ACC SHELL

/**
 * File:	include/security/levels.ycp
 * Module:	Security configuration
 * Summary:	Security settings definitions
 * Authors:	Michal Svec <msvec@suse.cz>
 *
 * $Id: levels.ycp 57402 2009-06-02 20:40:08Z jsuchome $
 *
 * This file contains definitions of all security settings.
 * They are in one huge list.
 *
 * <pre>
 * $[
 *   "name" : &lt;string Level>
 *   "settings" : $[
 *     &lt;string ID> : &lt;string Value>,
 *     ...
 *   ]
 * ]
 * </pre>
 */

/**
 * @return list all security settings
 */

{

textdomain "security";

/**
 * Level names definitions
 */
map<string,string> LevelsNames = $[
    // level name
    "Level1" : _("Home Workstation"),
    // level name
    "Level2" : _("Networked Workstation"),
    // level name
    "Level3" : _("Network Server"),
];

map<string,string> LevelsLabels = $[
    /* RadioButton label */
    "Level1" : _("&Home Workstation"),
    /* RadioButton label */
    "Level2" : _("N&etworked Workstation"),
    /* RadioButton label */
    "Level3" : _("Network &Server"),
];

/**
 * Levels definitions
 */
map<string,map<string,string> > Levels = $[

    "Level1" : $[
	"CONSOLE_SHUTDOWN"		: "reboot",
	"CRACKLIB_DICT_PATH"		: "/usr/lib/cracklib_dict",
	"CWD_IN_ROOT_PATH"		: "no",
	"CWD_IN_USER_PATH"		: "no",
	"DISPLAYMANAGER_REMOTE_ACCESS"	: "no",
	"ENABLE_SYSRQ"			: "yes",
	"FAIL_DELAY"			: "1",
	"GID_MAX"			: "60000",
	"GID_MIN"			: "1000",
	"DISPLAYMANAGER_SHUTDOWN"	: "all",
	"LASTLOG_ENAB"			: "yes",
	"PASSWD_ENCRYPTION"		: "blowfish",
	"PASSWD_USE_CRACKLIB"		: "yes",
	"PASS_MAX_DAYS"			: "99999",
	"PASS_MIN_DAYS"			: "0",
	"PASS_MIN_LEN"			: "5",
	"PASS_WARN_AGE"			: "7",
	"PERMISSION_SECURITY"		: "easy",
	"RUN_UPDATEDB_AS"		: "nobody",
	"UID_MAX"			: "60000",
	"UID_MIN"			: "1000",
	"SYSTEM_UID_MAX"		: "499",
	"SYSTEM_UID_MIN"		: "100",
	"SYSTEM_GID_MAX"		: "499",
	"SYSTEM_GID_MIN"		: "100",
	"USERADD_CMD"			: "/usr/sbin/useradd.local",
	"USERDEL_PRECMD"		: "/usr/sbin/userdel-pre.local",
	"USERDEL_POSTCMD"		: "/usr/sbin/userdel-post.local",
	"PASSWD_REMEMBER_HISTORY"	: "0",
	"SYSTOHC"			: "yes",
	"SYSLOG_ON_NO_ERROR"		: "yes",
	"DISPLAYMANAGER_ROOT_LOGIN_REMOTE" : "no",
	"DISPLAYMANAGER_XSERVER_TCP_PORT_6000_OPEN"	: "no",
	"SMTPD_LISTEN_REMOTE"		: "no",
	"DISABLE_STOP_ON_REMOVAL"	: "no",
	"DISABLE_RESTART_ON_UPDATE"	: "no",
	"IP_TCP_SYNCOOKIES"		: "yes",
	"IP_FORWARD"			: "no",
	"IPV6_FORWARD"			: "no",
    ],

