Add check iptables persistent function for 7.7.1

This commit is contained in:
Samson-W 2018-11-28 06:14:34 -05:00
parent 4a9704551a
commit 94c467485e
1 changed files with 14 additions and 1 deletions

View File

@ -19,6 +19,7 @@ HARDENING_LEVEL=2
# Do as you want, but this script does not handle this
PACKAGES='iptables iptables-persistent'
SERVICENAME='netfilter-persistent'
# This function will be called if the script status is on enabled / audit mode
audit () {
@ -34,18 +35,30 @@ audit () {
FNRET=0
fi
done
if [ $FNRET = 0 ]; then
if [ $(systemctl status ${SERVICENAME} | grep -c "Active:.active") -ne 1 ]; then
crit "${SERVICENAME} service is not actived"
FNRET=2
else
ok "${SERVICENAME} service is actived"
FNRET=0
fi
fi
}
# This function will be called if the script status is on enabled mode
apply () {
if [ $FNRET = 0 ]; then
ok "$PACKAGES is installed"
else
elif [ $FNRET = 1 ]; then
for PACKAGE in $PACKAGES
do
warn "$PACKAGE is absent, installing it"
apt_install $PACKAGE
done
elif [ $FNRET = 2 ]; then
warn "Enable ${SERVICENAME} service to actived"
systemctl start ${SERVICENAME}
fi
}