KR20010070729A - Secure cop - Google Patents

Abstract

PURPOSE: A secure cop is provided to enable a general user to set a supervision of an automated intellectual system in a specific field of security. CONSTITUTION: The Secure Cop program is currently modularized with a C language which is a configuration language of Linux. In addition, the Secure Cop program is formed of binary files compiled. The Secure Cop program is composed of one binary file. Also, a source composed of the program is composed of one file. The program intellectually performs a system security setting and configuration without the intervention of a user. The program internally checks and changes the weakness of the system. Therefore, the performance of security for the integrated system is increased.

Description

Secure cop {secure cop}

In the field of automatic security setting, the digital processing products of the low level security setting

There are many but specialized system search and security settings for security.

There is no product without user intervention.

Automated intelligent system security settings and end users

User convenience in a special field of inaccessible security

Its purpose is to help.

Intelligent system security settings and configuration without user intervention

By internally checking and changing security systems for vulnerabilities

It is a new idea product that increases the security of integrated systems.

1.Membership of Secure Cop

Currently, Secure Cop program is modularized in C language which is Linux's composition language.

And the program is made of compiled binary files.

3.Secure Cop Analysis

◎ This program consists of one binary file

The source of the program also consists of a single file.

Looking at the contents of this source, you will be able to:

Source code

/ *

* Exploit Security Permissions

*

* <Work details>

* 1.suid file check

* 2.sgid file check

* 3.Remove suid bit of suid file

4. Remove the sgid bit of the sgid file

* 5. / bin / su permission processing and group permission modification

6. Add any account wheel to / etc / group file

* 7. Added contents of /etc/pam.d/su

8.daemon setting (/ bin / bash)

9.log file security

* Modify the 10.named.conf file to increase the security level for DNS

* 11. Stop responding to ping by modifying /etc/sysctl.conf file

12. Apply chattr to additional important files (/ bin / bash)

* 13. Set security permissions for each tool (fileutils) by finishing

* 14.Record of work

*

*

* /

#include <stdio.h>

#include <unistd.h>

#include <sys / types.h>

#include <sys / stat.h>

char * suidfind = "/ usr / bin / find / -perm +4000 2> / dev / null> perm4000";

char * sgidfind = "/ usr / bin / find / -perm +2000 2> / dev / null> perm2000";

char * clear = "/ usr / bin / clear";

int main (int argc, char ** argv)

{

struct stat st; / * Specify a variable to check file PATH * /

FILE * f; / * Set fopen () variable to add specific file contents * /

char q; / * char variable for question * /

int uid; / * Specify a variable to check if it is root at startup * /

uid = getuid ();

/ * if statement to check if uid is 0 * /

if (! (uid == 0)) {

printf ("\ nYou are not root!: (\ n");

printf ("Only root access to this program \ n \ n");

exit (0);

}

printf ("\ nSecurity exploit \ n \ n");

printf ("Advise by poly, alex <help@gnuhacker.com> \ n");

printf ("Written by 1ndr4 <1ndr4@hanmail.net> \ n \ n");

sleep (1);

/ * Check the files needed for the program * /

printf ("checking / usr / bin / find file .......");

if (stat ("/ usr / bin / find", & st) <0) {

printf ("failed!");

exit (0);

}

else

printf ("ok! \ n");

printf ("checking / usr / bin / clear .......");

if (stat ("/ usr / bin / clear", & st) <0) {

printf ("failed! \ n");

exit (0);

}

else

printf ("ok! \ n");

printf ("checking / bin / su .......");

if (stat ("/ bin / su", & st) <0) {

printf ("failed! \ n");

exit (0);

}

else

printf ("ok! \ n");

printf ("checking / etc / group .......");

if (stat ("/ etc / group", & st) <0) {

printf ("failed! \ n");

exit (0);

}

else

printf ("ok! \ n");

printf ("checking / bin / vi .......");

if (stat ("/ bin / vi", & st) <0) {

printf ("failed! \ n");

exit (0);

}

else

printf ("ok! \ n");

printf ("checking /etc/pam.d/su .......");

if (stat ("/ etc / pam.d / su", & st) <0) {

printf ("failed! \ n");

exit (0);

}

else

printf ("ok! \ n");

printf ("checking / bin / ps .......");

if (stat ("/ bin / ps", & st) <0) {

printf ("failed! \ n");

exit (0);

}

else

printf ("ok! \ n");

printf ("checking / usr / bin / chattr .......");

if (stat ("/ usr / bin / chattr", & st) <0) {

printf ("failed! \ n");

exit (0);

}

else

printf ("ok! \ n");

printf ("checking /etc/sysctl.conf .......");

if (stat ("/ etc / sysctl.conf", & st) <0) {

printf ("failed! \ n");

exit (0);

}

else

printf ("ok! \ n");

sleep (3);

system (clear);

/ * 1. Start suid file checking and see the complete list * /

printf ("[1] find to suid permission 4000! \ n \ n");

system (suidfind);

system ("/ bin / more perm4000");

printf ("[1] = [OK!] \ n \ n");

sleep (3);

/ * 2. Start sgid file checking and view the complete list * /

printf ("[2] find to sgid permission 2000! \ n \ n");

system (sgidfind);

system ("/ bin / more perm2000");

printf ("[2] = [OK!] \ n \ n");

sleep (3);

/ * 3-4. suid, sgid file permissions modified * /

printf ("[3] modify suid file permission for security \ n \ n");

system ("find / -perm +4000 2> / dev / null -exec chmod -s {} \\; \ n");

printf ("[3] = [OK!] \ n \ n");

sleep (3);

printf ("[4] modify sgid file permission for security \ n \ n");

system ("find / -perm +2000 2> / dev / null -exec chmod -s {} \\; \ n");

printf ("[4] = [OK!] \ n \ n");

sleep (3);

/ *

* 5. Set / bin / su permission to 4750 and group permissions to root: root

Replace * with root: wheel

* /

printf ("[5] modify permission of / bin / su \ n \ n");

sleep (3);

chown ("/ bin / su", 0, 10);

chmod ("/ bin / su", 04750);

printf ("[5] = [OK!] \ n \ n");

sleep (3);

/ * 6. Add any administrator account to the wheel group in the / etc / group file * /

printf ("[6] write to the / etc / group \ n \ n");

sleep (3);

system ("/ bin / vi / etc / group");

printf ("[6] = [OK!] \ n \ n");

sleep (3);

/ * 7. Add the contents of /etc/pam.d/su. * /

/ * This is to clarify the application of permissions to / bin / su. * /

printf ("[7] add to the /etc/pam.d/su\n\n");

sleep (3);

if (stat ("/ etc / pam.d / su", & st) <0) {

printf ("Failed !! Not found data of /etc/pam.d/su\n\n");

f = fopen ("pam.d", "a");

fprintf (f, "\ n \ n ===== / etc / pam.d / su ===== \ n \ n");

fprintf (f, "Not found data of /etc/pam.d/su ..: (\ n \ n");

fclose (f);

exit (0);

}

f = fopen ("/ etc / pam.d / su", "a");

fprintf (f, "auth sufficient /lib/security/pam_rootok.so debug \ n");

fprintf (f, "auth required /lib/security/pam_wheel.so group = wheel");

fclose (f);

f = fopen ("pam.d", "a");

fprintf (f, "\ n \ n ===== / etc / pam.d / su ===== \ n \ n");

fprintf (f, "Added next contents \ n \ n");

fprintf (f, "'auth sufficient /lib/security/pam_rootok.so debug' \ n");

fprintf (f, "'auth required /lib/security/pam_wheel.so group = wheel' \ n");

fclose (f);

printf ("[7] = [OK!] \ n \ n")

sleep (3);

system (clear);

/ *

8. Daemon settings.

* To do Daemon setting such as unnecessary Daemon Cleanup

* Float the shell for a while. This does not mean that the program is completely over

* If you issue the exit command, you will return to program execution.

