V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

func/cdi_4400_hardening/4480_hardening_usb.sh

@@ -31,20 +31,25 @@ hardening_usb() {
   chroot_script "${TARGET}" "
     export INITRD=No
     apt-get install -y --no-install-recommends --no-install-suggests usbguard 2>&1 | tee -a ${var_logfile}
-    echo ExitCode of PIPESTATUS[0]: \${PIPESTATUS[0]} >> ${var_logfile}
+    RC=( \${PIPESTATUS[@]} )
+    echo ExitCode of PIPESTATUS[0]: \${RC[0]} >> ${var_logfile}
 
     touch /tmp/rules.conf
     usbguard generate-policy >| /tmp/rules.conf
 
     if [[ -f /etc/usbguard/rules.conf && -s /etc/usbguard/rules.conf ]]; then
+
       mkdir -p /root/.ciss/cdi/backup/etc/usbguard
       mv /etc/usbguard/rules.conf /root/.ciss/cdi/backup/etc/usbguard/usbguard_rules.conf
       mv /tmp/rules.conf /etc/usbguard/rules.conf
       chmod 0600 /etc/usbguard/rules.conf
+
     else
+
       rm -f /etc/usbguard/rules.conf
       mv /tmp/rules.conf /etc/usbguard/rules.conf
       chmod 0600 /etc/usbguard/rules.conf
+
     fi
 
     #cp -a /etc/usbguard/usbguard-daemon.conf /root/.ciss/cdi/backup/etc/usbguard/usbguard-daemon.conf
@@ -53,4 +58,7 @@ hardening_usb() {
 
   guard_dir && return 0
 }
+### Prevents accidental 'unset -f'.
+# shellcheck disable=SC2034
+readonly -f hardening_usb
 # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh

func/cdi_4400_hardening/4490_hardening_virus.sh

@@ -30,9 +30,13 @@ hardening_virus() {
   chroot_script "${TARGET}" "
     export INITRD=No
     apt-get install -y --no-install-recommends --no-install-suggests rkhunter 2>&1 | tee -a ${var_logfile}
-    echo ExitCode of PIPESTATUS[0]: \${PIPESTATUS[0]} >> ${var_logfile}
+    RC=( \${PIPESTATUS[@]} )
+    echo ExitCode of PIPESTATUS[0]: \${RC[0]} >> ${var_logfile}
   "
 
   guard_dir && return 0
 }
+### Prevents accidental 'unset -f'.
+# shellcheck disable=SC2034
+readonly -f hardening_virus
 # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh