summaryrefslogtreecommitdiff
path: root/cfengine/cf.services.harden
diff options
context:
space:
mode:
Diffstat (limited to 'cfengine/cf.services.harden')
-rw-r--r--cfengine/cf.services.harden16
1 files changed, 16 insertions, 0 deletions
diff --git a/cfengine/cf.services.harden b/cfengine/cf.services.harden
index 348041e..ae315b9 100644
--- a/cfengine/cf.services.harden
+++ b/cfengine/cf.services.harden
@@ -118,6 +118,22 @@ editfiles:
ResetSearch "1"
LocateLineMatching "^#[[:blank:]]*!/usr/src"
ReplaceLineWith "!/usr/src"
+ ResetSearch "1"
+ BeginGroupIfNoLineMatching "^!/initrc"
+ Append "!/initrc"
+ EndGroup
+ ResetSearch "1"
+ BeginGroupIfNoLineMatching "^!/.journal"
+ Append "!/.journal"
+ EndGroup
+ ResetSearch "1"
+ BeginGroupIfNoLineMatching "^!/usr/local"
+ Append "!/usr/local"
+ EndGroup
+ ResetSearch "1"
+ BeginGroupIfNoLineMatching "^!/usr/src"
+ Append "!/usr/src"
+ EndGroup
}
# { /etc/cron.daily/integrit
# #