* /

printf ("[8] Daemon Setting start \ n");

f = fopen ("daemon1", "a");

fprintf (f, "===== Process state before daemon setting ==== \ n \ n");

fclose (f);

system ("ps -aux >> daemon1");

printf ("Input 'exit' command at daemon setting done \ n \ n");

sleep (3);

system ("/ bin / bash");

printf ("\ n \ n [8] = [OK!] \ n \ n");

f = fopen ("daemon2", "a");

fprintf (f, "===== Process state next daemon setting ==== \ n \ n");

fclose (f);

system ("ps -aux >> daemon2");

sleep (3);

/ *

9. Defining a New syslog.conf File

* Add the contents of syslog.conf so that log files are logged twice.

* /

printf ("[9] Log file security \ n \ n");

printf ("1. Move /etc/syslog.conf file \ n");

/ * Do not destroy the original syslog.conf but leave it in the syslog.conf.bak file. * /

rename ("/ etc / syslog.conf", "/etc/syslog.conf.bak");

if (! (stat ("/ etc / syslog.conf", & st) <0)) {

printf ("\ nFailed !! \ n");

}

sleep (2);

/ * Create a directory to store new log files * /

printf ("2. Make another logfile save directory \ n");

mkdir ("/ Security", 0700);

mkdir ("/ Security / logs", 0700);

sleep (2);

/ * New syslog.conf definition * /

printf ("3. Writing in to /etc/syslog.conf file \ n");

sleep (3);

f = fopen ("/ etc / syslog.conf", "a");

fprintf (f, "# Log all kernel messages to the console. \ n");

fprintf (f, "# Logging much else clutters up the screen. \ n");

fprintf (f, "kern. * / dev / console \ n");

fprintf (f, "kern. * / Security / logs / console \ n \ n");

fprintf (f, "# Log anything (except mail) of level info or higher. \ n");

fprintf (f, "# Don't log private authentication messages! \ n");

fprintf (f, "* .info; mail.none; authpriv.none / var / log / messages \ n");

fprintf (f, "* .info; mail.none; authpriv.none / Security / logs / messages \ n \ n");

fprintf (f, "# The authpriv file has restricted access. \ n");

fprintf (f, "authpriv. * / var / log / secure \ n");

fprintf (f, "authpriv. * / Security / logs / secure \ n \ n");

fprintf (f, "# Log all the mail messages in one place. \ n");

fprintf (f, "mail. * / var / log / maillog \ n");

fprintf (f, "mail. * / Security / logs / maillog \ n \ n");

fprintf (f, "# Everybody gets emergency messages, plus log them on another \ n");

fprintf (f, "# machine. \ n");

fprintf (f, "* .emerg * \ n \ n");

fprintf (f, "# Save mail and news errors of level err and higherin a \ n");

fprintf (f, "# special file. \ n");

fprintf (f, "uucp, news.crit / var / log / spooler \ n");

fprintf (f, "uucp, news.crit / Security / logs / spooler \ n \ n");

fprintf (f, "# Save boot messages also to boot.log \ n");

fpritnf (f, "local7. * /var/log/boot.log\n");

fprintf (f, "local7. * /Security/logs/boot.log\n\n");

fclose (f);

/ * Hard links to other log files not defined in syslog.conf file * /

printf ("4. Move remaining logfiles your self \ n");

printf ("ex) ln -bf / var / log / ?? / Security / logs / ?? \ n \ n");

printf ("1./var/log/wtmp\n");

printf ("2./var/log/lastlog\n");

printf ("3./var/log/xferlog\n");

printf ("4./var/run/utmp\n\n");

sleep (3);

system ("/ bin / bash");

sleep (3);

/ * Restart syslog daemon * /

printf ("5. Restart syslog daemon \ n");

system ("/ etc / rc.d / init.d / syslog restart");

sleep (3);

system (clear);

printf ("[9] = [OK!] \ n \ n");

/ * 10. DNS security settings related to named * /

printf ("[10] Modify the named.conf or named.boot \ n \ n");

sleep (3);

/ *

If the statement named.conf exists, bind8.x version, if named.boot exists

* recognized as bind4.x version

* /

if (! (stat ("/ etc / named.conf", & st) <0)) {

printf ("\ nThis named version is 8.x .... \ n \ n");

printf ("Writing in to named.conf messages \ n");

printf ("'Contact domain@domain.com if you have question' \ n");

printf ("and ACL Security Policy Setting .. \ n");

printf ("A u ready? \ n \ n");

sleep (5);

system ("/ bin / vi /etc/named.conf");

}

if (! (stat ("/ etc / named.boot", & st) <0)) {

printf ("\ nThis named version is 4.x .... \ n \ n");

printf ("Writing in to named.boot messages \ n");

printf ("'Contact domain@domain.com if you have question' \ n");

printf ("and ACL Security Policy Setting .. \ n");

printf ("A u ready? \ n \ n");

sleep (5);

system ("/ bin / vi /etc/named.boot");

}

printf ("[10] = [OK!] \ n \ n");

sleep (3);

/ * 11. Add the contents of the sysctl.conf file to prevent ping from the outside * /

printf ("[11] Modify the /etc/sysctl.conf\n\n");

f = fopen ("/ etc / sysctl.conf", "a");

fprintf (f, "# ping ignore all request \ n");

fprintf (f, "net.ipv4.icmp_echo_ignore_all = 1");

fclose (f);

system ("/ etc / rc.d / init.d / network restart");

sleep (3);

printf ("[11] = [OK!] \ n \ n");

sleep (3);

/ * 12. Set chattr for important files * /

printf ("[12] Apply chattr to other files \ n \ n");

sleep (3);

printf ("Do you apply chattr to other files? (y / n):");

scanf ("% c", &q);

if (q == 'Y' || q == 'y')

system ("/ bin / bash");

else

printf ("\ nGo to Next phase .. \ n");

printf ("\ n \ n [12] = [OK!] \ n \ n");

sleep (3);

