V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

ciss_debian_installer.sh

@@ -13,6 +13,8 @@
 ### Contributions so far see ./docs/CREDITS.md
 
 # TODO: Implement this function 4215_check_crypttab.sh
+# TODO: Implement this function 4435_hardening_fail2ban.sh
+# TODO: Implement this function 4470_hardening_openssl.sh
 # TODO: Update .dot files.
 # TODO: Update README.md for each lib and func dir.
 # TODO: Update MANPAGES.md for each func.

func/cdi_4000_debootstrap/4005_check_usr_merge.sh

@@ -30,16 +30,16 @@ check_usr_merge() {
 
   # shellcheck disable=SC2312
   chroot_script "${TARGET}" "
-    test -L /bin  && test $(readlink -f /bin)  = '/usr/bin'  && echo 'MERGED:/bin'  || echo 'UNMERGED:/bin'  | tee -a ${var_logfile}
+    test -L /bin  && test $(readlink -f /bin)  = '/usr/bin'  && echo 'MERGED:/bin'  >> ${var_logfile} || echo 'UNMERGED:/bin'  >> ${var_logfile}
-    test -L /sbin && test $(readlink -f /sbin) = '/usr/sbin' && echo 'MERGED:/sbin' || echo 'UNMERGED:/sbin' | tee -a ${var_logfile}
+    test -L /sbin && test $(readlink -f /sbin) = '/usr/sbin' && echo 'MERGED:/sbin' >> ${var_logfile} || echo 'UNMERGED:/sbin' >> ${var_logfile}
-    test -L /lib  && test $(readlink -f /lib)  = '/usr/lib'  && echo 'MERGED:/lib'  || echo 'UNMERGED:/lib'  | tee -a ${var_logfile}
+    test -L /lib  && test $(readlink -f /lib)  = '/usr/lib'  && echo 'MERGED:/lib'  >> ${var_logfile} || echo 'UNMERGED:/lib'  >> ${var_logfile}
     echo ExitCode: \$? >> ${var_logfile}
   "
 
   if [[ "${architecture}" == "amd64" ]]; then
     # shellcheck disable=SC2312
     chroot_script "${TARGET}" "
-      test -L /lib64 && test $(readlink -f /lib64) = '/usr/lib64' && echo 'MERGED:/lib64' || echo 'UNMERGED:/lib64' | tee -a ${var_logfile}
+      test -L /lib64 && test $(readlink -f /lib64) = '/usr/lib64' && echo 'MERGED:/lib64' >> ${var_logfile} || echo 'UNMERGED:/lib64' >> ${var_logfile}
       echo ExitCode: \$? >> ${var_logfile}
     "
   fi

func/cdi_4300_network/4300_installation_network.sh

@@ -55,8 +55,8 @@ installation_network() {
       echo ExitCode: \$? >> ${var_logfile}
   "
 
-  echo "systemctl disable systemd-networkd NetworkManager" "${var_logfile}"
+  echo "systemctl disable systemd-networkd NetworkManager" >> "${var_logfile}"
-  echo "systemctl disable dhcpcd.service" "${var_logfile}"
+  echo "systemctl disable dhcpcd.service" >> "${var_logfile}"
 
   chroot_script "${TARGET}" "
     systemctl disable systemd-networkd NetworkManager 2>/dev/null | tee -a ${var_logfile} || true

func/cdi_4400_hardening/4470_hardening_openssl.sh

@@ -0,0 +1,30 @@
+#!/bin/bash
+# SPDX-Version: 3.0
+# SPDX-CreationInfo: 2025-06-17; WEIDNER, Marc S.; <msw@coresecret.dev>
+# SPDX-ExternalRef: GIT https://git.coresecret.dev/msw/CISS.debian.installer.git
+# SPDX-FileContributor: WEIDNER, Marc S.; Centurion Intelligence Consulting Agency
+# SPDX-FileCopyrightText: 2024-2025; WEIDNER, Marc S.; <msw@coresecret.dev>
+# SPDX-FileType: SOURCE
+# SPDX-License-Identifier: EUPL-1.2 OR LicenseRef-CCLA-1.0
+# SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
+# SPDX-PackageName: CISS.debian.installer
+# SPDX-Security-Contact: security@coresecret.eu
+
+guard_sourcing
+
+#######################################
+# Globals:
+#   TARGET
+#   VAR_ARCHITECTURE
+#   VAR_CODENAME
+#   VAR_VERSION
+# Arguments:
+#   None
+# Returns:
+#   0: on success
+#######################################
+hardening_ssl() {
+
+  guard_dir && return 0
+}
+# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh