From d60c03b116093e6d0c6a04da26f479a7ca4bcfd5 Mon Sep 17 00:00:00 2001 From: ReachableCEO Date: Wed, 2 Jul 2025 17:45:56 -0500 Subject: [PATCH] some more resillience --- ProjectCode/Modules/Security/secharden-scap-stig.sh | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/ProjectCode/Modules/Security/secharden-scap-stig.sh b/ProjectCode/Modules/Security/secharden-scap-stig.sh index 9c89017..c46998e 100644 --- a/ProjectCode/Modules/Security/secharden-scap-stig.sh +++ b/ProjectCode/Modules/Security/secharden-scap-stig.sh @@ -20,16 +20,16 @@ source $FRAMEWORK_CONFIGS_FULL_PATH/FrameworkVars FrameworkIncludeFiles="$(ls -1 --color=none $FRAMEWORK_INCLUDES_FULL_PATH/*)" IFS=$'\n\t' -for file in ${FrameworkIncludeFiles[@]}; do - . "$file" +for file in "${FrameworkIncludeFiles[@]}"; do + source "$file" done unset IFS ProjectIncludeFiles="$(ls -1 --color=none $PROJECT_INCLUDES_FULL_PATH/*)" IFS=$'\n\t' -for file in ${ProjectIncludeFiles[@]}; do - . "$file" +for file in "${ProjectIncludeFiles[@]}"; do + source "$file" done unset IFS @@ -104,7 +104,11 @@ curl --silent ${DL_ROOT}/ProjectCode/ConfigFiles/BANNERS/issue.net > /etc/issue. curl --silent ${DL_ROOT}/ProjectCode/ConfigFiles/BANNERS/motd > /etc/motd #Cron perms + +if [ -f /etc/cron.deny ]; then rm /etc/cron.deny || true +fi + touch /etc/cron.allow chmod g-wx,o-rwx /etc/cron.allow chown root:root /etc/cron.allow