@ -14,12 +14,16 @@ set -eu
RUNTIMEDIR = /opt/dfsruntime/runtimerd
TUNDEV = $RUNTIMEDIR /dev/net/tun
SECURITY_REMOVE_PACKAGES = "ssh strace telnet unzip tar zip wget ppp pppconfig nvi nano gzip curl bzip2 aptitude tasksel pppoe pppoeconf elinks"
SECURITY_REMOVE_PACKAGES = "ssh strace unzip tar zip wget nvi nano gzip curl bzip2 aptitude tasksel elinks"
DEVEL_REMOVE_PACKAGES = "exim4-daemon-light exim4-config exim4-base netkit-inetd telnet ppp pppconfig pppoe pppoeconf"
function configure_normal( )
# the usual stuff - not optimized for security
{
# set default runlevel to 3
sed -i 's/^id:2:initdefault/id:3:initdefault/' /etc/inittab
######### devices ##########
# create tun device for running under qemu
if [ ! -e " $TUNDEV " ]
@ -45,6 +49,10 @@ function configure_normal()
# allow nput of password
sed -i 's/^PasswordAuthentication.*$/PasswordAuthentication yes/' /etc/ssh/sshd_config
fi
# remove unnecessary packages - return true, if no packages were
# removed
dpkg --force-all -P $DEVEL_REMOVE_PACKAGES 2>& 1 | grep -v "which isn't installed." || true
}