|
@@ -416,6 +416,14 @@ function remove_serial_logins {
|
416
|
416
|
fi
|
417
|
417
|
}
|
418
|
418
|
|
|
419
|
+function set_sticky_bits {
|
|
420
|
+ world_writable=$(find / -xdev -type d -perm -002 \! -perm -1000)
|
|
421
|
+ for w in $world_writable; do
|
|
422
|
+ echo "Setting sticky bit on $w"
|
|
423
|
+ chmod +t $w
|
|
424
|
+ done
|
|
425
|
+}
|
|
426
|
+
|
419
|
427
|
function lockdown_permissions {
|
420
|
428
|
if [ -d /bin ]; then
|
421
|
429
|
chown root:root /bin/*
|
|
@@ -466,6 +474,8 @@ function lockdown_permissions {
|
466
|
474
|
if [ -f /usr/sbin/exim4 ]; then
|
467
|
475
|
chmod u+s /usr/sbin/exim4
|
468
|
476
|
fi
|
|
477
|
+
|
|
478
|
+ set_sticky_bits
|
469
|
479
|
}
|
470
|
480
|
|
471
|
481
|
function disable_core_dumps {
|