#/bin/sh 

## Disable SE Linux
cp /etc/selinux/config /etc/selinux/config-bak
sed 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config-bak > /etc/selinux/config

## modify fstab default security 
cp /etc/fstab /etc/fstab.orig
sed '/\/tmp/s/defaults/noexec,nosuid/g' /etc/fstab.orig > /etc/fstab

#add default nameserver
echo "nameserver 64.38.192.12" >> /etc/resolv.conf
echo "nameserver 64.38.192.13" >> /etc/resolv.conf
#sync clock
ntpdate ns1.cwie.net
#disable unnecessary services
chkconfig --level 3 cups off
chkconfig --level 3 apmd off
chkconfig --level 3 cpuspeed off
chkconfig --level 3 gpm off
chkconfig --level 3 iptables off
chkconfig --level 3 kudzu off
chkconfig --level 3 mdmonitor off
chkconfig --level 3 nfslock off
chkconfig --level 3 portmap off
chkconfig --level 3 rpcidmapd off
chkconfig --level 3 rpcsvcgssd off
chkconfig --level 3 xinetd off
chkconfig --level 3 smartd off
chkconfig --level 3 rpcgssd off

#fixup logrotate
mkdir -p /etc/logrotate/tmp
chmod 755 /etc/logrotate
chmod 755 /etc/logrotate/tmp

#modify default yum database
cd /etc/yum.repos.d/
wget http://192.168.200.2/post/centos4-yum.repo
wget http://192.168.200.2/post/dries-el4.repo
mv /etc/yum.repos.d/CentOS-Base.repo /root/yum-repo.bak
mv centos-yum.repo Centos-Base.repo

#update yum and install stress util
rpm --import /usr/share/rhn/RPM-GPG-KEY-centos4
rpm -Uhv http://192.168.200.2/post/rpmforge-release-0.3.6-1.el5.rf.i386.rpm
yum -y update
yum -y install stress
cd /usr/src