# $Header: /global/src/etc/cl-manage-scripts/patches/RCS/F-remote,v 1.4 2025/03/21 15:19:26 mas90 Exp $
# A machine a remote network should do somem basic configs
P-chkconfig-ntpd-on
P-chkconfig-crond-on
P-chkconfig-ip6tables-on
# Start iptables on Ubuntu systems
P-ufw.conf-on
# limit rate for external ssh calls
P-ufw-before.rules-recent
P-ufw6-before.rules-recent
P-ufw6-before.rules-recent-2a05
P-ufw6-before.rules-recent-U20
# Basic set of ufw rules
P-ufw-user.rules-basic
# Allow swap and scratch mounting IFF suitable partitions
P-fstab-scratch
P-fstab-SWAP
P-fstab-swap
P-network-interfaces-static.samp

# remote
P-chkconfig-ntpd-on
P-chkconfig-crond-on
P-sudoers-includedir
# Allow ANYONE to mkscratchdir
# use sudoers.d/ P-sudoers-mkscratchdir-U
# use sudoers.d/ P-sudoers-mkscratchdir
# use sudoers.d/ P-sudoers-cl-mkscratchdir
# Allow the assigned user (etc?) to run cl-asuser
# use sudoers.d/ P-sudoers-cl-asuser
# No longer needed: P-group-uucp-staff 
P-group.master
# Include the user id in the prompt
# use sudoers.d/ P-sudoers-prompt
# Allow Alt-SysRq-* commands at the console
P-sysctl.conf-sysrq
# Don't allow ssh access using passwords
P-sshd_config-no-password
P-sshd_config-no-password-2
# Forse ssh v2
P-sshd_config-proto2
P-sshd_config-proto2-U18
# Ensure DNS lookups are used so that matches can be made agains DNS names
P-sshd_config-UseDNS
# make certain host keys known to ssh
P-ssh_config-ssh_known_hosts-out
# put "search cl.cam.ac.uk" in /etc/resolv.conf
P-dhclient.conf-cl
# make /usr/sbin/xe-update-guest-attrs report free+cached memory
P-xe-uga-cache
