| 
				
			 | 
			
			
				@@ -416,6 +416,14 @@ function remove_serial_logins { 
			 | 
		
	
		
			
			| 
				416
			 | 
			
				416
			 | 
			
			
				     fi 
			 | 
		
	
		
			
			| 
				417
			 | 
			
				417
			 | 
			
			
				 } 
			 | 
		
	
		
			
			| 
				418
			 | 
			
				418
			 | 
			
			
				  
			 | 
		
	
		
			
			| 
				
			 | 
			
				419
			 | 
			
			
				+function set_sticky_bits { 
			 | 
		
	
		
			
			| 
				
			 | 
			
				420
			 | 
			
			
				+    world_writable=$(find / -xdev -type d -perm -002 \! -perm -1000) 
			 | 
		
	
		
			
			| 
				
			 | 
			
				421
			 | 
			
			
				+    for w in $world_writable; do 
			 | 
		
	
		
			
			| 
				
			 | 
			
				422
			 | 
			
			
				+        echo "Setting sticky bit on $w" 
			 | 
		
	
		
			
			| 
				
			 | 
			
				423
			 | 
			
			
				+        chmod +t $w 
			 | 
		
	
		
			
			| 
				
			 | 
			
				424
			 | 
			
			
				+    done 
			 | 
		
	
		
			
			| 
				
			 | 
			
				425
			 | 
			
			
				+} 
			 | 
		
	
		
			
			| 
				
			 | 
			
				426
			 | 
			
			
				+ 
			 | 
		
	
		
			
			| 
				419
			 | 
			
				427
			 | 
			
			
				 function lockdown_permissions { 
			 | 
		
	
		
			
			| 
				420
			 | 
			
				428
			 | 
			
			
				     if [ -d /bin ]; then 
			 | 
		
	
		
			
			| 
				421
			 | 
			
				429
			 | 
			
			
				         chown root:root /bin/* 
			 | 
		
	
	
		
			
			| 
				
			 | 
			
			
				@@ -466,6 +474,8 @@ function lockdown_permissions { 
			 | 
		
	
		
			
			| 
				466
			 | 
			
				474
			 | 
			
			
				     if [ -f /usr/sbin/exim4 ]; then 
			 | 
		
	
		
			
			| 
				467
			 | 
			
				475
			 | 
			
			
				         chmod u+s /usr/sbin/exim4 
			 | 
		
	
		
			
			| 
				468
			 | 
			
				476
			 | 
			
			
				     fi 
			 | 
		
	
		
			
			| 
				
			 | 
			
				477
			 | 
			
			
				+ 
			 | 
		
	
		
			
			| 
				
			 | 
			
				478
			 | 
			
			
				+    set_sticky_bits 
			 | 
		
	
		
			
			| 
				469
			 | 
			
				479
			 | 
			
			
				 } 
			 | 
		
	
		
			
			| 
				470
			 | 
			
				480
			 | 
			
			
				  
			 | 
		
	
		
			
			| 
				471
			 | 
			
				481
			 | 
			
			
				 function disable_core_dumps { 
			 |