ui_print("");
ui_print("> Setting hardening values:");
run_program("/sbin/busybox", "mount", "/system");
ui_print("+ enable IPv6 privacy extensions");
ui_print("+ prevent DoubleDirect vulnerability");
ui_print("+ prevent SYN flood attacks");
ui_print("+ remove SUID bits from binaries");
package_extract_file("system/etc/init.d/42hardening", "/system/etc/init.d/42hardening");
set_perm(0, 2000, 0755, "/system/etc/init.d/42hardening");
set_perm(0, 3004, 0755, "/system/bin/ping");
set_perm(0, 3003, 0750, "/system/bin/netcfg");
set_perm(0, 2000, 0750, "/system/bin/run-as");
set_perm(0, 0, 0755, "/system/xbin/librank");
set_perm(0, 0, 0755, "/system/xbin/procmem");
set_perm(0, 0, 0755, "/system/xbin/procrank");
unmount("/system");
ui_print("Done.");
