V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

func/cdi_4500_user/4510_accounts_hardening.sh

@@ -39,13 +39,14 @@ accounts_hardening() {
   ary_security_pkgs=( "libpam-google-authenticator" "wamerican" "wbritish" "wfrench" "wngerman" )
   chroot_script "${var_target}" "
     export INITRD=No
+    [[ -r /root/ciss_xdg_tmp.sh ]] && . /root/ciss_xdg_tmp.sh
     apt-get install -y --no-install-recommends --no-install-suggests ${ary_security_pkgs[*]} 2>&1 | tee -a ${var_logfile}
   "
 
   ### Preparing 2fa hardening.
   install -d -m 0755 -o root -g root "${var_target}/etc/ciss"
   touch "${var_target}/etc/ciss/2fa.users"
-  chmod 0640 "${var_target}/etc/ciss/2fa.users"
+  chmod 0600 "${var_target}/etc/ciss/2fa.users"
 
   ### Keep 'tty1' active, disable the rest.
   # shellcheck disable=SC2016