tyler.durden/harbian-audit
1
0
Fork 0
mirror of https://github.com/hardenedlinux/harbian-audit.git synced 2025-07-31 01:24:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

Modify 9.2.1 to be compatible with CentOS.

Browse Source
This commit is contained in:
Samson-W 2019-08-20 01:34:34 +08:00
parent 4cb0418af7
commit a635b7d4a9
1 changed files with 24 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
bin/hardening/9.2.1_pam_retry_cracklib.sh
View File

@ -1,7 +1,7 @@
#!/bin/bash #!/bin/bash
# #
# harbian audit 7/8/9 Hardening # harbian audit 7/8/9/10 or CentOS Hardening
# #
# #
@ -19,6 +19,12 @@ PAMLIBNAME='pam_cracklib.so'
PATTERN='^password.*pam_cracklib.so' PATTERN='^password.*pam_cracklib.so'
FILE='/etc/pam.d/common-password' FILE='/etc/pam.d/common-password'
# Redhat/CentOS default use pam_pwquality
PACKAGE_REDHAT='libpwquality'
PAMLIBNAME_REDHAT='pam_pwquality.so'
PATTERN_REDHAT='^password.*pam_pwquality.so'
FILE_REDHAT='/etc/pam.d/system-auth'
OPTIONNAME='retry' OPTIONNAME='retry'
# condition # condition
@ -26,6 +32,12 @@ CONDT_VAL=3
# This function will be called if the script status is on enabled / audit mode # This function will be called if the script status is on enabled / audit mode
audit () { audit () {
if [ $OS_RELEASE -eq 2 ]; then
PACKAGE=$PACKAGE_REDHAT
PAMLIBNAME=$PAMLIBNAME_REDHAT
PATTERN=$PATTERN_REDHAT
FILE=$FILE_REDHAT
fi
is_pkg_installed $PACKAGE is_pkg_installed $PACKAGE
if [ $FNRET != 0 ]; then if [ $FNRET != 0 ]; then
crit "$PACKAGE is not installed!" crit "$PACKAGE is not installed!"
@ -51,11 +63,21 @@ audit () {
# This function will be called if the script status is on enabled mode # This function will be called if the script status is on enabled mode
apply () { apply () {
if [ $OS_RELEASE -eq 2 ]; then
PACKAGE=$PACKAGE_REDHAT
PAMLIBNAME=$PAMLIBNAME_REDHAT
PATTERN=$PATTERN_REDHAT
FILE=$FILE_REDHAT
fi
if [ $FNRET = 0 ]; then if [ $FNRET = 0 ]; then
ok "$PACKAGE is installed" ok "$PACKAGE is installed"
elif [ $FNRET = 1 ]; then elif [ $FNRET = 1 ]; then
crit "$PACKAGE is absent, installing it" crit "$PACKAGE is absent, installing it"
apt_install $PACKAGE if [ $OS_RELEASE -eq 2 ]; then
yum install -y $PACKAGE
else
apt_install $PACKAGE
fi
elif [ $FNRET = 2 ]; then elif [ $FNRET = 2 ]; then
crit "$PATTERN is not present in $FILE, add default config to $FILE" crit "$PATTERN is not present in $FILE, add default config to $FILE"
add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=8 difok=3" "# pam-auth-update(8) for details." add_line_file_before_pattern $FILE "password requisite pam_cracklib.so retry=3 minlen=8 difok=3" "# pam-auth-update(8) for details."