/ * 13. Set permissions for each fileutil * /

printf ("[13] Apply permissison to fileutils \ n \ n");

printf ("-information-\ n");

printf ("This program standard owner group setting 'adm' \ n");

printf ("'adm'user is default uid = 4 .. \ n");

printf ("A u confirm 'adm' user uid of this server? (y / n):");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

printf ("\ n");

system ("/ bin / more / etc / group | grep adm: x:");

printf ("\ n \ n");

}

printf ("U choose 'automatic' or 'manual' \ n \ n");

printf ("-information-\ n \ n");

printf ("'automatic'-not inquire about apply permission of this program \ n");

printf ("to user. \ n \ n");

printf ("'manual'-step by step to apply permission \ n \ n");

printf ("1-'automatic' \ n");

printf ("2-'manual' \ n \ n");

printf ("Your choose (1/2):");

scanf ("% d", &q);

if (q == 1 || q == 1) {

printf ("\ nok..u choose 'automatic' mode.:) \ n");

printf ("working ........ \ n");

printf ("wait a minute .. \ n");

chmod ("/ bin", 0711);

chmod ("/ boot", 0700);

chmod ("/ dev", 0711);

chown ("/ dev / audio", 0, 0);

chmod ("/ dev / audio", 0600);

chown ("/ dev / dsp", 0, 0);

chmod ("/ dev / dsp", 0600);

chown ("/ dev / esd.conf", 0, 4);

chmod ("/ dev / esd.conf", 0640);

chown ("/ etc", 0, 4);

chmod ("/ etc", 0711);

chown ("/ etc / conf.modules", 0, 4);

chmod ("/ etc / conf.modules", 0640);

chown ("/ etc / cron.daily", 0, 4);

chmod ("/ etc / cron.daily", 0750);

chown ("/ etc / cron.hourly", 0, 4);

chmod ("/ etc / cron.hourly", 0750);

chown ("/ etc / cron.monthly", 0, 4);

chmod ("/ etc / cron.monthly", 0750);

chown ("/ etc / cron.weekly", 0, 4);

chmod ("/ etc / cron.weekly", 0750);

chown ("/ etc / crontab", 0, 4);

chmod ("/ etc / crontab", 0640);

chown ("/ etc / dhcpcd", 0, 4);

chmod ("/ etc / dhcpcd", 0750);

system ("/ bin / chown root: adm / etc / dhcpcd / *; / bin / chmod 640 / etc / dhcpcd / *");

chown ("/ etc / gettydefs", 0, 4);

chmod ("/ etc / gettydefs", 0640);

chown ("/ etc / ftpaccess", 0, 4);

chmod ("/ etc / ftpaccess", 0640);

chown ("/ etc / ftpconversion", 0, 4);

chmod ("/ etc / ftpconversion", 0640);

chown ("/ etc / ftp / groups", 0, 4);

chmod ("/ etc / ftp / groups", 0640);

chown ("/ etc / ftpusers", 0, 4);

chmod ("/ etc / ftpusers", 0640);

chown ("/ etc / hosts", 0, 4);

chmod ("/ etc / hosts", 0640);

chown ("/ etc / hosts.allow", 0, 4);

chmod ("/ etc / hosts.allow", 0640);

chown ("/ etc / hosts.deny", 0, 4);

chmod ("/ etc / hosts.deny", 0640);

chown ("/ etc / hosts.equiv", 0, 4);

chmod ("/ etc / hosts.equiv", 0640);

chown ("/ etc / inetd.conf", 0, 4);

chmod ("/ etc / inetd.conf", 0640);

chown ("/ etc / ld.so.conf", 0, 4);

chmod ("/ etc / ld.so.conf", 0640);

chown ("/ etc / lilo.conf", 0, 4);

chmod ("/ etc / lilo.conf", 0600);

chown ("/ etc / syslog.conf", 0, 4);

chmod ("/ etc / syslog.conf", 0640);

chown ("/ etc / updatadb.conf", 0, 4);

chmod ("/ etc / updatadb.conf", 0640);

chown ("/ etc / modules.conf", 0, 4);

chmod ("/ etc / modules.conf", 0640);

chown ("/ etc / sendmail.cf", 0, 4);

chmod ("/ etc / sendmail.cf", 0640);

chown ("/ etc / rc.d / init.d", 0, 4);

chmod ("/ etc / rc.d / init.d", 0750);

chown ("/ etc / rc.d / init.d / syslog", 0, 4);

chmod ("/ etc / rc.d / init.d / syslog", 0740);

chown ("/ etc / rc.d", 0, 4);

chmod ("/ etc / rc.d", 0640);

chown ("/ etc / inittab", 0, 4);

chmod ("/ etc / inittab", 0640);

chown ("/ etc / motd", 0, 4);

chmod ("/ etc / motd", 0644);

chmod ("/ etc / printcap", 0640);

chmod ("/ etc / profile", 0644);

chown ("/ etc / securetty", 0, 4);

chmod ("/ etc / securetty", 0640);

chmod ("/ etc / shutdown.allow", 0600);

chmod ("/ etc / ssh_config", 0644);

chown ("/ etc / ssh_host_key", 0, 4);

chmod ("/ etc / ssh_host_key", 0640);

chown ("/ etc / ssh_host_key.pub", 0, 4);

chmod ("/ etc / ssh_host_key.pub", 0644);

chown ("/ etc / sshd_config", 0, 4);

chmod ("/ etc / sshd_config", 0640);

chown ("/ home", 0, 4);

chmod ("/ home", 0751);

system ("/ bin / chmod 701 / home / *");

chown ("/ lib", 0, 4);

chmod ("/ lib", 0751);

chown ("/ mnt", 0, 4);

chmod ("/ mnt", 0750);

chmod ("/ root", 700);

chown ("/ sbin", 0, 4);

chmod ("/ sbin", 0751);

chmod ("/ tmp", 01777);

chown ("/ usr", 0, 4);

chmod ("/ usr", 0751);

system ("/ bin / chown root: adm / usr / *; / bin / chmod 751 / usr / *");

chmod ("/ usr / X11R6", 0751);

chown ("/ usr / bin", 0, 4);

chmod ("/ usr / bin", 0751);

system ("/ bin / chown root: root / usr / bin / *; / bin / chmod 755 / usr / bin / *");

chown ("/ usr / sbin", 0, 4);

chmod ("/ usr / sbin", 0751);

system ("/ bin / chown root: root / usr / sbin / *; / bin / chmod 755 / usr / sbin / *");

chown ("/ var", 0, 0);

chmod ("/ var", 0755);

chown ("/ var / log", 0, 0);

chmod ("/ var / log", 0755);

system ("/ bin / chown root: root / var / log / *; / bin / chmod 600 / var / log / *");

chown ("/ var / spool / mail", 0, 14);

chmod ("/ var / spool / mail", 0771);

chmod ("/ usr / bin / gcc", 0700);

chmod ("/ usr / bin / g ++", 0700);

chmod ("/ usr / bin / colorgcc", 0700);

chmod ("/ usr / bin / uudecode", 0700);

chmod ("/ usr / bin / w", 0700);

chmod ("/ usr / bin / who", 0700);

