# Authors: (c) Michael Prokop <mika@grml.org>
# Bug-Reports: see http://grml.org/bugs/
# License: This file is licensed under the GPL v2.
-# Latest change: Sun Nov 04 12:12:57 CET 2007 [mika]
################################################################################
# misc stuff
eend $?
fi
-if [ -L /usr/include/linux ] ; then
- einfo "/usr/include/linux is ok" ; eend 0
-elif [ -n "$GRML64" ] ; then
- if [ -d /usr/src/linux-headers-"$KERNEL" ] ; then
- einfo "grml64 detected, assuming /usr/src/linux-headers-$KERNEL is ok." ; eend 0
- else
- ewarn "Warning: /usr/src/linux-headers-$KERNEL not found, exiting." ; eend 0
- fi
-elif [ -d /usr/src/linux-headers-"$KERNEL" ] ; then
- ewarn "Warning: /usr/include/linux is NOT a symlink to /usr/src/linux/include/linux/ (possible an error)"
- ewarn "Common reason: you forgot to install linux-kernel-headers-grml and use linux-libc-dev instead"
- eend 0
-else
- ewarn "Warning: linux-headers-$KERNEL not installed." ; eend 0
-fi
-
einfo "Creating ~/.zshrc"
touch ~/.zshrc
eend $?
# get rid of large kernel modules:
if ifclass GRML_SMALL ; then
+ einfo "Identified grml-small, removing some very large kernel drivers:"
if [ -r "/lib/modules/${KERNEL}/kernel/fs/ocfs2/ocfs2.ko" ] ; then
einfo "Removing /lib/modules/${KERNEL}/kernel/fs/ocfs2/ocfs2.ko"
rm -f "/lib/modules/${KERNEL}/kernel/fs/ocfs2/ocfs2.ko"
eend $?
fi
- if [ -r "/lib/modules/${KERNEL}/kernel/drivers/isdn/hisax/hisax.ko" ] ; then
- einfo "Removing /lib/modules/${KERNEL}/kernel/drivers/isdn/hisax/hisax.ko"
- rm -f "/lib/modules/${KERNEL}/kernel/drivers/isdn/hisax/hisax.ko"
+ if [ -d "/lib/modules/${KERNEL}/kernel/drivers/isdn/hisax/" ] ; then
+ einfo "Removing /lib/modules/${KERNEL}/kernel/drivers/isdn/hisax"
+ rm -rf "/lib/modules/${KERNEL}/kernel/drivers/isdn/hisax"
eend $?
fi
fi
einfo "Removing x-server-conffiles"
rm -f /etc/X11/xorg.conf /etc/X11/XF86Config-4 \
- /etc/X11/XF86Config /etc/XF86Config /etc/XF86Config-4
+ /etc/X11/XF86Config /etc/XF86Config /etc/XF86Config-4
eend $?
einfo "Removing ssh-keys"
/var/state/*/* /var/state/* /var/log/nessus/* \
/halt /reboot /ash.static /etc/dhcpc/*.info /etc/dhcpc/resolv* \
/etc/*passwd- /etc/*shadow- /etc/*group- /var/spool/postfix/maildrop/* \
- /etc/lvm/.cache 2>/dev/null
+ /etc/lvm/.cache /etc/lvm/cache/.cache /etc/lvm/backup/main 2>/dev/null
rm -rf /tmp/* /var/tmp/* /var/tmp/.* /var/backups/* /.ssh /root/.ssh /home/*/.ssh \
/home/grml/* /home/grml/.??* /var/lib/texmf/ls-R /var/spool/texmf/ls-R \
/var/lib/mysql /var/log/lilo_log.* /core* 2>/dev/null
ewarn "clamav[-freshclam] not installed" ; eend 0
fi
-if [ -f /etc/default/snort.dpkg-dist -a -f /etc/default/snort ] ; then
- einfo "Fixxing /etc/default/snort"
- mv /etc/default/snort.dpkg-dist /etc/default/snort
- eend $?
-fi
-
if ! [ -r /etc/ld.so.nohwcap ] ; then
einfo "Creating /etc/ld.so.nohwcap"
touch /etc/ld.so.nohwcap
# list dangling symlinks: ls **/*(-@)
#
# Security-audit:
-# find / \! -type l -perm -2000 -ls > audit/sgid-files
+# find / \! -type l -perm -2000 -ls > audit/sgid-files
# find / \! -type l -perm -0002 -ls > audit/world-writeable-files
# find / \! -type l -perm -4000 -ls > audit/suid-files
# find / ( -perm 4000 -o -perm -2000 \) -exec ls -ld {} \;
# file /usr/sbin/* | grep -v ', stripped' | grep -v 'perl' | grep -v 'Bourne' | grep -v 'python' | grep -v 'symbolic link'
#
# Is software by grml-repos up2date?
-# grep-dctrl --field Maintainer 'Michael Prokop' /var/lib/apt/lists/grml.org_repos_._* | grep Package | awk '{print $2}' | xargs echo
+# grep-dctrl --field Maintainer 'Michael Prokop' /var/lib/apt/lists/grml.org_repos_._* | grep Package | awk '{print $2}' | xargs echo
#
# runlevel.conf:
# for file in /etc/init.d/* ; do grep $file -q /etc/runlevel.conf.hdinstall || echo $file not found ; done