lockdown.sh

Clone Tools
  • last updated a few minutes ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
DENBUG-120: UI: Cloud user has Read permissions to WiFi configuration

- Removed the sudo group access revoke and kept the cloud sudo removal.

DENBUG-120: UI: Cloud user has Read permissions to WiFi configuration

- removed the sudo group users from all access unless specified to have NO access unless specified.

- removed unknown admin and serviceuser groups

- removed the cloud user from sudoers

Note:

- We need to asses the serviceability of the device by removing the sudoers previledges.

- A solution command would be to add a specific user for service and add a section in the samve place with root access to enable the service user.

DENBUG-120: UI: Cloud user has Read permissions to WiFi configuration

- Give the denali user permission to remove the permission of the wpa_supplicant.conf for others.

- removing the read permission of the wpa_supplicant conf from others.

  1. … 1 more file in changeset.
DEN-16558 updated the lockdown.sh script to only remove the contents of the cloudsync

Merge branch 'DEN-16335-UI-VD-S105_CSFolderPermissions' into staging

DEN-16219: Fixed - Denali user will have ONLY list ability (LS) to the folder and files in /var/configurations/CloudSync/*

Replace the existing chmod command in the lockdown script with

- find directories and give only read access

- find all files and remove read, write, and execute permissions

DEN-16284: UI: Cybersecurity: Disable the SSH access by default

  1. … 3 more files in changeset.
Merge branch 'DEN-15918-UI-VD-S102_POST_ConfigFilesCheck' into staging

  1. … 1 more file in changeset.
DEN-15487: Updated - UI: POST: UI needs to report an error if the configuration files, or parameter(s) are missing.

DEN-16104: UI: Reorder the sequence of the messages in POST from UI to HD

DEN-16019: Unable to Export to USB / Valid USB drives are not recognized

DEN-15977: UI: UI is not responding to POST result request from HD

  1. … 3 more files in changeset.
DEN-16150: UI RTC Fails to set in Service mode

- add sudo for the date script.

- add +x to script files

  1. … 10 more files in changeset.
DEN-16096: Treatment Logs Do Not Upload to CloudSync Server

- Copied the config.json from the /var/configurations/ to the ~cloud/ CloudSync freshly copied.

DEN-15812: UI: Add an option on the Configurations setup screen to prevent the Device Registration cleanup

- Managed the Settings/System.conf owner

  1. … 6 more files in changeset.
DEN-15812: UI: Add an option on the Configurations setup screen to prevent the Device Registration cleanup

- removed the Bluetooth config

- made scripts all executable.

  1. … 9 more files in changeset.
DEN-15403: UI: Cybersecurity: POST security check

- Ran the device setup multiple times and fixed some issues and put some additional security fix and features.

- Cleaned up the code a little bit more.

- The main task is to do it at POST.

  1. … 5 more files in changeset.
Made changes to allow this script to be rerun.

Set the iptables rules / firewall.

Removed sudo for eval and added sudo's for the commands that it called. Fixed /etc/suders file.

  1. … 1 more file in changeset.
Checked in changes for moving the apps tp their own user's directory.

  1. … 24 more files in changeset.
copy the Cybersecurity, application/scripts

- Created a branch on the staging for Cybersecurity the same name as the one currently on the application repository [DEN-15279-UI-BN-S97-Cybersecurity]

- Checking out to it

- Copied the application/scripts from the same Cybersecurity branch on the application repository [DEN-15279-UI-BN-S97-Cybersecurity].

- And doing the merge

  1. … 9 more files in changeset.