diff --git a/bin/hardening/8.2.1_install_rsyslog.sh b/bin/hardening/8.2.1_install_rsyslog.sh new file mode 100755 index 0000000..2e0bbd4 --- /dev/null +++ b/bin/hardening/8.2.1_install_rsyslog.sh @@ -0,0 +1,70 @@ +#!/bin/bash + +# +# harbian audit 9 Hardening +# + +# +# 8.2.1 Install the rsyslog package (Scored) +# Author : Samson wen, Samson +# + +set -e # One error, it's over +set -u # One variable unset, it's over + +HARDENING_LEVEL=3 + +# In debian, rsyslog has been chosen +PACKAGE='rsyslog' +PACKAGE_NG='syslog-ng' + +# This function will be called if the script status is on enabled / audit mode +audit () { + is_pkg_installed $PACKAGE_NG + if [ $FNRET = 0 ]; then + ok "$PACKAGE_NG has installed, so pass." + FNRET=0 + else + is_pkg_installed $PACKAGE + if [ $FNRET != 0 ]; then + crit "$PACKAGE is not installed!" + FNRET=1 + else + ok "$PACKAGE is installed." + FNRET=0 + fi + fi +} + +# This function will be called if the script status is on enabled mode +apply () { + if [ $FNRET = 0 ]; then + ok "$PACKAGE is installed or $PACKAGE_NG is installed." + else + crit "$PACKAGE is absent, installing it." + apt_install $PACKAGE + fi +} + +# This function will check config parameters required +check_config() { + : +} + +# Source Root Dir Parameter +if [ -r /etc/default/cis-hardening ]; then + . /etc/default/cis-hardening +fi +if [ -z "$CIS_ROOT_DIR" ]; then + echo "There is no /etc/default/cis-hardening file nor cis-hardening directory in current environment." + echo "Cannot source CIS_ROOT_DIR variable, aborting." + exit 128 +fi + +# Main function, will call the proper functions given the configuration (audit, enabled, disabled) +if [ -r $CIS_ROOT_DIR/lib/main.sh ]; then + . $CIS_ROOT_DIR/lib/main.sh +else + echo "Cannot find main.sh, have you correctly defined your root directory? Current value is $CIS_ROOT_DIR in /etc/default/cis-hardening" + exit 128 +fi diff --git a/bin/hardening/8.2.1_install_syslog-ng.sh b/bin/hardening/8.3.1_install_syslog-ng.sh similarity index 100% rename from bin/hardening/8.2.1_install_syslog-ng.sh rename to bin/hardening/8.3.1_install_syslog-ng.sh diff --git a/bin/hardening/8.2.2_enable_syslog-ng.sh b/bin/hardening/8.3.2_enable_syslog-ng.sh similarity index 100% rename from bin/hardening/8.2.2_enable_syslog-ng.sh rename to bin/hardening/8.3.2_enable_syslog-ng.sh diff --git a/bin/hardening/8.2.3_configure_syslog-ng.sh b/bin/hardening/8.3.3_configure_syslog-ng.sh similarity index 100% rename from bin/hardening/8.2.3_configure_syslog-ng.sh rename to bin/hardening/8.3.3_configure_syslog-ng.sh diff --git a/bin/hardening/8.2.4_set_logfile_perm.sh b/bin/hardening/8.3.4_set_logfile_perm.sh similarity index 100% rename from bin/hardening/8.2.4_set_logfile_perm.sh rename to bin/hardening/8.3.4_set_logfile_perm.sh diff --git a/bin/hardening/8.2.5_syslog-ng_remote_host.sh b/bin/hardening/8.3.5_syslog-ng_remote_host.sh similarity index 100% rename from bin/hardening/8.2.5_syslog-ng_remote_host.sh rename to bin/hardening/8.3.5_syslog-ng_remote_host.sh diff --git a/bin/hardening/8.2.6_remote_syslog-ng_acl.sh b/bin/hardening/8.3.6_remote_syslog-ng_acl.sh similarity index 100% rename from bin/hardening/8.2.6_remote_syslog-ng_acl.sh rename to bin/hardening/8.3.6_remote_syslog-ng_acl.sh diff --git a/bin/hardening/8.3.1_install_aide.sh b/bin/hardening/8.4.1_install_aide.sh similarity index 100% rename from bin/hardening/8.3.1_install_aide.sh rename to bin/hardening/8.4.1_install_aide.sh diff --git a/bin/hardening/8.3.2_aide_cron.sh b/bin/hardening/8.4.2_aide_cron.sh similarity index 100% rename from bin/hardening/8.3.2_aide_cron.sh rename to bin/hardening/8.4.2_aide_cron.sh diff --git a/bin/hardening/8.4_configure_logrotate.sh b/bin/hardening/8.5_configure_logrotate.sh similarity index 100% rename from bin/hardening/8.4_configure_logrotate.sh rename to bin/hardening/8.5_configure_logrotate.sh diff --git a/bin/hardening/8.5_verify_integrity_packages.sh b/bin/hardening/8.6_verify_integrity_packages.sh similarity index 100% rename from bin/hardening/8.5_verify_integrity_packages.sh rename to bin/hardening/8.6_verify_integrity_packages.sh