    "Level2" : $[
	"CONSOLE_SHUTDOWN"		: "ignore",
	"CRACKLIB_DICT_PATH"		: "/usr/lib/cracklib_dict",
	"CWD_IN_ROOT_PATH"		: "no",
	"CWD_IN_USER_PATH"		: "no",
	"DISPLAYMANAGER_REMOTE_ACCESS"	: "no",
	"ENABLE_SYSRQ"			: "no",
	"FAIL_DELAY"			: "6",
	"GID_MAX"			: "60000",
	"GID_MIN"			: "1000",
	"DISPLAYMANAGER_SHUTDOWN"	: "root",
	"LASTLOG_ENAB"			: "yes",
	"PASSWD_ENCRYPTION"		: "blowfish",
	"PASSWD_USE_CRACKLIB"		: "yes",
	"PASS_MAX_DAYS"			: "99999",
	"PASS_MIN_DAYS"			: "1",
	"PASS_MIN_LEN"			: "5",
	"PASS_WARN_AGE"			: "14",
	"PERMISSION_SECURITY"		: "easy",
	"RUN_UPDATEDB_AS"		: "nobody",
	"UID_MAX"			: "60000",
	"UID_MIN"			: "1000",
	"SYSTEM_UID_MAX"		: "499",
	"SYSTEM_UID_MIN"		: "100",
	"SYSTEM_GID_MAX"		: "499",
	"SYSTEM_GID_MIN"		: "100",
	"USERADD_CMD"			: "/usr/sbin/useradd.local",
	"USERDEL_PRECMD"		: "/usr/sbin/userdel-pre.local",
	"USERDEL_POSTCMD"		: "/usr/sbin/userdel-post.local",
	"PASSWD_REMEMBER_HISTORY"	: "0",
	"SYSTOHC"			: "yes",
	"SYSLOG_ON_NO_ERROR"		: "yes",
	"DISPLAYMANAGER_ROOT_LOGIN_REMOTE" : "no",
	"DISPLAYMANAGER_XSERVER_TCP_PORT_6000_OPEN"	: "no",
	"SMTPD_LISTEN_REMOTE"		: "no",
	"DISABLE_STOP_ON_REMOVAL"	: "no",
	"DISABLE_RESTART_ON_UPDATE"	: "no",
	"IP_TCP_SYNCOOKIES"		: "yes",
	"IP_FORWARD"			: "no",
	"IPV6_FORWARD"			: "no",
    ],

    "Level3" : $[
	"CONSOLE_SHUTDOWN"		: "ignore",
	"CRACKLIB_DICT_PATH"		: "/usr/lib/cracklib_dict",
	"CWD_IN_ROOT_PATH"		: "no",
	"CWD_IN_USER_PATH"		: "no",
	"DISPLAYMANAGER_REMOTE_ACCESS"	: "no",
	"ENABLE_SYSRQ"			: "no",
	"FAIL_DELAY"			: "3",
	"GID_MAX"			: "60000",
	"GID_MIN"			: "1000",
	"DISPLAYMANAGER_SHUTDOWN"	: "root",
	"LASTLOG_ENAB"			: "yes",
	"PASSWD_ENCRYPTION"		: "blowfish",
	"PASSWD_USE_CRACKLIB"		: "yes",
	"PASS_MAX_DAYS"			: "99999",
	"PASS_MIN_DAYS"			: "1",
	"PASS_MIN_LEN"			: "6",
	"PASS_WARN_AGE"			: "14",
	"PERMISSION_SECURITY"		: "secure",
	"RUN_UPDATEDB_AS"		: "nobody",
	"UID_MAX"			: "60000",
	"UID_MIN"			: "1000",
	"SYSTEM_UID_MAX"		: "499",
	"SYSTEM_UID_MIN"		: "100",
	"SYSTEM_GID_MAX"		: "499",
	"SYSTEM_GID_MIN"		: "100",
	"USERADD_CMD"			: "/usr/sbin/useradd.local",
	"USERDEL_PRECMD"		: "/usr/sbin/userdel-pre.local",
	"USERDEL_POSTCMD"		: "/usr/sbin/userdel-post.local",
	"PASSWD_REMEMBER_HISTORY"	: "0",
	"SYSTOHC"			: "yes",
	"SYSLOG_ON_NO_ERROR"		: "yes",
	"DISPLAYMANAGER_ROOT_LOGIN_REMOTE" : "no",
	"DISPLAYMANAGER_XSERVER_TCP_PORT_6000_OPEN"	: "no",
	"SMTPD_LISTEN_REMOTE"		: "no",
	"DISABLE_STOP_ON_REMOVAL"	: "no",
	"DISABLE_RESTART_ON_UPDATE"	: "no",
	"IP_TCP_SYNCOOKIES"		: "yes",
	"IP_FORWARD"			: "no",
	"IPV6_FORWARD"			: "no",
    ],

/* end of Levels */
];

/* EOF */
}