SEC [ investmedical.hu ]

Linux ip2.maxxoffice.hu 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64

Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips

194.39.46.82 | Your IP: 216.73.216.147

Cant read [ /etc/named.conf ]

[ drwxr-xr-x ]

/ usr / share / scap-security-guide / kickstart /

Home Upload Mass Deface Mass Delete Back Connect Info Server

Server Info

Operating System	:	Linux ip2.maxxoffice.hu 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User / Group	:	1103[invest] / 1103[invest]
PHP Version	:	8.1.34
IP Server	:	194.39.46.82
Your IP	:	216.73.216.147
Storage	:	Total = 1.94 TB, Free = 918.76 GB [46%]
Domains	:	Cant read [ /etc/named.conf ]
Software	:	Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips
Disable Functions	:	All function is accessible
Useful Functions	:	gcc, lcc, cc, ld, make, php, perl, python, ruby, tar, gzip, bzip, bzialfa2, nc, locate, suidperl, git, docker, ssh
Downloader	:	wget, fetch, lynx, links, curl, get, lwp-mirror
CURL : ON \| SSH2 : OFF \| Magic Quotes : OFF \| MySQL : ON \| MSSQL : OFF \| PostgreSQL : OFF \| Oracle : OFF
Safe Mode : OFF \| Open Basedir : NONE \| Safe Mode Exec Dir : NONE \| Safe Mode Include Dir : NONE

ssg-rhel8-cis-ks.cfg

# SCAP Security Guide CIS profile (Level 2 - Server) kickstart for Red Hat Enterprise Linux 8 Server
# Version: 0.0.1
# Date: 2021-08-12
#
# Based on:
# https://pykickstart.readthedocs.io/en/latest/
# For more information see the following documentation:
# https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/scanning-the-system-for-configuration-compliance-and-vulnerabilities_security-hardening#deploying-baseline-compliant-rhel-systems-using-kickstart_deploying-systems-that-are-compliant-with-a-security-profile-immediately-after-an-installation

# Specify installation method to use for installation
# To use a different one comment out the 'url' one below, update
# the selected choice with proper options & un-comment it
#
# Install from an installation tree on a remote server via FTP or HTTP:
# --url		the URL to install from
#
# Example:
#
# url --url=http://192.168.122.1/image
#
# Modify concrete URL in the above example appropriately to reflect the actual
# environment machine is to be installed in
#
# Other possible / supported installation methods:
# * install from the first CD-ROM/DVD drive on the system:
#
# cdrom
#
# * install from a directory of ISO images on a local drive:
#
# harddrive --partition=hdb2 --dir=/tmp/install-tree
#
# * install from provided NFS server:
#
# nfs --server=<hostname> --dir=<directory> [--opts=<nfs options>]
#

# Set language to use during installation and the default language to use on the installed system (required)
lang en_US.UTF-8

# Set system keyboard type / layout (required)
keyboard --vckeymap us

# Configure network information for target system and activate network devices in the installer environment (optional)
# --onboot	enable device at a boot time
# --device	device to be activated and / or configured with the network command
# --bootproto	method to obtain networking configuration for device (default dhcp)
# --noipv6	disable IPv6 on this device
network --onboot yes --device eth0 --bootproto dhcp --noipv6

# Set the system's root password (required)
# Plaintext password is: server
# Refer to e.g. https://pykickstart.readthedocs.io/en/latest/commands.html#rootpw to see how to create
# encrypted password form for different plaintext password
rootpw --iscrypted $6$/0RYeeRdK70ynvYz$jH2ZN/80HM6DjndHMxfUF9KIibwipitvizzXDH1zW.fTjyD3RD3tkNdNUaND18B/XqfAUW3vy1uebkBybCuIm0

# The selected profile will restrict root login
# Add a user that can login and escalate privileges
# Plaintext password is: admin123
user --name=admin --groups=wheel --password=$6$Ga6ZnIlytrWpuCzO$q0LqT1USHpahzUafQM9jyHCY9BiE5/ahXLNWUMiVQnFGblu0WWGZ1e6icTaCGO4GNgZNtspp1Let/qpM7FMVB0 --iscrypted

# Configure firewall settings for the system (optional)
# --enabled	reject incoming connections that are not in response to outbound requests
# --ssh		allow sshd service through the firewall
firewall --enabled --ssh

# State of SELinux on the installed system (optional)
# Defaults to enforcing
selinux --enforcing

# Set the system time zone (required)
timezone --utc America/New_York

# Specify how the bootloader should be installed (required)
# Plaintext password is: password
# Refer to e.g. grub2-mkpasswd-pbkdf2 to see how to create
# encrypted password form for different plaintext password
bootloader --password=grub.pbkdf2.sha512.10000.45912D32B964BA58B91EAF9847F3CCE6F4C962638922543AFFAEE4D29951757F4336C181E6FC9030E07B7D9874DAD696A1B18978D995B1D7F27AF9C38159FDF3.99F65F3896012A0A3D571A99D6E6C695F3C51BE5343A01C1B6907E1C3E1373CB7F250C2BC66C44BB876961E9071F40205006A05189E51C2C14770C70C723F3FD --iscrypted

# Initialize (format) all disks (optional)
zerombr

# The following partition layout scheme assumes disk of size 20GB or larger
# Modify size of partitions appropriately to reflect actual machine's hardware
#
# Remove Linux partitions from the system prior to creating new ones (optional)
# --linux	erase all Linux partitions
# --initlabel	initialize the disk label to the default based on the underlying architecture
clearpart --linux --initlabel

