tyler.durden
/
harbian-audit
mirror of https://github.com/hardenedlinux/harbian-audit.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Rename function name for human.

This commit is contained in:
Samson-W 2018-11-07 12:25:57 +08:00
parent 79e8bea65f
commit b44ad4fa8b
13 changed files with 14 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bin/hardening/9.2.10_enable_maxclassrepeat_cracklib.sh
View File

@ -35,7 +35,7 @@ audit () {
does_pattern_exist_in_file $FILE $PATTERN
if [ $FNRET = 0 ]; then
ok "$PATTERN is present in $FILE"
check_password_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
check_param_pair_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition is $CONDT_VAL"
else

4
bin/hardening/9.2.11_enable_lockout_failed_password.sh
View File

@ -16,7 +16,7 @@ set -u # One variable unset, it's over
HARDENING_LEVEL=3
PACKAGE='libpam-modules-bin'
AUTHPATTERN='^auth[[:space:]]*required[[:space:]]*pam_tally[2]?.so'
AUTHPATTERN='^auth[[:space:]]*required[[:space:]]*pam_tally2.so'
AUTHFILE='/etc/pam.d/common-auth'
AUTHRULE='auth required pam_tally2.so audit silent deny=3 unlock_time=900'
ADDPATTERNLINE='# pam-auth-update(8) for details.'
@ -49,7 +49,7 @@ apply () {
apt_install $PACKAGE
elif [ $FNRET = 2 ]; then
warn "Apply:$AUTHPATTERN is not present in $AUTHFILE"
add_line_file_after_pattern $AUTHFILE $AUTHRULE $ADDPATTERNLINE
add_line_file_after_pattern "$AUTHFILE" "$AUTHRULE" "$ADDPATTERNLINE"
fi
}

2
bin/hardening/9.2.12_limit_password_reuse.sh
View File

@ -32,7 +32,7 @@ audit () {
does_pattern_exist_in_file $FILE $PATTERN
if [ $FNRET = 0 ]; then
ok "$PATTERN is present in $FILE"
check_password_by_pam $FILE $KEYWORD $OPTIONNAME ge $CONDT_VAL
check_param_pair_by_pam $FILE $KEYWORD $OPTIONNAME ge $CONDT_VAL
if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition to $CONDT_VAL is ok"
else

2
bin/hardening/9.2.1_enable_retry_cracklib.sh
View File

@ -35,7 +35,7 @@ audit () {
does_pattern_exist_in_file $FILE $PATTERN
if [ $FNRET = 0 ]; then
ok "$PATTERN is present in $FILE"
check_password_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
check_param_pair_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition is $CONDT_VAL"
else

2
bin/hardening/9.2.2_enable_minlen_cracklib.sh
View File

@ -35,7 +35,7 @@ audit () {
does_pattern_exist_in_file $FILE $PATTERN
if [ $FNRET = 0 ]; then
ok "$PATTERN is present in $FILE"
check_password_by_pam $FILE $PAMLIBNAME $OPTIONNAME ge $CONDT_VAL
check_param_pair_by_pam $FILE $PAMLIBNAME $OPTIONNAME ge $CONDT_VAL
if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition is $CONDT_VAL"
else

2
bin/hardening/9.2.3_enable_dcredit_cracklib.sh
View File

@ -35,7 +35,7 @@ audit () {
does_pattern_exist_in_file $FILE $PATTERN
if [ $FNRET = 0 ]; then
ok "$PATTERN is present in $FILE"
check_password_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
check_param_pair_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition is $CONDT_VAL"
else

2
bin/hardening/9.2.4_enable_ucredit_cracklib.sh
View File

@ -35,7 +35,7 @@ audit () {
does_pattern_exist_in_file $FILE $PATTERN
if [ $FNRET = 0 ]; then
ok "$PATTERN is present in $FILE"
check_password_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
check_param_pair_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition is $CONDT_VAL"
else

2
bin/hardening/9.2.5_enable_ocredit_cracklib.sh
View File

@ -35,7 +35,7 @@ audit () {
does_pattern_exist_in_file $FILE $PATTERN
if [ $FNRET = 0 ]; then
ok "$PATTERN is present in $FILE"
check_password_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
check_param_pair_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition is $CONDT_VAL"
else

2
bin/hardening/9.2.6_enable_lcredit_cracklib.sh
View File

@ -35,7 +35,7 @@ audit () {
does_pattern_exist_in_file $FILE $PATTERN
if [ $FNRET = 0 ]; then
ok "$PATTERN is present in $FILE"
check_password_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
check_param_pair_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition is $CONDT_VAL"
else

2
bin/hardening/9.2.7_enable_difok_cracklib.sh
View File

@ -35,7 +35,7 @@ audit () {
does_pattern_exist_in_file $FILE $PATTERN
if [ $FNRET = 0 ]; then
ok "$PATTERN is present in $FILE"
check_password_by_pam $FILE $PAMLIBNAME $OPTIONNAME ge $CONDT_VAL
check_param_pair_by_pam $FILE $PAMLIBNAME $OPTIONNAME ge $CONDT_VAL
if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition is $CONDT_VAL"
else

2
bin/hardening/9.2.8_enable_minclass_cracklib.sh
View File

@ -35,7 +35,7 @@ audit () {
does_pattern_exist_in_file $FILE $PATTERN
if [ $FNRET = 0 ]; then
ok "$PATTERN is present in $FILE"
check_password_by_pam $FILE $PAMLIBNAME $OPTIONNAME ge $CONDT_VAL
check_param_pair_by_pam $FILE $PAMLIBNAME $OPTIONNAME ge $CONDT_VAL
if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition is $CONDT_VAL"
else

2
bin/hardening/9.2.9_enable_maxrepeat_cracklib.sh
View File

@ -35,7 +35,7 @@ audit () {
does_pattern_exist_in_file $FILE $PATTERN
if [ $FNRET = 0 ]; then
ok "$PATTERN is present in $FILE"
check_password_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
check_param_pair_by_pam $FILE $PAMLIBNAME $OPTIONNAME le $CONDT_VAL
if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition is $CONDT_VAL"
else

2
lib/utils.sh
View File

@ -454,7 +454,7 @@ verify_integrity_all_packages()
fi
}
check_password_by_pam()
check_param_pair_by_pam()
{
LOCATION=$1
KEYWORD=$2