Changeset 199

Show
Ignore:
Timestamp:
06/24/08 10:55:21 (2 months ago)
Author:
slawrence
Message:

Update kickstart to fix some failures in the SRR tests. This fixes failures in GEN002560 and GEN002980.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/RHEL5.2/kickstart/clip.ks

    r198 r199  
    344344        encryption or biometric access controls provide security for the benefit of 
    345345        the USG. These protections are not provided for your benefit or privacy and 
    346         may be modified or elimiated at the USG's discretion. 
     346        may be modified or eliminated at the USG's discretion. 
    347347 
    348348EOF 
    …… 
    393393## mechanism is used and is set to lock the screen after 15 minutes of 
    394394## inactivity. 
    395 echo "TMOUT=900" >> /etc/profile 
     395echo "readonly TMOUT=900" >> /etc/profile 
    396396 
    397397## (GEN000540: CAT II) (Previously – G004) The SA will ensure passwords are 
    …… 
    632632## (GEN002560: CAT II) (Previously – G089) The SA will ensure the system and 
    633633## user umask is 077. 
    634 echo "umask 077" >> /etc/bashrc 
    635 echo "umask 077" >> /etc/csh.cshrc 
     634sed -i "/umask/ c\umask 077" /etc/bashrc 
     635sed -i "/umask/ c\umask 077" /etc/csh.cshrc 
     636 
    636637 
    637638## (GEN002640: CAT II) (Previously – G092) The SA will ensure logon capability 
    …… 
    797798## file has permissions of 600, or more restrictive. 
    798799chmod 600 /etc/cron.allow 
     800# see bottom of file 
    799801 
    800802## (GEN003040: CAT II) The SA will ensure the owner of crontabs is root or the 
    …… 
    36723674# Kickstart Actions: None - PROCEDURAL REQUIREMENT 
    36733675 
     3676# see GEN002980 
     3677# something above is changing cron.allow to 644 
     3678# putting this here deals with that until I can figure out what is doing it 
     3679chmod 600 /etc/cron.allow 
     3680 
    36743681eject 
    36753682