chmod ("/ usr / bin / finger", 0700);

chmod ("/ bin / ping", 0700);

chmod ("/ usr / bin / telnet", 0700);

chmod ("/ usr / bin / ssh", 0700);

chmod ("/ usr / sbin / traceroute", 0700);

sleep (3);

f = fopen ("fileutil", "a");

fprintf (f, "\ n \ n ===== fileutil permission setting ===== \ n \ n");

fprintf (f, "Security permission Setting \ n \ n");

fprintf (f, "/ bin-root: root, 711 \ n");

fprintf (f, "/ boot-root: root, 700 \ n");

fprintf (f, "/ dev-root: root, 711 \ n");

fprintf (f, "/ dev / audio-root: root, 600 \ n");

fprintf (f, "/ dev / dsp-root: root, 600 \ n");

fprintf (f, "/etc/esd.conf-root: adm, 640 \ n");

fprintf (f, "/ etc-root: adm, 711 \ n");

fprintf (f, "/etc/conf.modules-root: adm, 640 \ n");

fprintf (f, "/etc/cron.daily-root: adm, 750 \ n");

fprintf (f, "/etc/cron.hourly-root: adm, 750 \ n");

fprintf (f, "/etc/cron.monthly-root: adm, 750 \ n");

fprintf (f, "/etc/cron.weekly-root: adm, 750 \ n");

fprintf (f, "/ etc / crontab-root: adm, 640 \ n");

fprintf (f, "/ etc / dhcpcd-root: adm, 750 \ n");

fprintf (f, "/ etc / dhcpcd / *-root: adm, 640 \ n");

fprintf (f, "/ etc / gettydefs-root: adm, 640 \ n");

fprintf (f, "/ etc / ftpaccess-root: adm, 640 \ n");

fprintf (f, "/ etc / ftpconversions- root: adm, 640 \ n");

fprintf (f, "/ etc / ftp / groups-root: adm, 640 \ n");

fprintf (f, "/ etc / ftpusers-root: adm, 640 \ n");

fprintf (f, "/ etc / hosts-root: adm, 640 \ n");

fprintf (f, "/etc/hosts.allow-root: adm, 640 \ n");

fprintf (f, "/etc/hosts.deny-root: adm, 640 \ n");

fprintf (f, "/etc/hosts.equiv-root: adm, 640 \ n");

fprintf (f, "/etc/inetd.conf-root: adm, 640 \ n");

fprintf (f, "/etc/ld.so.conf-root: adm, 640 \ n");

fprintf (f, "/etc/lilo.conf-root: adm, 600 \ n");

fprintf (f, "/etc/syslog.conf-root: adm, 640 \ n");

fprintf (f, "/etc/updatadb.conf-root: adm, 640 \ n");

fprintf (f, "/etc/modules.conf-root: adm, 640 \ n");

fprintf (f, "/etc/sendmail.cf-root: adm, 640 \ n");

fprintf (f, "/etc/rc.d/init.d-root: adm, 750 \ n");

fprintf (f, "/etc/rc.d/init.d/dydlog-root:adm, 740 \ n");

fprintf (f, "/etc/rc.d-root: adm, 640 \ n");

fprintf (f, "/ etc / inittab-root: adm, 640 \ n");

fprintf (f, "/ etc / motd-root: adm, 644 \ n");

fprintf (f, "/ etc / printcap--, 640 \ n");

fprintf (f, "/ etc / profile-root: root, 644 \ n");

fprintf (f, "/ etc / securetty-root: adm, 640 \ n");

fprintf (f, "/etc/shutdown.allow-root:root, 600 \ n");

fprintf (f, "/ etc / ssh_config-root: adm, 644 \ n");

fprintf (f, "/ etc / ssh_host_key-root: adm, 640 \ n");

fprintf (f, "/etc/ssh_host_key.pub-root:adm, 644 \ n");

fprintf (f, "/ etc / sshd_config-root: adm, 640 \ n");

fprintf (f, "/ home-root: adm, 751 \ n");

fprintf (f, "/ home / *--, 701 \ n");

fprintf (f, "/ lib-root: adm, 751 \ n");

fprintf (f, "/ mnt-root: adm, 750 \ n");

fprintf (f, "/ root-root: root, 700 \ n");

fprintf (f, "/ sbin-root: adm, 751 \ n");

fprintf (f, "/ tmp-root: root, 1777 \ n");

fprintf (f, "/ usr-root: adm, 751 \ n");

fprintf (f, "/ usr / *-root: adm, 751 \ n");

fprintf (f, "/ usr / X11R6--, 751 \ n");

fprintf (f, "/ usr / bin-root: adm, 751 \ n");

fprintf (f, "/ usr / bin / *-root: root, 755 \ n");

fprintf (f, "/ usr / sbin-root: adm, 751 \ n");

fprintf (f, "/ usr / sbin / *-root: root, 755 \ n");

fprintf (f, "/ var / spool / mail-root: mail, 771 \ n");

fprintf (f, "/ usr / bin / gcc--, 700 \ n");

fprintf (f, "/ usr / bin / g ++--, 700 \ n");

fprintf (f, "/ usr / bin / colorgcc--, 700 \ n");

fprintf (f, "/ usr / bin / uudecode--, 700 \ n");

fprintf (f, "/ usr / bin / w--, 700 \ n");

fprintf (f, "/ usr / bin / who--, 700 \ n");

fprintf (f, "/ usr / bin / finger--, 700 \ n");

fprintf (f, "/ bin / ping--, 700 \ n");

fprintf (f, "/ usr / bin / telnet--, 700 \ n");

fprintf (f, "/ usr / bin / ssh--, 700 \ n");

fprintf (f, "/ usr / sbin / traceriute--, 700 \ n \ n");

fclose (f);

printf ("\ nOK! modify permission to all files");

printf ("\ n \ n [13] = [OK!] \ n \ n");

sleep (3);

system (clear);

}

if (q == 2 || q == 2) {

printf ("\ nok..u choose 'manual' mode.:) \ n \ n");

printf ("1. / bin directory \ n");

/ * Question whether to change the permissions of the / bin directory to 711 * /

printf ("Do you modify / bin directory to permission 711? (y / n):");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chmod ("/ bin", 0711);

f = fopen ("fileutil", "a");

fprintf (f, "\ n \ n ===== fileutil permission setting ===== \ n \ n");

fprintf (f, "Security permission Setting \ n \ n");

fprintf (f, "/ bin-root: root, 711 \ n");

fclose (f);

}

printf ("\ n2. / boot directory \ n");

/ * Question whether to change the permissions of the / boot directory to 700 * /

printf ("Do you modify / boot directory to permission 700? (y / n):");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chmod ("/ boot", 0700);

f = fopen ("fileutil", "a");

fprintf (f, "/ boot-root: root, 700 \ n");

fclose (f);

}

printf ("\ n3. / dev directory \ n");

/ * Question about whether to change the permissions of the / dev directory to 711 * /

printf ("Do you modify / dev directory to permission 711? (y / n):");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chmod ("/ dev", 0711);

f = fopen ("fileutil", "a");

fprintf (f, "/ dev-root: root, 711 \ n");

fclose (f);

