Changeset 96 for branch/RHEL4-stig

Timestamp:

09/13/07 15:33:50 (1 year ago)

Author:

dwindsor

Message:

Add stig fix scripts to the CLIP RPM

Files:

• branch/RHEL4-stig/RPM/clip.spec (modified) (1 diff)
• branch/RHEL4-stig/scripts/installer.in (modified) (3 diffs)

branch/RHEL4-stig/RPM/clip.spec

@@ -46 +46 @@
-/usr/share/clip/man/man8/xar.8
-/usr/share/clip/man/man8/integrity.8
+/usr/share/clip/stig
+/usr/share/clip/stig/run-fixes.sh
+/usr/share/clip/stig/cat1/gen00460.sh
+/usr/share/clip/stig/cat1/lnx00320.sh
+/usr/share/clip/stig/cat1/lnx00580.sh
+/usr/share/clip/stig/cat2/gen000020.sh
+/usr/share/clip/stig/cat2/gen000460.sh
+/usr/share/clip/stig/cat2/gen000600.sh
+/usr/share/clip/stig/cat2/gen000920.sh
+/usr/share/clip/stig/cat2/gen001260.sh
+/usr/share/clip/stig/cat2/gen002820.sh
+/usr/share/clip/stig/cat2/gen003320.sh
+/usr/share/clip/stig/cat2/gen003865.sh
+/usr/share/clip/stig/cat2/gen004820.sh
+/usr/share/clip/stig/cat2/lnx00340.sh
+/usr/share/clip/stig/cat2/gen000400.sh
+/usr/share/clip/stig/cat2/gen005400.sh
+/usr/share/clip/stig/cat2/lnx00440.sh
+/usr/share/clip/stig/cat2/gen000480.sh
+/usr/share/clip/stig/cat2/gen000800.sh
+/usr/share/clip/stig/cat2/gen000980.sh
+/usr/share/clip/stig/cat2/gen002320.sh
+/usr/share/clip/stig/cat2/gen002960.sh
+/usr/share/clip/stig/cat2/gen003600.sh
+/usr/share/clip/stig/cat2/gen004000.sh
+/usr/share/clip/stig/cat2/gen000440.sh
+/usr/share/clip/stig/cat2/gen000580.sh
+/usr/share/clip/stig/cat2/gen000820.sh
+/usr/share/clip/stig/cat2/gen001020.sh
+/usr/share/clip/stig/cat2/gen002560.sh
+/usr/share/clip/stig/cat2/gen003080.sh
+/usr/share/clip/stig/cat2/gen003740.sh
+/usr/share/clip/stig/cat2/gen004540.sh
+/usr/share/clip/stig/cat2/gen006620.sh
+/usr/share/clip/stig/cat2/lnx00520.sh
+/usr/share/clip/stig/cat3/gen001280.sh
+/usr/share/clip/stig/cat3/gen003520.sh
+/usr/share/clip/stig/cat3/gen004560.sh
-/etc/integrity.conf
-/etc/security/pam_env.conf

branch/RHEL4-stig/scripts/installer.in

@@ -7 +7 @@
-PAMDIR=$BASE/clip/conf/pam
-MANDIR=$BASE/clip/man/man8
-
+
+
-Copy() {
-    local src=$1 dst=$2
@@ -55 +56 @@
-}
-
+# Install a collection of scripts to make CLIP 
+# STIG-compliant. 
+# Since these scripts are not likely to be found on the system,
+# cp and not Copy() is used to install these files. 
+InstallStig() {
+        for d in $(ls -R STIGFIXDIR); do
+                cp -r $d /usr/share/clip/stig &2>/dev/null
+        done
+}
+
+# Run the scripts installed in InstallStig.
+# This function assumes that a file named run-fixes.sh has been installed
+# in STIGFIXDIR, and is executable by root; this happens in InstallStig.
+# run-fixes.sh is used to launch the individual scripts.
+RunStigFixes() {
+        if [ -x $STIGFIXDIR/run-fixes.sh ]; then
+                $STIGFIXDIR/run-fixes.sh
+        elif
+                echo "Could not locate STIG fix script $STIGFIXDIR/run-fixes.sh.";
+        fi
+}
+
-cat <<EOM
-Certifiable Linux Integration Platform Installation Log
@@ -67 +90 @@
-InstallPam
-InstallMan
+InstallStig
+RunStigFixes