| Path : /usr/share/YaST2/modules/ |
| Current File : //usr/share/YaST2/modules/Security.ybc |
YaST bytecode 1.4.0 Security % Security.ycp FileUtils Pam PamSettings Progress Service security/levels.ycp LevelsNames LevelsLabels Levels
mandatory_services optional_services MissingMandatoryServices
ExtraServices Settings Settings_bak do_not_test Locations PasswordMaxLengths Ciphers
AbortFunction PollAbort Abort modified proposal_valid
write_only GetModified SetModified Modified ReadServiceSettings Read activation_mapping Write ! Import " Export # Summary $ Overview
' runlevel
M runlevel n
% . 7 < H ! ! i settings " " } # # $ $ ) 3 UI PollInput 3 SCR Read Write Dir Execute 0
security3 FileUtils Exists 3 Pam Query Add Remove 3 PamSettings Write SetDefaultValue GetGroupHashMethod
GetHashMethod GetDefaultValue 3 Progress New NextStage 3 Service EnabledServices 1 security/levels.ycp 0 security$" Level1 Home Workstation security Level2 Networked Workstation security Level3 Network Server security$+ Level1 &Home Workstation security Level2 N&etworked Workstation security Level3 Network &Server security$7
Level1
' CONSOLE_SHUTDOWN reboot CRACKLIB_DICT_PATH /usr/lib/cracklib_dict CWD_IN_ROOT_PATH no CWD_IN_USER_PATH no DISABLE_RESTART_ON_UPDATE no DISABLE_STOP_ON_REMOVAL no DISPLAYMANAGER_REMOTE_ACCESS no DISPLAYMANAGER_ROOT_LOGIN_REMOTE no DISPLAYMANAGER_SHUTDOWN all) DISPLAYMANAGER_XSERVER_TCP_PORT_6000_OPEN no ENABLE_SYSRQ yes
FAIL_DELAY 1 GID_MAX 60000 GID_MIN 1000 IPV6_FORWARD no
IP_FORWARD no IP_TCP_SYNCOOKIES yes LASTLOG_ENAB yes PASSWD_ENCRYPTION blowfish PASSWD_REMEMBER_HISTORY 0 PASSWD_USE_CRACKLIB yes
PASS_MAX_DAYS 99999
PASS_MIN_DAYS 0 PASS_MIN_LEN 5
PASS_WARN_AGE 7 PERMISSION_SECURITY easy RUN_UPDATEDB_AS nobody SMTPD_LISTEN_REMOTE no SYSLOG_ON_NO_ERROR yes SYSTEM_GID_MAX 499 SYSTEM_GID_MIN 100 SYSTEM_UID_MAX 499 SYSTEM_UID_MIN 100 SYSTOHC yes UID_MAX 60000 UID_MIN 1000 USERADD_CMD /usr/sbin/useradd.local USERDEL_POSTCMD /usr/sbin/userdel-post.local USERDEL_PRECMD /usr/sbin/userdel-pre.local Level2
' CONSOLE_SHUTDOWN ignore CRACKLIB_DICT_PATH /usr/lib/cracklib_dict CWD_IN_ROOT_PATH no CWD_IN_USER_PATH no DISABLE_RESTART_ON_UPDATE no DISABLE_STOP_ON_REMOVAL no DISPLAYMANAGER_REMOTE_ACCESS no DISPLAYMANAGER_ROOT_LOGIN_REMOTE no DISPLAYMANAGER_SHUTDOWN root) DISPLAYMANAGER_XSERVER_TCP_PORT_6000_OPEN no ENABLE_SYSRQ no
FAIL_DELAY 6 GID_MAX 60000 GID_MIN 1000 IPV6_FORWARD no
IP_FORWARD no IP_TCP_SYNCOOKIES yes LASTLOG_ENAB yes PASSWD_ENCRYPTION blowfish PASSWD_REMEMBER_HISTORY 0 PASSWD_USE_CRACKLIB yes
PASS_MAX_DAYS 99999
PASS_MIN_DAYS 1 PASS_MIN_LEN 5
PASS_WARN_AGE 14 PERMISSION_SECURITY easy RUN_UPDATEDB_AS nobody SMTPD_LISTEN_REMOTE no SYSLOG_ON_NO_ERROR yes SYSTEM_GID_MAX 499 SYSTEM_GID_MIN 100 SYSTEM_UID_MAX 499 SYSTEM_UID_MIN 100 SYSTOHC yes UID_MAX 60000 UID_MIN 1000 USERADD_CMD /usr/sbin/useradd.local USERDEL_POSTCMD /usr/sbin/userdel-post.local USERDEL_PRECMD /usr/sbin/userdel-pre.local Level3
