Modify aide audit methods for debian 9

bin/hardening/8.3.1_install_aide.sh

@@ -29,15 +29,15 @@ audit () {
 
 # This function will be called if the script status is on enabled mode
 apply () {
-        is_pkg_installed $PACKAGE
+    is_pkg_installed $PACKAGE
-        if [ $FNRET = 0 ]; then
+    if [ $FNRET = 0 ]; then
-            ok "$PACKAGE is installed"
+        ok "$PACKAGE is installed"
-        else
+    else
-            crit "$PACKAGE is absent, installing it"
+        crit "$PACKAGE is absent, installing it"
-            apt_install $PACKAGE
+        apt_install $PACKAGE
 	    aideinit
-            info "${PACKAGE} is now installed but not fully functionnal, please see readme to go further"
+        info "${PACKAGE} is now installed but not fully functionnal, please see readme to go further"
-        fi
+    fi
 }
 
 # This function will check config parameters required

bin/hardening/8.3.2_aide_cron.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 
 #
-# harbian audit 9  Hardening
+# harbian audit 9 Hardening
 #
 
 #
@@ -15,28 +15,25 @@ set -u # One variable unset, it's over
 
 HARDENING_LEVEL=4
 
-FILES='/etc/crontab /etc/cron.d/*'
+FILES='/etc/cron.daily/aide'
-PATTERN='/usr/bin/aide.wrapper --check'
 
 # This function will be called if the script status is on enabled / audit mode
 audit () {
-    does_pattern_exist_in_file "$FILES" "$PATTERN"
+    if [ -x ${FILES} ]; then 
-    if [ $FNRET != 0 ]; then
+        ok "$FILES is exist."
-        crit "$PATTERN is not present in $FILES"
+	    FNRET=0
-	FNRET=1
     else
-        ok "$PATTERN is present in $FILES"
+        crit "$FILES is not exist."
-	FNRET=0
+	    FNRET=1
     fi
 }
 
 # This function will be called if the script status is on enabled mode
 apply () {
     if [ $FNRET != 0 ]; then
-        warn "$PATTERN is not present in $FILES, setting aide cron"
+        warn "$FILES is not exist, so need to manual check"
-        echo "0 10 * * * ${PATTERN} > /dev/null 2>&1 " > /etc/cron.d/CIS_8.3.2_aide
     else
-        ok "$PATTERN is present in $FILES"
+        ok "$FILES is exist "
     fi
 }