# Create primary system partitions (required for installs)
part /boot --fstype=xfs --size=512
part pv.01 --grow --size=1

# Create a Logical Volume Management (LVM) group (optional)
volgroup VolGroup pv.01

# Create particular logical volumes (optional)
logvol / --fstype=xfs --name=root --vgname=VolGroup --size=10240 --grow
# Ensure /home Located On Separate Partition
logvol /home --fstype=xfs --name=home --vgname=VolGroup --size=1024 --fsoptions="nodev"
# Ensure /tmp Located On Separate Partition
logvol /tmp --fstype=xfs --name=tmp --vgname=VolGroup --size=1024 --fsoptions="nodev,noexec,nosuid"
# Ensure /var/tmp Located On Separate Partition
logvol /var/tmp --fstype=xfs --name=vartmp --vgname=VolGroup --size=1024 --fsoptions="nodev,nosuid,noexec"
# Ensure /var Located On Separate Partition
logvol /var --fstype=xfs --name=var --vgname=VolGroup --size=3072
# Ensure /var/log Located On Separate Partition
logvol /var/log --fstype=xfs --name=varlog --vgname=VolGroup --size=1024
# Ensure /var/log/audit Located On Separate Partition
logvol /var/log/audit --fstype=xfs --name=varlogaudit --vgname=VolGroup --size=512
logvol swap --name=swap --vgname=VolGroup --size=2016

# The OpenSCAP installer add-on is used to apply SCAP (Security Content Automation Protocol)
# content - security policies - on the installed system.This add-on has been enabled by default
# since Red Hat Enterprise Linux 7.2. When enabled, the packages necessary to provide this 
# functionality will automatically be installed. However, by default, no policies are enforced,
# meaning that no checks are performed during or after installation unless specifically configured.
#  
#  Important
#   Applying a security policy is not necessary on all systems. This screen should only be used
#   when a specific policy is mandated by your organization rules or government regulations.
#   Unlike most other commands, this add-on does not accept regular options, but uses key-value
#   pairs in the body of the %addon definition instead. These pairs are whitespace-agnostic.
#   Values can be optionally enclosed in single quotes (') or double quotes (").
#   
# For more details and configuration options see
# https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/performing_an_advanced_rhel_8_installation/kickstart-commands-and-options-reference_installing-rhel-as-an-experienced-user#addon-org_fedora_oscap_kickstart-commands-for-addons-supplied-with-the-rhel-installation-program
%addon org_fedora_oscap
        content-type = scap-security-guide
        profile = xccdf_org.ssgproject.content_profile_cis
%end

# Packages selection (%packages section is required)
%packages
%end

# Reboot after the installation is complete (optional)
# --eject	attempt to eject CD or DVD media before rebooting
reboot --eject

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	root/root	drwxr-xr-x	2024-06-12 05:36:17
..	dir	-	root/root	drwxr-xr-x	2024-06-05 03:09:32
ssg-rhel6-pci-dss-with-gui-ks.cfg	text/plain	6.33 KB	root/root	-rw-r--r--	2024-06-05 03:09:33
ssg-rhel6-stig-ks.cfg	text/plain	12.3 KB	root/root	-rw-r--r--	2024-06-05 03:09:33
ssg-rhel6-usgcb-server-with-gui-ks.cfg	text/plain	6.29 KB	root/root	-rw-r--r--	2024-06-05 03:09:33
ssg-rhel7-anssi_nt28_enhanced-ks.cfg	text/plain	6.1 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-anssi_nt28_high-ks.cfg	text/plain	6.19 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-anssi_nt28_intermediary-ks.cfg	text/plain	6.06 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-anssi_nt28_minimal-ks.cfg	text/plain	3.67 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-cis-ks.cfg	text/plain	5.78 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-cis_server_l1-ks.cfg	text/plain	5.78 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-cis_workstation_l1-ks.cfg	text/plain	5.79 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-cis_workstation_l2-ks.cfg	text/plain	5.79 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-e8-ks.cfg	text/plain	4.69 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-hipaa-ks.cfg	text/plain	4.67 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-ospp-ks.cfg	text/plain	5.63 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-pci-dss-server-with-gui-oaa-ks.cfg	text/plain	5.33 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-stig-ks.cfg	text/plain	5 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel7-stig_gui-ks.cfg	text/plain	4.92 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-anssi_bp28_enhanced-ks.cfg	text/plain	7.23 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-anssi_bp28_high-ks.cfg	text/plain	7.32 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-anssi_bp28_intermediary-ks.cfg	text/plain	6.89 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-anssi_bp28_minimal-ks.cfg	text/plain	4.78 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-cis-ks.cfg	text/plain	6.72 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-cis_server_l1-ks.cfg	text/plain	6.73 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-cis_workstation_l1-ks.cfg	text/plain	6.74 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-cis_workstation_l2-ks.cfg	text/plain	6.74 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-cui-ks.cfg	text/plain	6.53 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-e8-ks.cfg	text/plain	5.62 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-hipaa-ks.cfg	text/plain	5.62 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-ism_o-ks.cfg	text/plain	5.18 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-ospp-ks.cfg	text/plain	6.53 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-pci-dss-ks.cfg	text/plain	6.49 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-stig-ks.cfg	text/plain	6.9 KB	root/root	-rw-r--r--	2024-05-14 02:08:18
ssg-rhel8-stig_gui-ks.cfg	text/plain	6.93 KB	root/root	-rw-r--r--	2024-05-14 02:08:18