|  | @@ -416,6 +416,14 @@ function remove_serial_logins {
 | 
	
		
			
			| 416 | 416 |      fi
 | 
	
		
			
			| 417 | 417 |  }
 | 
	
		
			
			| 418 | 418 |  
 | 
	
		
			
			|  | 419 | +function set_sticky_bits {
 | 
	
		
			
			|  | 420 | +    world_writable=$(find / -xdev -type d -perm -002 \! -perm -1000)
 | 
	
		
			
			|  | 421 | +    for w in $world_writable; do
 | 
	
		
			
			|  | 422 | +        echo "Setting sticky bit on $w"
 | 
	
		
			
			|  | 423 | +        chmod +t $w
 | 
	
		
			
			|  | 424 | +    done
 | 
	
		
			
			|  | 425 | +}
 | 
	
		
			
			|  | 426 | +
 | 
	
		
			
			| 419 | 427 |  function lockdown_permissions {
 | 
	
		
			
			| 420 | 428 |      if [ -d /bin ]; then
 | 
	
		
			
			| 421 | 429 |          chown root:root /bin/*
 | 
	
	
		
			
			|  | @@ -466,6 +474,8 @@ function lockdown_permissions {
 | 
	
		
			
			| 466 | 474 |      if [ -f /usr/sbin/exim4 ]; then
 | 
	
		
			
			| 467 | 475 |          chmod u+s /usr/sbin/exim4
 | 
	
		
			
			| 468 | 476 |      fi
 | 
	
		
			
			|  | 477 | +
 | 
	
		
			
			|  | 478 | +    set_sticky_bits
 | 
	
		
			
			| 469 | 479 |  }
 | 
	
		
			
			| 470 | 480 |  
 | 
	
		
			
			| 471 | 481 |  function disable_core_dumps {
 |