Skip to content
Snippets Groups Projects
Commit 5c79c584 authored by Bob Mottram's avatar Bob Mottram
Browse files

Set sticky bits

parent 3f58fc17
No related branches found
No related tags found
No related merge requests found
......@@ -416,6 +416,14 @@ function remove_serial_logins {
fi
}
function set_sticky_bits {
world_writable=$(find / -xdev -type d -perm -002 \! -perm -1000)
for w in $world_writable; do
echo "Setting sticky bit on $w"
chmod +t $w
done
}
function lockdown_permissions {
if [ -d /bin ]; then
chown root:root /bin/*
......@@ -466,6 +474,8 @@ function lockdown_permissions {
if [ -f /usr/sbin/exim4 ]; then
chmod u+s /usr/sbin/exim4
fi
set_sticky_bits
}
function disable_core_dumps {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment