All configuration defaults to disabled README updated

etc/conf.d/1.1_install_updates.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/10.1.1_set_password_exp_days.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/10.1.2_set_password_min_days_change.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/10.1.3_set_password_exp_warning_days.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/10.2_disable_system_accounts.cfg

@@ -1,4 +1,4 @@
 # Configuration for script of same name
-status=enabled
+status=disabled
 # Put here your exceptions concerning admin accounts shells separated by spaces
 EXCEPTIONS=""

etc/conf.d/10.3_default_root_group.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/10.4_default_umask.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/10.5_lock_inactive_user_account.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/11.1_warning_banners.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/11.2_remove_os_info_warning_banners.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/11.3_graphical_warning_banners.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/12.10_find_suid_files.cfg

@@ -1,5 +1,5 @@
 # Configuration for script of same name
-status=enabled
+status=disabled
 
 # Put Here your valid suid binaries so that they do not appear during the audit
 EXCEPTIONS="/bin/mount /bin/ping /bin/ping6 /bin/su /bin/umount /usr/bin/chfn /usr/bin/chsh /usr/bin/fping /usr/bin/fping6 /usr/bin/gpasswd /usr/bin/mtr /usr/bin/newgrp /usr/bin/passwd /usr/bin/sudo /usr/bin/sudoedit /usr/lib/openssh/ssh-keysign /usr/lib/pt_chown"

etc/conf.d/12.11_find_sgid_files.cfg

@@ -1,4 +1,4 @@
 # Configuration for script of same name
-status=enabled
+status=disabled
 # Put here valid binaries with sgid enabled separated by spaces
 EXCEPTIONS="/sbin/unix_chkpwd /usr/bin/bsd-write /usr/bin/chage /usr/bin/crontab /usr/bin/expiry /usr/bin/mutt_dotlock /usr/bin/screen /usr/bin/ssh-agent /usr/bin/wall /usr/sbin/postdrop /usr/sbin/postqueue"

etc/conf.d/12.1_etc_passwd_permissions.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/12.2_etc_shadow_permissions.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/12.3_etc_group_permissions.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/12.4_etc_passwd_ownership.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/12.5_etc_shadow_ownership.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/12.6_etc_group_ownership.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/12.7_find_world_writable_file.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/12.8_find_unowned_files.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/12.9_find_ungrouped_files.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.10_find_user_rhosts_files.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.11_find_passwd_group_inconsistencies.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.12_users_valid_homedir.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.13_check_user_homedir_ownership.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.14_check_duplicate_uid.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.15_check_duplicate_gid.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.16_check_duplicate_username.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.17_check_duplicate_groupname.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.18_find_user_netrc_files.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.19_find_user_forward_files.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.1_remove_empty_password_field.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.20_shadow_group_empty.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.2_remove_legacy_passwd_entries.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.3_remove_legacy_shadow_entries.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.4_remove_legacy_group_entries.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.5_find_0_uid_non_root_account.cfg

@@ -1,4 +1,4 @@
 # Configuration for script of same name
-status=enabled
+status=disabled
 # Put here valid accounts with uid 0 separated by spaces
 EXCEPTIONS=""

etc/conf.d/13.6_sanitize_root_path.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.7_check_user_dir_perm.cfg

@@ -1,4 +1,4 @@
 # Configuration for script of same name
-status=enabled
+status=disabled
 # Put here user home directories exceptions, separated by spaces
 EXCEPTIONS=""

etc/conf.d/13.8_check_user_dot_file_perm.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/13.9_set_perm_on_user_netrc.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/5.1.2_disable_rsh.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/5.1.4_disable_talk.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/5.1.5_disable_talk_client.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/5.1.6_disable_telnet_server.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/5.1.7_disable_tftp_server.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/5.1.8_disable_inetd.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/5.2_disable_chargen.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/5.3_disable_daytime.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/5.4_disable_echo.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/5.5_disable_discard.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/5.6_disable_time.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.10_disable_http_server.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.11_disable_imap_pop.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.12_disable_samba.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.13_diable_http_proxy.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.14_disable_snmp_server.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.15_mta_localhost.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.16_disable_rsync.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.1_disable_xwindow_system.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.2_disable_avahi_server.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.3_disable_print_server.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.4_disable_dhcp.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.5_configure_ntp.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.6_diable_ldap.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.7_disable_nfs_rpc.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.8_disable_dns_server.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/6.9_disable_ftp.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.1.1_disable_ip_forwarding.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.1.2_disable_send_packet_redirects.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.2.1_disable_source_routed_packets.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.2.2_disable_icmp_redirect.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.2.3_disable_secure_icmp_redirect.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.2.4_log_martian_packets.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.2.5_ignore_broadcast_requests.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.2.6_enable_bad_error_message_protection.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.2.7_enable_source_route_validation.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.2.8_enable_tcp_syn_cookies.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.3.1_disable_ipv6_router_advertisement.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.3.2_disable_ipv6_redirect.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.3.3_disable_ipv6.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.4.1_install_tcp_wrapper.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.4.2_hosts_allow.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.4.3_hosts_allow_permissions.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.4.4_hosts_deny.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.4.5_hosts_deny_permissions.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.5.1_disable_dccp.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.5.2_disable_sctp.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.5.3_disable_rds.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.6_disable_wireless.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/7.7_enable_firewall.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/8.0_enable_auditd_kernel.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/8.1.1.1_audit_log_storage.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/8.1.1.2_halt_when_audit_log_full.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/8.1.1.3_keep_all_audit_logs.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/8.1.10_record_dac_edit.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/8.1.11_record_failed_access_file.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/8.1.12_record_privileged_commands.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled

etc/conf.d/8.1.13_record_successful_mount.cfg

@@ -1,2 +1,2 @@
 # Configuration for script of same name
-status=enabled
+status=disabled