Changeset 146

Show
Ignore:
Timestamp:
12/27/07 16:10:50 (1 year ago)
Author:
slawrence
Message:

STIG fixes

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • trunk/RHEL5.1/scripts/stig-fix/cat2/gen000400.sh

    r144 r146  
    77echo '===================================================' 
    88cat <<-EOF > /etc/issue 
    9 THIS IS A DEPARTMENT OF DEFENSE COMPUTER SYSTEM.  THIS COMPUTER SYSTEM, 
    10 INCLUDING ALL RELATED EQUIPMENT, NETWORKS, AND NETWORK DEVICES 
    11 (SPECIFICALLY INCLUDING INTERNET ACCESS), ARE PROVIDED ONLY FOR AUTHORIZED 
    12 US GOVERNMENT USE.  DOD COMPUTER SYSTEMS MAY BE MONITORED FOR ALL LAWFUL 
    13 PURPOSES, INCLUDING TO ENSURE THEIR USE IS AUTHORIZED, FOR MANAGEMENT OF 
    14 THE SYSTEM, TO FACILITATE PROTECTION AGAINST UNAUTHORIZED ACCESS, AND TO 
    15 VERIFY SECURITY PROCEDURES, SURVIVABILITY, AND OPERATIONAL SECURITY. 
    16 MONITORING INCLUDES ACTIVE ATTACKS BY AUTHORIZED DOD ENTITIES TO TEST OR 
    17 VERIFY THE SECURITY OF THIS SYSTEM.  DURING MONITORING, INFORMATION MAY BE 
    18 EXAMINED, RECORDED, COPIED, AND USED FOR AUTHORIZED PURPOSES. 
    19 ALL INFORMATION, INCLUDING PERSONAL INFORMATION, PLACED ON OR SENT OVER THIS 
    20 SYSTEM, MAY BE MONITORED. 
     9You are accessing a U.S. Government (USG) information system (IS) that is 
     10provided for USG-authorized use only. 
    2111 
    22 USE OF THIS DOD COMPUTER SYSTEM, AUTHORIZED OR UNAUTHORIZED, CONSTITUTES 
    23 CONSENT TO MONITORING OF THIS SYSTEM.  UNAUTHORIZED USE MAY SUBJECT YOU 
    24 TO CRIMINAL PROSECUTION.  EVIDENCE OF UNAUTHORIZED USE COLLECTED DURING 
    25 MONITORING MAY BE USED FOR ADMINISTRATIVE, CRIMINAL, OR OTHER ADVERSE ACTION. 
    26 USE OF THIS SYSTEM CONSTITUTES CONSENT TO MONITORING FOR THESE PURPOSES. 
     12By using this IS, you consent to the following conditions: 
     13 
     14-The USG routinely monitors communications occurring on this IS, and any  
     15device attached to this IS, for purposes including, but not limited to,  
     16penetration testing, COMSEC monitoring, network defense, quality control,  
     17and employee misconduct, law enforcement, and counterintelligence  
     18investigations. 
     19-At any time, the USG may inspect and/or seize data stored on this IS and  
     20any device attached to this IS. 
     21-Communications occurring on or data stored on this IS, or any device  
     22attached to this IS, are not private. They are subject to routine  
     23monitoring and search. 
     24-Any communications occurring on or data stored on this IS, or any device  
     25attached to this IS, may be disclosed or used for any USG-authorized purpose. 
     26-Security protections may be utilized on this IS to protect certain interests  
     27that are important to the USG. For example, passwords, access cards,  
     28encryption or biometric access controls provide security for the benefit of  
     29the USG. These protections are not provided for your benefit or privacy and  
     30may be modified or elimiated at the USG's discretion. 
     31 
    2732EOF 
    2833 
  • trunk/RHEL5.1/scripts/stig-fix/cat2/gen003600.sh

    r144 r146  
    55echo ' Patching GEN003600: Set network parameters'  
    66echo '===================================================' 
    7 sed -i "/net\.ipv4\.conf\.all\.rp_filter/ c\net.ipv4.conf.all.rp_filter = 1" /etc/sysctl.conf 
     7sed -i "/net\.ipv4\.conf\.default\.rp_filter/ c\net.ipv4.conf.default.rp_filter = 1" /etc/sysctl.conf 
    88sed -i "/net\.ipv4\.conf\.default\.accept_source_route/ c\net.ipv4.conf.default.accept_source_route = 0" /etc/sysctl.conf 
    99cat <<-EOF >> /etc/sysctl.conf 
  • trunk/RHEL5.1/scripts/stig-fix/cat2/gen003740.sh

    r144 r146  
    1010echo '                     configuration files.' 
    1111echo '===================================================' 
    12 chmod -R 755 /etc/xinetd.d 
     12chmod 755 /etc/xinetd.d 
    1313chmod 440 /etc/xinetd.conf