}

printf ("\ n4. / home directory and under directories in the / home \ n");

/ * Set permissions of the / home directory and its subdirectories * /

printf ("Do you modify / home directory and

subdirectories in the / home to permission [751, 701]? (y / n): ");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chown ("/ home", 0, 4);

chmod ("/ home", 0751);

system ("/ bin / chmod 701 / home / *");

f = fopen ("fileutil", "a");

fprintf (f, "/ home-root: adm, 751 \ n");

fprintf (f, "/ home / *--, 701 \ n");

fclose (f);

}

printf ("\ n5. / lib, / mnt, / root, / sbin, / tmp directory \ n \ n");

printf ("/ lib directory-751 permission, root: adm \ n");

printf ("/ mnt directory-750 permission, root: adm \ n");

printf ("/ root directory-700 permission, root: root \ n");

printf ("/ sbin directory-751 permission, root: adm \ n");

printf ("/ tmp directory-1777 permission, root: root \ n \ n");

/ * Set permissions on / lib, / mnt, / root, / sbin and / tmp directories * /

printf ("Do you modify this directory to permission? (y / n):");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chown ("/ lib", 0, 4);

chmod ("/ lib", 0751);

chown ("/ mnt", 0, 4);

chmod ("/ mnt", 0750);

chown ("/ root", 0, 0);

chmod ("/ root", 0700);

chown ("/ sbin", 0, 4);

chmod ("/ sbin", 0751);

chown ("/ tmp", 0, 4);

chmod ("/ tmp", 01777);

f = fopen ("fileutil", "a");

fprintf (f, "/ lib-root: adm, 751 \ n");

fprintf (f, "/ mnt-root: adm, 750 \ n");

fprintf (f, "/ root-root: root, 700 \ n");

fprintf (f, "/ sbin-root: adm, 751 \ n");

fprintf (f, "/ tmp-root: root, 1777 \ n");

fclose (f);

}

printf ("\ n6. subdirectories in the / usr directory \ n \ n");

printf ("/ usr directory-751 permission, root: adm \ n");

printf ("subdirectories in / usr-751 permission, root: adm \ n");

printf ("/ usr / bin-751 permission, root: adm \ n");

printf ("subdirectories in / usr / bin-755 permission, root: root \ n");

printf ("/ usr / sbin-751 permission, root: adm \ n");

printf ("subdirectories in / usr / sbin-755 permission, root: root \ n");

printf ("/ usr / X11R6-751 permission \ n \ n");

/ * Set permissions for subdirectories in the / usr directory * /

printf ("Do you modify this directory to permission? (y / n):");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chown ("/ usr", 0, 4);

chmod ("/ usr", 0751);

system ("/ bin / chown root: adm / usr / *; / bin / chmod 751 / usr / *");

system ("/ bin / chown root: root / usr / bin / *; / bin / chmod 755 / usr / bin / *");

chown ("/ usr / sbin", 0, 4);

chmod ("/ usr / sbin", 0751);

chmod ("/ usr / X11R6", 0751);

system ("/ bin / chmod 755 / usr / sbin / *");

f = fopen ("fileutil", "a");

fprintf (f, "/ usr-root: adm, 751 \ n");

fprintf (f, "/ usr / *-root: adm, 751 \ n");

fprintf (f, "/ usr / X11R6--, 751 \ n");

fprintf (f, "/ usr / bin-root: adm, 751 \ n");

fprintf (f, "/ usr / bin / *-root: root, 755 \ n");

fprintf (f, "/ usr / sbin-root: adm, 751 \ n");

fprintf (f, "/ usr / sbin / *-root: root, 755 \ n");

fclose (f);

}

printf ("\ n7. subdirectories in the / var directory \ n \ n");

printf ("/ var-755 permission \ n");

printf ("/ var / spool / mail-771 permission, root: mail \ n \ n");

/ * Set permissions for subdirectories under / var directory * /

printf ("Do you modify this directory to permission? (y / n):");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chmod ("/ var", 0755);

chown ("/ var / spool / mail", 0, 12);

chmod ("/ var / spool / mail", 771);

f = fopen ("fileutil", "a");

fprintf (f, "/ var / spool / mail-root: mail, 771 \ n");

fclose (f);

}

printf ("\ n8. / dev / audio file \ n");

/ * Question about whether to change the permissions of the / dev / audio file to 600 * /

printf ("Checking / dev / audio file .......");

if (stat ("/ dev / audio", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("Checking / dev / dsp file .......");

if (stat ("/ dev / dsp", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("Checking /etc/esd.conf .......");

if (stat ("/ etc / esd.conf", & st) <0)

printf ("failed! \ n \ n");

else

printf ("ok! \ n \ n");

printf ("Do you modify / dev / audio, dsp and /etc/esd.conf file

to permission 600,640? (y / n): ");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chmod ("/ dev / audio", 0600);

chmod ("/ dev / dsp", 0600);

chown ("/ etc / esd.conf", 0, 4);

chmod ("/ etc / esd.conf", 0640);

f = fopen ("fileutil", "a");

fprintf (f, "/ dev-root: root, 711 \ n");

fprintf (f, "/ dev / audio-root: root, 600 \ n");

fprintf (f, "/ dev / dsp-root: root, 600 \ n");

fprintf (f, "/etc/esd.conf-root: adm, 640 \ n");

fclose (f);

}

printf ("\ n9. / etc directory \ n");

/ * Question about changing the owning group and permissions in the / etc directory * /

printf ("Do you modify / etc directory to permission 711 and owner group? (y / n):");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chown ("/ etc", 0, 4);

chmod ("/ etc", 0711);

f = fopen ("fileutil", "a");

fprintf (f, "/ etc-root: adm, 711 \ n");

fclose (f);

}

printf ("\ n10. /etc/conf.modules\n");

/ * Question about changing ownership group and permissions in /etc/conf.modules * /

printf ("Checking /etc/conf.modules .......");

if (stat ("/ etc / conf.modules", & st) <0) {

printf ("failed! \ n \ n");

printf ("Not found, /etc/conf.modules file ... \ n");

}

else {

printf ("ok! \ n \ n");

printf ("Do you modify /etc/conf.modules file to

permission 640 and owner group? (y / n): ");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chown ("/ etc / conf.modules", 0, 4);

chmod ("/ etc / conf.modules", 0640);

f = fopen ("fileutil", "a");

fprintf (f, "/etc/conf.modules-root: adm, 640 \ n");

fclose (f);

}

}

printf ("\ n11. / etc / cron files \ n \ n");

