V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

func/cdi_4400_hardening/4470_hardening_ufw.sh

@@ -13,10 +13,11 @@
 guard_sourcing
 
 #######################################
-# OpenSSL library defaults (system-wide), TLSv1.2-, TLSv1.3-, AES-256-only;
+# Hardening 'ufw'.
 # Globals:
 #   TARGET
-#   VAR_SETUP_PATH
+#   VAR_SSH_PORT
+#   VAR_UFW_OUT
 # Arguments:
 #   None
 # Returns:
@@ -30,7 +31,7 @@ hardening_ufw() {
 
   if [[ ! -f "${TARGET}/var/log/ufw.log" ]]; then
     touch "${TARGET}/var/log/ufw.log"
-    chmod 640 "${TARGET}/var/log/ufw.log"
+    chmod 0640 "${TARGET}/var/log/ufw.log"
   fi
 
   chroot_script "${TARGET}" "
@@ -77,9 +78,8 @@ hardening_ufw() {
 
   chroot_script "${TARGET}" "echo 'y' | ufw enable 2>&1"
 
-  chroot_script "${TARGET}" "
-    ufw status verbose >> ${var_logfile}
-  "
+  chroot_script "${TARGET}" "ufw status verbose >> ${var_logfile}"
+
   guard_dir && return 0
 }
 # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh