V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

func/cdi_4600_packages/4610_installation_security.sh

@@ -72,6 +72,7 @@ SELINUXTYPE=default
 # SETLOCALDEFS= Check local definition changes
 SETLOCALDEFS=0
 
+# vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=conf
 EOF
 
     ### Trigger a full relabeling on the first boot of the target.
@@ -81,7 +82,7 @@ EOF
       semanage port -a -t ssh_port_t -p tcp ${VAR_SSH_PORT}
     "
 
-    ### Enable PAM SELinux modules in common-session configs
+    ### Enable PAM SELinux modules in common-session configs.
     sed -i '/^session.*required.*pam_selinux\.so/d' "${TARGET}/etc/pam.d/common-session"
     sed -i '/^session.*required.*pam_selinux\.so/d' "${TARGET}/etc/pam.d/common-session-noninteractive"
 

func/cdi_4600_packages/4620_installation_verification.sh

@@ -370,6 +370,12 @@ EOF
       printf 'Running debsums -g - encountered errors.' >> ${var_logfile}
     fi
   "
+
+  chroot_script "${TARGET}" "
+    rkhunter --propupd 2>&1 | tee -a ${var_logfile}
+    echo ExitCode: \$? >> ${var_logfile}
+  "
+
   guard_dir && return 0
 }