/ * Question about changing owning groups and permissions in the /etc/cron.daily directory * /

printf ("Checking /etc/cron.daily .......");

if (stat ("/ etc / cron.daily", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("Checking /etc/cron.hourly .......");

if (stat ("/ etc / cron.hourly", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("Checking /etc/cron.monthly .......");

if (stat ("/ etc / cron.monthly", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("Checking /etc/cron.weekly .......");

if (stat ("/ etc / cron.weekly", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("Checking / etc / crontab .......");

if (stat ("/ etc / crontab", & st) <0)

printf ("failed! \ n \ n");

else

printf ("ok! \ n \ n");

printf ("(1) /etc/cron.daily\n");

printf ("(2) /etc/cron.hourly\n");

printf ("(3) /etc/cron.monthly\n");

printf ("(4) /etc/cron.weekly\n");

printf ("(5) / etc / crontab (permission 640) \ n \ n");

printf ("Do you modify cron files of / etc directory to

permission 750 and owner group? (y / n): ");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chown ("/ etc / cron.daily", 0, 4);

chmod ("/ etc / cron.daily", 0750);

chown ("/ etc / cron.hourly", 0, 4);

chmod ("/ etc / cron.hourly", 0750);

chown ("/ etc / cron.monthly", 0, 4);

chmod ("/ etc / cron.monthly", 0750);

chown ("/ etc / cron.weekly", 0, 4);

chmod ("/ etc / cron.weekly", 0750);

chown ("/ etc / crontab", 0, 4);

chmod ("/ etc / crontab", 0640);

f = fopen ("fileutil", "a");

fprintf (f, "/etc/cron.daily-root: adm, 750 \ n");

fprintf (f, "/etc/cron.hourly-root: adm, 750 \ n");

fprintf (f, "/etc/cron.monthly-root: adm, 750 \ n");

fprintf (f, "/etc/cron.weekly-root: adm, 750 \ n");

fprintf (f, "/ etc / crontab-root: adm, 640 \ n");

fclose (f);

}

/ * Change the permissions of the / etc / dhcpcd directory and the files in it * /

printf ("\ n12. / etc / dhcpcd directory and all files \ n \ n");

printf ("(1) / etc / dhcpcd directory (permission 750) \ n");

printf ("(2) all files of / etc / dhcpcd directory (permission 640) \ n \ n");

printf ("Do you modify all files of / etc / dhcpcd directory to

permission 640, 750 and owner group? (y / n): ");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chown ("/ etc / dhcpcd", 0, 4);

chmod ("/ etc / dhcpcd", 0750);

system ("chmod 640 / etc / dhcpcd / *; chown root: adm / etc / dhcpcd / *");

f = fopen ("fileutil", "a");

fprintf (f, "/ etc / dhcpcd-root: adm, 750 \ n");

fprintf (f, "/ etc / dhcpcd / *-root: adm, 640 \ n");

fclose (f);

}

/ * Change the permissions of the / etc / gettydefs file and ftp related files in the / etc directory * /

printf ("\ n13. / etc / gettydefs file and ftp files of / etc directory \ n \ n");

printf ("(1) Checking / etc / gettydefs file .......");

if (stat ("/ etc / gettydefs", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(2) Checking / etc / ftpaccess .......");

if (stat ("/ etc / ftpaccess", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(3) Checking / etc / ftpconversions .......");

if (stat ("/ etc / ftpconversions", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(4) Checking / etc / ftp / groups .......");

if (stat ("/ etc / ftp / groups", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(5) Checking / etc / ftpusers .......");

if (stat ("/ etc / ftpusers", & st) <0)

printf ("failed! \ n \ n");

else

printf ("ok! \ n \ n");

printf ("Do you modify / etc / gettydefs file and ftp files of the / etc directory to

permission 640 and owner group? (y / n): ");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chown ("/ etc / gettydefs", 0, 4);

chmod ("/ etc / gettydefs", 0640);

chown ("/ etc / ftpaccess", 0, 4);

chmod ("/ etc / ftpaccess", 0640);

chown ("/ etc / ftpconversions", 0, 4);

chmod ("/ etc / ftpconversions", 0640);

chown ("/ etc / ftp / groups", 0, 4);

chmod ("/ etc / ftp / groups", 0640);

chown ("/ etc / ftpusers", 0, 4);

chmod ("/ etc / ftpusers", 0640);

f = fopen ("fileutil", "a");

fprintf (f, "/ etc / gettydefs-root: adm, 640 \ n");

fprintf (f, "/ etc / ftpaccess-root: adm, 640 \ n");

fprintf (f, "/ etc / ftpconversions- root: adm, 640 \ n");

fprintf (f, "/ etc / ftp / groups-root: adm, 640 \ n");

fprintf (f, "/ etc / ftpusers-root: adm, 640 \ n");

fclose (f);

}

/ * host related files in the / etc directory * /

printf ("\ n14. host files of / etc directory \ n \ n");

printf ("(1) / etc / hosts .......");

if (stat ("/ etc / hosts", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(2) /etc/hosts.allow .......");

if (stat ("/ etc / hosts.allow", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(3) /etc/hosts.deny .......");

if (stat ("/ etc / hosts.deny", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(4) /etc/hosts.equiv .......");

if (stat ("/ etc / hosts.equiv", & st) <0)

printf ("failed! \ n \ n");

else

printf ("ok! \ n \ n");

printf ("Do you modify host files of the / etc directory to

permission 640 and owner group? (y / n): ");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chown ("/ etc / hosts", 0, 4);

chmod ("/ etc / hosts", 0640);

chown ("/ etc / hosts.allow", 0, 4);

chmod ("/ etc / hosts.allow", 0640);

chown ("/ etc / hosts.deny", 0, 4);

chmod ("/ etc / hosts.deny", 0640);

chown ("/ etc / hosts.equiv", 0, 4);

chmod ("/ etc / hosts.equiv", 0640);

f = fopen ("fileutil", "a");

fprintf (f, "/ etc / hosts-root: adm, 640 \ n");

fprintf (f, "/etc/hosts.allow-root: adm, 640 \ n");

fprintf (f, "/etc/hosts.deny-root: adm, 640 \ n");

fprintf (f, "/etc/hosts.equiv-root: adm, 640 \ n");

fclose (f);

}

/ * Modify file permissions that may be vulnerable to conf files in the / etc directory * /

printf ("\ n15. conf files of / etc directory \ n \ n");

printf ("(1) Checking /etc/inetd.conf .......");

if (stat ("/ etc / inetd.conf", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(2) Checking /etc/ld.so.conf .......");

if (stat ("/ etc / ld.so.conf", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(3) Checking /etc/lilo.conf .......");

if (stat ("/ etc / lilo.conf", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(4) Checking /etc/syslog.conf .......");

if (stat ("/ etc / syslog.conf", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(5) Checking /etc/updatadb.conf .......");

if (stat ("/ etc / updatadb.conf", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(6) Checking /etc/modules.conf .......");

if (stat ("/ etc / modules.conf", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(7) Checking /etc/sendmail.cf .......");

if (stat ("/ etc / sendmail.cf", & st) <0)

printf ("failed! \ n \ n");

else

printf ("ok! \ n \ n");

printf ("Do you modify conf files of the / etc directory to

permission 640 and owner group? (y / n): ");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chown ("/ etc / inetd.conf", 0, 4);

