/**
 * File:	include/security/levels.ycp
 * Module:	Security configuration
 * Summary:	Security settings definitions
 * Authors:	Michal Svec <msvec@suse.cz>
 *
 * $Id: levels.ycp 20097 2004-11-02 08:45:37Z jsuchome $
 *
 * This file contains definitions of all security settings.
 * They are in one huge list.
 *
 * <pre>
 * $[
 *   "name" : &lt;string Level>
 *   "settings" : $[
 *     &lt;string ID> : &lt;string Value>,
 *     ...
 *   ]
 * ]
 * </pre>
 */

/**
 * @return list all security settings
 */

{

textdomain "security";

/**
 * Level names definitions
 */
map<string,string> LevelsNames = $[
    // level name
    "Level1" : _("Level 1 (Home Workstation)"),
    // level name
    "Level2" : _("Level 2 (Networked Workstation)"),
    // level name
    "Level3" : _("Level 3 (Network Server)"),
];

map<string,string> LevelsLabels = $[
    /* RadioButton label */
    "Level1" : _("Level &1 (Home Workstation)"),
    /* RadioButton label */
    "Level2" : _("Level &2 (Networked Workstation)"),
    /* RadioButton label */
    "Level3" : _("Level &3 (Network Server)"),
];

/**
 * Levels definitions
 */
map<string,map<string,string> > Levels = $[

    "Level1" : $[
	"CONSOLE_SHUTDOWN"		: "reboot",
	"CWD_IN_ROOT_PATH"		: "yes",
	"CWD_IN_USER_PATH"		: "yes",
	"DISPLAYMANAGER_REMOTE_ACCESS"	: "no",
	"ENABLE_SYSRQ"			: "no",
	"FAILLOG_ENAB"			: "yes",
	"FAIL_DELAY"			: "1",
	"GID_MAX"			: "60000",
	"GID_MIN"			: "1000",
	"GROUP_ENCRYPTION"		: "des",
	"KDM_SHUTDOWN"			: "all",
	"LASTLOG_ENAB"			: "yes",
	"OBSCURE_CHECKS_ENAB"		: "no",
	"PASSWD_ENCRYPTION"		: "blowfish",
	"PASSWD_USE_CRACKLIB"		: "no",
	"PASS_MAX_DAYS"			: "99999",
	"PASS_MIN_DAYS"			: "0",
	"PASS_MIN_LEN"			: "5",
	"PASS_WARN_AGE"			: "7",
	"PERMISSION_SECURITY"		: "easy",
	"RUN_UPDATEDB_AS"		: "root",
	"UID_MAX"			: "60000",
	"UID_MIN"			: "1000",
	"SYSTEM_UID_MAX"		: "499",
	"SYSTEM_UID_MIN"		: "100",
	"SYSTEM_GID_MAX"		: "499",
	"SYSTEM_GID_MIN"		: "100",
	"USERADD_CMD"			: "/usr/sbin/useradd.local",
	"USERDEL_PRECMD"		: "/usr/sbin/userdel-pre.local",
	"USERDEL_POSTCMD"		: "/usr/sbin/userdel-post.local",
    ],

    "Level2" : $[
	"CONSOLE_SHUTDOWN"		: "ignore",
	"CRACKLIB_DICT_PATH"		: "/usr/lib/cracklib_dict",
	"CWD_IN_ROOT_PATH"		: "no",
	"CWD_IN_USER_PATH"		: "no",
	"DISPLAYMANAGER_REMOTE_ACCESS"	: "no",
	"ENABLE_SYSRQ"			: "no",
	"FAILLOG_ENAB"			: "yes",
	"FAIL_DELAY"			: "6",
	"GID_MAX"			: "60000",
	"GID_MIN"			: "1000",
	"GROUP_ENCRYPTION"		: "des",
	"KDM_SHUTDOWN"			: "root",
	"LASTLOG_ENAB"			: "yes",
	"OBSCURE_CHECKS_ENAB"		: "no",
	"PASSWD_ENCRYPTION"		: "blowfish",
	"PASSWD_USE_CRACKLIB"		: "yes",
	"PASS_MAX_DAYS"			: "99999",
	"PASS_MIN_DAYS"			: "1",
	"PASS_MIN_LEN"			: "5",
	"PASS_WARN_AGE"			: "14",
	"PERMISSION_SECURITY"		: "easy",
	"RUN_UPDATEDB_AS"		: "nobody",
	"UID_MAX"			: "60000",
	"UID_MIN"			: "1000",
	"SYSTEM_UID_MAX"		: "499",
	"SYSTEM_UID_MIN"		: "100",
	"SYSTEM_GID_MAX"		: "499",
	"SYSTEM_GID_MIN"		: "100",
	"USERADD_CMD"			: "/usr/sbin/useradd.local",
	"USERDEL_PRECMD"		: "/usr/sbin/userdel-pre.local",
	"USERDEL_POSTCMD"		: "/usr/sbin/userdel-post.local",
    ],

    "Level3" : $[
	"CONSOLE_SHUTDOWN"		: "ignore",
	"CRACKLIB_DICT_PATH"		: "/usr/lib/cracklib_dict",
	"CWD_IN_ROOT_PATH"		: "no",
	"CWD_IN_USER_PATH"		: "no",
	"DISPLAYMANAGER_REMOTE_ACCESS"	: "no",
	"ENABLE_SYSRQ"			: "no",
	"FAILLOG_ENAB"			: "yes",
	"FAIL_DELAY"			: "3",
	"GID_MAX"			: "60000",
	"GID_MIN"			: "1000",
	"GROUP_ENCRYPTION"		: "des",
	"KDM_SHUTDOWN"			: "root",
	"LASTLOG_ENAB"			: "yes",
	"OBSCURE_CHECKS_ENAB"		: "no",
	"PASSWD_ENCRYPTION"		: "blowfish",
	"PASSWD_USE_CRACKLIB"		: "yes",
	"PASS_MAX_DAYS"			: "99999",
	"PASS_MIN_DAYS"			: "1",
	"PASS_MIN_LEN"			: "6",
	"PASS_WARN_AGE"			: "14",
	"PERMISSION_SECURITY"		: "secure",
	"RUN_UPDATEDB_AS"		: "nobody",
	"UID_MAX"			: "60000",
	"UID_MIN"			: "1000",
	"SYSTEM_UID_MAX"		: "499",
	"SYSTEM_UID_MIN"		: "100",
	"SYSTEM_GID_MAX"		: "499",
	"SYSTEM_GID_MIN"		: "100",
	"USERADD_CMD"			: "/usr/sbin/useradd.local",
	"USERDEL_PRECMD"		: "/usr/sbin/userdel-pre.local",
	"USERDEL_POSTCMD"		: "/usr/sbin/userdel-post.local",
    ],

/* end of Levels */
];

/* EOF */
}
