msw/CISS.debian.installer
SHA256
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

V8.00.000.2025.06.17
All checks were successful
🛡️ Shell Script Linting / 🛡️ Shell Script Linting (push) Successful in 1m47s
Details

Browse Source 
Signed-off-by: Marc S. Weidner <msw@coresecret.dev>
This commit is contained in:
Marc S. Weidner
2025-10-19 09:26:30 +01:00
parent b724e18d62
commit 116b8788d7
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
func/cdi_4400_hardening/4420_hardening_fail2ban.sh
View File

@@ -63,7 +63,13 @@ EOF
cat << EOF >> "${var_target}/etc/fail2ban/jail.d/ciss-default.conf" cat << EOF >> "${var_target}/etc/fail2ban/jail.d/ciss-default.conf"
[DEFAULT] [DEFAULT]
usedns = yes usedns = yes
ignoreip = 127.0.0.0/8 ::1 # 127.0.0.1/8 – IPv4 loopback range (local host)
# ::1/128 – IPv6 loopback
# fe80::/10 – IPv6 link-local (on-link only; NDP/RA/DAD)
# fc00::/7 – IPv6 ULA (private LAN addresses)
# ff00::/8 – IPv6 multicast (not an unicast host)
# ::/128 – IPv6 unspecified (all zeros; never a real peer)
ignoreip = 127.0.0.1/8 ::1/128 fe80::/10 fc00::/7 ff00::/8 ::/128
# ${VAR_FINAL_FQDN} # ${VAR_FINAL_FQDN}
${VAR_FINAL_IPV4} ${VAR_FINAL_IPV4}
EOF EOF

1
func/cdi_4900_xtended/4950_final_logrotate.sh
View File

@@ -36,6 +36,7 @@ final_logrotate() {
"fail2ban" "fail2ban"
"rkhunter" "rkhunter"
"rsnapshot" "rsnapshot"
"rsyslog"
"ufw" "ufw"
"unattended-upgrades" "unattended-upgrades"
"usbguard" "usbguard"