chmod ("/ etc / inetd.conf", 0640);

chown ("/ etc / ld.so.conf", 0, 4);

chmod ("/ etc / ld.so.conf", 0640);

chown ("/ etc / lilo.conf", 0, 4);

chmod ("/ etc / lilo.conf", 0640);

chown ("/ etc / syslog.conf", 0, 4);

chmod ("/ etc / syslog.conf", 0640);

chown ("/ etc / updatadb.conf", 0, 4);

chmod ("/ etc / updatadb.conf", 0640);

chown ("/ etc / modules.conf", 0, 4);

chmod ("/ etc / modules.conf", 0640);

chown ("/ etc / sendmail.cf", 0, 4);

chmod ("/ etc / sendmail.cf", 0640);

f = fopen ("fileutil", "a");

fprintf (f, "/etc/inetd.conf-root: adm, 640 \ n");

fprintf (f, "/etc/ld.so.conf-root: adm, 640 \ n");

fprintf (f, "/etc/lilo.conf-root: adm, 600 \ n");

fprintf (f, "/etc/syslog.conf-root: adm, 640 \ n");

fprintf (f, "/etc/updatadb.conf-root: adm, 640 \ n");

fprintf (f, "/etc/modules.conf-root: adm, 640 \ n");

fprintf (f, "/etc/sendmail.cf-root: adm, 640 \ n");

fclose (f);

}

/ * Configuration of the daemon directory in /etc/rc.d/init.d and configuration of the boot file inittab and motd * /

printf ("\ n16. daemon directory and syslogd, inittab, motd file \ n \ n");

printf ("(1) Checking /etc/rc.d/init.d/syslog .......");

if (stat ("/ etc / rc.d / init.d / syslog", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(2) Checking / etc / inittab .......");

if (stat ("/ etc / inittab", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(3) Checking / etc / motd .......");

if (stat ("/ etc / motd", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("Do you modify syslogd files and / etc / inittab,

/ etc / motd file to permission and owner group? (y / n): ");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chown ("/ etc / rc.d / init.d / syslog", 0, 4);

chmod ("/ etc / rc.d / init.d / syslog", 0740);

chown ("/ etc / rc.d / init.d", 0, 4);

chmod ("/ etc / rc.d / init.d", 0750);

chown ("/ etc / rc.d", 0, 4);

chmod ("/ etc / rc.d", 0640);

chown ("/ etc / inittab", 0, 4);

chmod ("/ etc / inittab", 0640);

chown ("/ etc / motd", 0, 4);

chmod ("/ etc / motd", 0644);

f = fopen ("fileutil", "a");

fprintf (f, "/etc/rc.d/init.d-root: adm, 750 \ n");

fprintf (f, "/etc/rc.d/init.d/dydlog-root:adm, 740 \ n");

fprintf (f, "/etc/rc.d-root: adm, 640 \ n");

fprintf (f, "/ etc / inittab-root: adm, 640 \ n");

fprintf (f, "/ etc / motd-root: adm, 644 \ n");

fclose (f);

}

/ *

* / etc / printcap, / etc / profile, / etc / securetty, /etc/shutdown.allow

* Modify permissions of ssh related files in / etc directory

* /

printf ("\ n17. / etc / printcap, profile, / etc / securetty, shutdown.allow

files and ssh file \ n \ n ");

printf ("(1) Checking / etc / printcap .......");

if (stat ("/ etc / printcap", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(2) Checking / etc / profile .......");

if (stat ("/ etc / profile", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(3) Checking / etc / securetty .......");

if (stat ("/ etc / securetty", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(4) Checking /etc/shutdown.allow .......");

if (stat ("/ etc / shutdown.allow", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(5) Checking / etc / ssh_config ......");

if (stat ("/ etc / ssh_config", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(6) Checking / etc / ssh_host_key .......");

if (stat ("/ etc / ssh_host_key", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(7) Checking /etc/ssh_host_key.pub .......");

if (stat ("/ etc / ssh_host_key.pub", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("(8) Checking / etc / sshd_config .......");

if (stat ("/ etc / sshd_config", & st) <0)

printf ("failed! \ n \ n");

else

printf ("ok! \ n \ n");

printf ("printcap, securitty, ssh_host_key, sshd_config = permission 640");

printf ("\ nprofile, ssh_config, ssh_host_key.pub = permission 644 \ n");

printf ("shutdown.allow = permission 600 \ n \ n");

printf ("Do you modify this files and to permission and owner group? (y / n):");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chmod ("/ etc / printcap", 0640);

chown ("/ etc / profile", 0, 4);

chmod ("/ etc / profile", 0644);

chown ("/ etc / securetty", 0, 4);

chmod ("/ etc / securetty", 0640);

chown ("/ etc / shutdown.allow", 0, 0);

chmod ("/ etc / shutdown.allow", 0600);

chown ("/ etc / ssh_config", 0, 0);

chmod ("/ etc / ssh_config", 0644);

chown ("/ etc / ssh_host_key", 0, 4);

chmod ("/ etc / ssh_host_key", 0640);

chown ("/ etc / ssh_host_key.pub", 0, 4);

chmod ("/ etc / ssh_host_key.pub", 0644);

chown ("/ etc / sshd_config", 0, 4);

chmod ("/ etc / sshd_config", 0640);

f = fopen ("fileutil", "a");

fprintf (f, "/ etc / printcap--, 640 \ n");

fprintf (f, "/ etc / profile-root: root, 644 \ n");

fprintf (f, "/ etc / securetty-root: adm, 640 \ n");

fprintf (f, "/etc/shutdown.allow-root:root, 600 \ n");

fprintf (f, "/ etc / ssh_config-root: adm, 644 \ n");

fprintf (f, "/ etc / ssh_host_key-root: adm, 640 \ n");

fprintf (f, "/etc/ssh_host_key.pub-root:adm, 644 \ n");

fprintf (f, "/ etc / sshd_config-root: adm, 640 \ n");

fclose (f);

}

printf ("18. compiler \ n \ n");

/ * Configuration for compilers * /

printf ("Checking / usr / bin / gcc .......");

if (stat ("/ usr / bin / gcc", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("Checking / usr / bin / g ++ .......");

if (stat ("/ usr / bin / g ++", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("Checking / usr / bin / colorgcc .......");

if (stat ("/ usr / bin / colorgcc", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

printf ("Checking / usr / bin / uudecode .......");

if (stat ("/ usr / bin / uudecode", & st) <0)

printf ("failed! \ n \ n");

else

printf ("ok! \ n \ n");

printf ("Do you modify this files and to 700 permission? (y / n):");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chmod ("/ usr / bin / gcc", 0700);

chmod ("/ usr / bin / g ++", 0700);

chmod ("/ usr / bin / colorgcc", 0700);

chmod ("/ usr / bin / uudecode", 0700);

f = fopen ("fileutil", "a");

fprintf (f, "/ usr / bin / gcc--, 700 \ n");

fprintf (f, "/ usr / bin / g ++--, 700 \ n");

fprintf (f, "/ usr / bin / colorgcc--, 700 \ n");

fprintf (f, "/ usr / bin / uudecode--, 700 \ n");

fclose (f);