' CONSOLE_SHUTDOWN ignore CRACKLIB_DICT_PATH /usr/lib/cracklib_dict CWD_IN_ROOT_PATH no CWD_IN_USER_PATH no DISABLE_RESTART_ON_UPDATE no DISABLE_STOP_ON_REMOVAL no DISPLAYMANAGER_REMOTE_ACCESS no DISPLAYMANAGER_ROOT_LOGIN_REMOTE no DISPLAYMANAGER_SHUTDOWN root) DISPLAYMANAGER_XSERVER_TCP_PORT_6000_OPEN no ENABLE_SYSRQ no
FAIL_DELAY 3 GID_MAX 60000 GID_MIN 1000 IPV6_FORWARD no
IP_FORWARD no IP_TCP_SYNCOOKIES yes LASTLOG_ENAB yes PASSWD_ENCRYPTION blowfish PASSWD_REMEMBER_HISTORY 0 PASSWD_USE_CRACKLIB yes
PASS_MAX_DAYS 99999
PASS_MIN_DAYS 1 PASS_MIN_LEN 6
PASS_WARN_AGE 14 PERMISSION_SECURITY secure RUN_UPDATEDB_AS nobody SMTPD_LISTEN_REMOTE no SYSLOG_ON_NO_ERROR yes SYSTEM_GID_MAX 499 SYSTEM_GID_MIN 100 SYSTEM_UID_MAX 499 SYSTEM_UID_MIN 100 SYSTOHC yes UID_MAX 60000 UID_MIN 1000 USERADD_CMD /usr/sbin/useradd.local USERDEL_POSTCMD /usr/sbin/userdel-post.local USERDEL_PRECMD /usr/sbin/userdel-pre.local2 Security.ycp$
ntp syslog auditd random kbd cron postfix sendmail$ ' acpid
boot.clock dbus
ealysyslog fbset framebufferset isdn
microcode.ctl random
consolekit haldaemon network syslog auditd splash_early alsasound irq_balancer kbd
powersaved splash sshd earlyxdm hotkey-setup atd nscd smpppd xend autofs libvirtd sendmail postfix
xendomains cron ddclient smartd stopblktrace ntp SuSEfirewall earlysyslog%' ret enabled_services ,)
y2milestone
* Checking mandatory services in runlevel %1 $+ $, ,.
y2milestone
enabled_services: %1 (0 41 -2 ,5 foreach services
enabled $7 ,9 foreach service
&; || contains ,?
y2milestone
% Mandatory services %1 are enabled: %2
(A ! 4B &C add
,H
y2milestone
- Missing mandatory services in runlevel %1: %2 -J %M
extra_services enabled_services ,O
y2milestone
+ Searching for extra services in runlevel %1 $Q $R (T 4U -V ,Y foreach service
extra $\ && ! contains flatten
! contains
(^ 4_ ,`
y2milestone
Found extra service: %1
&a add
,f
y2milestone
All extra services: %1 -h $n
, CONSOLE_SHUTDOWN reboot CRACKLIB_DICT_PATH /usr/lib/cracklib_dict CWD_IN_ROOT_PATH yes CWD_IN_USER_PATH yes DISABLE_RESTART_ON_UPDATE no DISABLE_STOP_ON_REMOVAL no DISPLAYMANAGER_REMOTE_ACCESS no DISPLAYMANAGER_ROOT_LOGIN_REMOTE no DISPLAYMANAGER_SHUTDOWN all) DISPLAYMANAGER_XSERVER_TCP_PORT_6000_OPEN no ENABLE_SYSRQ no
FAIL_DELAY 3 GID_MAX 60000 GID_MIN 1000 GROUP_ENCRYPTION md5 IPV6_FORWARD no
IP_FORWARD no IP_TCP_SYNCOOKIES yes LASTLOG_ENAB yes PASSWD_ENCRYPTION blowfish PASSWD_REMEMBER_HISTORY 0 PASSWD_USE_CRACKLIB yes
PASS_MAX_DAYS 99999
PASS_MIN_DAYS 0 PASS_MIN_LEN 5
