntp.conf
systemctl restart ntpsec.service
fi
systemctl enable systemctl enable
systemctl stop postfix systemctl stop postfix
@ -281,7 +290,36 @@ if [ $VIRT_GUEST = 1 ]; then
tuned-adm profile virtual-guest tuned-adm profile virtual-guest
fi fi
echo "Completed running $FUNCNAME" echo Completed running "$FUNCNAME"
}
function secharden-auto-upgrade()
{
echo Now running "$FUNCNAME...."
echo Completed running "$FUNCNAME"
}
function secharden-2fa()
{
echo Now running "$FUNCNAME"....
echo Completed running "$FUNCNAME"
}
function secharden-ssh()
{
echo Now running "$FUNCNAME"....
echo Completed running "$FUNCNAME"
}
function secharden-scap-stig()
{
echo Now running "$FUNCNAME"....
echo Completed running "$FUNCNAME"
} }
#################################################################################################### ####################################################################################################
@ -296,6 +334,6 @@ global-postPackageConfiguration
#Coming soon... #Coming soon...
#secharden-auto-upgrade #secharden-auto-upgrade
#secharden-1fa #secharden-2fa
#secharden-ssh #secharden-ssh
#secharden-scap-stig #secharden-scap-stig