}

printf ("\ n19. system util \ n \ n");

/ * Set permissions for system tools * /

if (stat ("/ usr / bin / w", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

if (stat ("/ usr / bin / who", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

if (stat ("/ usr / bin / finger", & st) <0)

printf ("failed! \ n \ n");

else

printf ("ok! \ n \ n");

printf ("Do you modify this files and to 700 permission? (y / n):");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chmod ("/ usr / bin / w", 0700);

chmod ("/ usr / bin / who", 0700);

chmod ("/ usr / bin / finger", 0700);

f = fopen ("fileutil", "a");

fprintf (f, "/ usr / bin / w--, 700 \ n");

fprintf (f, "/ usr / bin / who--, 700 \ n");

fprintf (f, "/ usr / bin / finger--, 700 \ n");

fclose (f);

}

printf ("\ n20. Network util \ n \ n");

/ * Set permissions for network tools * /

if (stat ("/ bin / ping", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

if (stat ("/ usr / bin / telnet", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

if (stat ("/ usr / bin / ssh", & st) <0)

printf ("failed! \ n");

else

printf ("ok! \ n");

if (stat ("/ usr / sbin / traceroute", & st) <0)

printf ("failed! \ n \ n");

else

printf ("ok! \ n");

printf ("Do you modify this files and to 700 permission? (y / n):");

scanf ("% c", &q);

scanf ("% c", &q);

if (q == 'Y' || q == 'y') {

chmod ("/ bin / ping", 0700);

chmod ("/ usr / bin / telnet", 0700);

chmod ("/ usr / bin / ssh", 0700);

chmod ("/ usr / sbin / traceroute", 0700);

f = fopen ("fileutil", "a");

fprintf (f, "/ bin / ping--, 700 \ n");

fprintf (f, "/ usr / bin / telnet--, 700 \ n");

fprintf (f, "/ usr / bin / ssh--, 700 \ n");

fprintf (f, "/ usr / sbin / traceroute--, 700 \ n \ n");

fclose (f);

}

sleep (3);

printf ("\ nOK! modify permission to all files");

printf ("\ n \ n [13] = [OK!] \ n \ n");

sleep (3);

system (clear);

}

/ * 14. Recording your work * /

printf ("[14] work contents recording \ n");

printf ("Hitherto do work contents recording .. \ n");

printf ("Wait a minutes ...:) \ n");

/ * work with suid, sgid files recording * /

f = fopen ("README", "a");

fprintf (f, "===== before to modify suidbit of suidfile ==== \ n \ n");

fclose (f);

system ("cat >> README <perm4000");

f = fopen ("README", "a");

fprintf (f, "\ n \ n ===== before to modify sgidbit of sgidfile ===== \ n \ n");

fclose (f);

system ("cat >> README <perm2000");

f = fopen ("README", "a");

fprintf (f, "\ n \ nThis files remove suid, sgid bits ... \ n");

fprintf (f, "remains suidfile only / bin / su \ n");

fprintf (f, "ownership is 'root' and ownergroup is 'wheel' of / bin / su \ n");

fclose (f);

/ * Work with the /etc/pam.d/su file recording * /

system ("cat >> README <pam.d");

f = fopen ("README", "a");

fprintf (f, "\ n ===== Daemon Setting ===== \ n \ n");

fclose (f);

/ * Daemon setting operation recording * /

f = fopen ("README", "a");

fprintf (f, "State before to daemon setting \ n \ n");

fclose (f);

system ("cat >> README <daemon1");

f = fopen ("README", "a");

fprintf (f, "\ n \ nState next to daemon setting \ n \ n");

fclose (f);

system ("cat >> README <daemon2");

f = fopen ("README", "a");

fprintf (f, "\ n \ n ===== / etc / syslog.conf ==== \ n \ n");

fprintf (f, "Originally syslog.conf file move syslog.conf.bak and \ n");

fprintf (f, "define a new syslog.conf file \ n");

fprintf (f, "Contents of the new syslog.conf is make newlogfile \ n");

fprintf (f, "save directory and apply chattr to log file of / var / log \ n");

fprintf (f, "Other logfile save directory is / Security / logs \ n \ n");

fclose (f);

if (! (stat ("/ etc / named.conf", & st) <0)) {

f = fopen ("README", "a");

fprintf (f, "\ n \ n ===== named.conf setting ===== \ n \ n");

fprintf (f, "Its your self by 'vi' editor ...:) \ n \ n");

fclose (f);

system ("cat >> README </etc/named.conf");

}

if (! (stat ("/ etc / named.boot", & st) <0)) {

f = fopen ("README", "a");

fprintf (f, "\ n \ n ===== named.boot setting ===== \ n \ n");

fprintf (f, "Its your self by 'vi' editor ...:) \ n \ n");

fprintf (f, "---------- named.boot contents ---------- \ n \ n");

fclose (f);

system ("cat >> README </etc/named.boot");

}

f = fopen ("README", "a");

fprintf (f, "\ n \ n ===== / etc / sysctl.conf setting ===== \ n \ n");

fprintf (f, "Added next contents \ n \ n");

fprintf (f, "# ping ignore all request \ n");

fprintf (f, "net.ipv4.icmp_echo_ignore_all = 1 \ n \ n");

fclose (f);

system ("cat >> README <fileutil");

/ * Back finish * /

remove ("perm4000");

remove ("perm2000");

remove ("pam.d");

remove ("daemon1");

remove ("daemon2");

remove ("fileutil");

sleep (3);

system (clear);

printf ("Thank you for using this products;) \ n \ n");

sleep (2);

}

1.When a vulnerability occurs due to a bug due to a specific file

Modify or modify the file to prevent the vulnerability from appearing

2.In case of internal security, the suid bit is attacked by the files.

Unless you have a special file, modify the files to patch

3.If an internal account user is able to

In order to prevent the server from going through

Security patch through permission adjustment to prevent commands related to it

4.After the program is finished, log the contents of the work so that the user can recognize them.

Consideration of the convenience of the system administrator.

One .suid file check 2 .sgid file check 3 Remove suid bit of .suid file check 4 Remove suid bit from .sgid file check 5 permission handling and group permissions in ./bin/su 6 add any account wheel to ./etc/group file 7 Add contents of ./etc/pam.d/su 8 Delete unnecessary daemons 9 Security Enhancement to the .log File 10 Increasing Security for DNS by Modifying the .named.conf File 11 Disable Responding to Pings by Modifying the ./etc/sysctl.conf File 12 Additionally apply chattr to important files (/ bin / bash) 13 Finish setting security permissions for each tool (fileutils) 14 Destroy after creating child process with 'README' file record and pattern information

Claims (1)

1. Eliminate system vulnerabilities and evolve security setting program itself 2. Linux own settings algorithm for each directory 3.Intelligent security setting check module based on Linux 4. File modification and deletion measures according to the directory search method Everything about the security settings program