PASS_WARN_AGE 7 PERMISSION_SECURITY secure RUNLEVEL3_EXTRA_SERVICES no RUNLEVEL3_MANDATORY_SERVICES yes RUNLEVEL5_EXTRA_SERVICES no RUNLEVEL5_MANDATORY_SERVICES yes RUN_UPDATEDB_AS nobody SMTPD_LISTEN_REMOTE no SYSLOG_ON_NO_ERROR yes SYSTEM_GID_MAX 499 SYSTEM_GID_MIN 100 SYSTEM_UID_MAX 499 SYSTEM_UID_MIN 100 SYSTOHC yes UID_MAX 60000 UID_MIN 500 USERADD_CMD /usr/sbin/useradd.local USERDEL_POSTCMD /usr/sbin/userdel-post.local USERDEL_PRECMD /usr/sbin/userdel-pre.local$ $ GROUP_ENCRYPTION RUNLEVEL3_MANDATORY_SERVICES RUNLEVEL5_MANDATORY_SERVICES RUNLEVEL3_EXTRA_SERVICES RUNLEVEL5_EXTRA_SERVICES$
.etc.login_defs
FAIL_DELAY GID_MAX GID_MIN LASTLOG_ENAB
PASS_MAX_DAYS
PASS_MIN_DAYS
PASS_WARN_AGE UID_MAX UID_MIN SYSTEM_UID_MAX SYSTEM_UID_MIN SYSTEM_GID_MAX SYSTEM_GID_MIN USERADD_CMD USERDEL_PRECMD USERDEL_POSTCMD .sysconfig.clock SYSTOHC .sysconfig.cron SYSLOG_ON_NO_ERROR .sysconfig.displaymanager DISPLAYMANAGER_REMOTE_ACCESS DISPLAYMANAGER_ROOT_LOGIN_REMOTE) DISPLAYMANAGER_XSERVER_TCP_PORT_6000_OPEN DISPLAYMANAGER_SHUTDOWN .sysconfig.locate RUN_UPDATEDB_AS .sysconfig.mail SMTPD_LISTEN_REMOTE .sysconfig.security PERMISSION_SECURITY .sysconfig.services DISABLE_RESTART_ON_UPDATE DISABLE_STOP_ON_REMOVAL .sysconfig.suseconfig CWD_IN_ROOT_PATH CWD_IN_USER_PATH .sysconfig.sysctl ENABLE_SYSRQ IP_TCP_SYNCOOKIES
IP_FORWARD IPV6_FORWARD$
blowfishH des md5 $ md5 blowfish$ %
- abort% ( - eval - $ $ $ %% -& %. &/ %7 ,8
y2debug
modified=%1 -9 %< '> RUNLEVEL3_MANDATORY_SERVICES secure insecure'? RUNLEVEL5_MANDATORY_SERVICES secure insecure'@ RUNLEVEL3_EXTRA_SERVICES
secure insecure'A RUNLEVEL5_EXTRA_SERVICES
secure insecure%H inittab method pam_cracklib pam_history perm &J
,N mapmap file vars ,O maplist var val filename $P $R (S issubstring sysconfig4S &T + /etc mergestring splitstring . /,U
y2debug
filename=%1 (X || SCR::Read .target.size 4X &Y SCR::Read topath + + . ,Z
y2debug
Reading: %1 (%2) topath + + . (\ &\ '] -_
,a
y2debug
Settings=%1 $c SCR::Dir .etc.inittab(d contains ca4d ca $e SCR::Read .etc.inittab.ca(f || issubstring /bin/true issubstring
/bin/false'g CONSOLE_SHUTDOWN ignore(h || issubstring reboot issubstring -r'i CONSOLE_SHUTDOWN reboot(j || issubstring halt issubstring -h'k CONSOLE_SHUTDOWN halt4l ,m
y2error
Unknown ca status: %1 'n CONSOLE_SHUTDOWN ignore'r CONSOLE_SHUTDOWN ignore,t
y2debug
Settings=%1 ,x $} CRYPT_FILES(~ || || ! contains des md5 blowfish 4 & ( || ! contains des md5 blowfish & des ' PASSWD_ENCRYPTION ' GROUP_ENCRYPTION ' PASS_MIN_LEN 5' PASSWD_USE_CRACKLIB no' PASSWD_REMEMBER_HISTORY 0$ cracklib( size ' PASSWD_USE_CRACKLIB yes , foreach val password lval $
splitstring =( issubstring dictpath=4 ' CRACKLIB_DICT_PATH
/usr/lib/cracklib_dict ( && issubstring minlen=
' PASS_MIN_LEN
5 $ pwhistory, foreach val password lval $
splitstring =( && issubstring remember=
' PASSWD_REMEMBER_HISTORY
0 ,
y2debug
Settings=%1 $ PERMISSION_SECURITY ( issubstring easy& easy( issubstring paranoid& paranoid( issubstring secure& secure& secure' PERMISSION_SECURITY ,
y2debug
Settings=%1 & & - $
DHCPD_RUN_AS /etc/init.d/dhcpd restart DHCPD_RUN_CHROOTED /etc/init.d/dhcpd restart IPV6_FORWARD /etc/init.d/boot.ipconfig start
