[FW-1] Locking down a FW-1 RedHat Linux 7.3 box

[Steven Rodenburg <steven.rodenburg@FW1-NOSPAMPLANET.NL>]

Hi,

We run Check Point on RedHat Linux 7.3
I configured sshd to "not accept" root logins and i created a user with
whom to login. After this "dummy" user is logged in i can do a "su -" to
gain root access.

What i want to achieve is that this "dummy" user can do only one thing:
login and do "su" to become root. That's it.
This "dummy" user is a member of the "dummy" group which i created
specifically for this purpose.

If i remove the "others" permission on ALL the files of the system i
guess i will break something.

This "dummy" user will need to have read permissions on the "su" command
ofcourse and some commands that have to do with login.

Instead of inventing the wheel myself does anybody know of a "system
lockdown" script which provides what i want to achieve ?

SuSe has these kind of scripts for their distro's but i can't use them
for RedHat without major modifications.


Greetings,
Steve

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================