V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

func/cdi_4400_hardening/4420_hardening_fail2ban.sh

@@ -197,6 +197,12 @@ EOF
   touch "${TARGET}/var/log/fail2ban/fail2ban.log"
   chmod 640 "${TARGET}/var/log/fail2ban/fail2ban.log"
 
+  if [[ ! -f "${TARGET}/var/log/ufw.log" ]]; then
+    install -d -m 0755 "${TARGET}/var/log"
+    : >| "${TARGET}/var/log/ufw.log"
+    chmod 0640 "${TARGET}/var/log/ufw.log"
+  fi
+
   ### Merge / Dump-Parse via 'fail2ban-client -d'. All '*.conf', '*.local', and 'jail.*'-files are read, inherited, and merged.
   ### Syntax, path, and key errors result in a non-zero exit.
   chroot_script "${TARGET}" "