IP_FORWARD /etc/init.d/boot.ipconfig start IP_TCP_SYNCOOKIES /etc/init.d/boot.ipconfig start SMTPD_LISTEN_REMOTE (test -e /etc/init.d/sendmail && /sbin/SuSEconfig --module sendmail && /etc/init.d/sendmail restart) || (test -e /etc/init.d/postfix && /sbin/SuSEconfig --module postfix && /etc/init.d/postfix restart) SYSLOG_ON_NO_ERROR /etc/init.d/boot.clock start% caption steps
commitlist ca encr sysrq dm mod + ( ! - ,
y2milestone
Writing configuration$ Saving Security Configuration security$ , Write security settings security Write inittab settings security Write PAM settings security Run SuSEconfig security Writing security settings... security Writing inittab settings... security Writing PAM settings... security Running SuSEconfig security Finished security ( - , ,
y2debug
Settings=%1 ' PERMISSION_SECURITY + PERMISSION_SECURITY local$ , mapmap file vars , maplist var val $ ( & ( SCR::Read topath + + . 4 ,
SCR::Write topath + + . & union -
, maplist file ,
SCR::Write topath ( - , $ CONSOLE_SHUTDOWN ignore ( reboot,
SCR::Write .etc.inittab.ca& :ctrlaltdel:/sbin/shutdown -r -t 4 now( halt,
SCR::Write .etc.inittab.ca& :ctrlaltdel:/sbin/shutdown -h -t 4 now,
SCR::Write .etc.inittab.ca :ctrlaltdel:/bin/true,
SCR::Write .etc.inittab,
SCR::Execute .target.bash /sbin/telinit q(
-
, $ PASSWD_ENCRYPTION blowfish , CRYPT_FILES ( PASSWD_USE_CRACKLIB no yes4 pth , cracklib$ CRACKLIB_DICT_PATH /usr/lib/cracklib_dict ( /usr/lib/cracklib_dict, + --cracklib-dictpath= , cracklib( && PASS_MIN_LEN 5 5 PASSWD_USE_CRACKLIB no yes4 ,! cracklib,"
sformat
cracklib-minlen=%1 PASS_MIN_LEN 5 ,% cracklib-minlen(( PASSWD_REMEMBER_HISTORY 0 04) ,* pwhistory,+
sformat
pwhistory-remember=%1 PASSWD_REMEMBER_HISTORY 0 ,/ pwhistory-remember,1 $4 ENABLE_SYSRQ no yes(5 ,6 SCR::Execute .target.bash echo 1 > /proc/sys/kernel/sysrq,8 SCR::Execute .target.bash echo 0 > /proc/sys/kernel/sysrq(; -; ,< $> SCR::Read ( .sysconfig.displaymanager.DISPLAYMANAGER$? || kdm kdm3 ,A SCR::Execute .target.bash /sbin/SuSEconfig --module kde3,B SCR::Execute .target.bash + /sbin/SuSEconfig --module ,C SCR::Execute .target.bash% /sbin/SuSEconfig --module permissions(F /sbin/set_polkit_default_privs,G SCR::Execute .target.bash /sbin/set_polkit_default_privs ,I SCR::Execute .target.bash" /sbin/SuSEconfig --module profiles(K -K ,L ,O foreach setting action (Q 4R res ,S
y2milestone
6 Option %1 has been modified, activating the change: %2 $U SCR::Execute .target.bash (V 4W ,X
y2error
Activation failed (^ -^ &_ -` %i ! tmpSettings (j
-j &l $m
,n foreach k v
(o ! haskey
'p
'r
&t eval -u %} " -~ eval % # settings current summary $ , foreach key & remove $ custom, maplist key level ,
y2debug
%1=%2 ( & ,
y2debug
%1=%2 $ ' Current Security Level: Custom settings security( custom&
sformat
Current Security Level: %1 security - % $ -