tyler.durden/harbian-audit
1
0
Fork 0
mirror of https://github.com/hardenedlinux/harbian-audit.git synced 2025-07-31 01:24:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix issues #20

Browse Source
This commit is contained in:
Samson-W 2020-09-22 12:52:12 +08:00
parent f2e49b69cc
commit c24e12541e
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
bin/hardening/9.2.16_pam_limit_password_reuse.sh
View File

@ -37,11 +37,11 @@ audit () {
ok "$PATTERN is present in $FILE" ok "$PATTERN is present in $FILE"
check_param_pair_by_pam $FILE $KEYWORD $OPTIONNAME ge $CONDT_VAL check_param_pair_by_pam $FILE $KEYWORD $OPTIONNAME ge $CONDT_VAL
if [ $FNRET = 0 ]; then if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition is less-than-or-equal-to $CONDT_VAL" ok "$OPTIONNAME set condition is greater-than-or-equal-to $CONDT_VAL"
reset_ok reset_ok
return return
else else
crit "$OPTIONNAME set condition is not less-than-or-equal-to $CONDT_VAL" crit "$OPTIONNAME set condition is not greater-than-or-equal-to $CONDT_VAL"
fi fi
else else
crit "$PATTERN is not present in $FILE" crit "$PATTERN is not present in $FILE"
@ -54,7 +54,7 @@ audit () {
# This function will be called if the script status is on enabled mode # This function will be called if the script status is on enabled mode
apply () { apply () {
if [ $FNRET = 0 ]; then if [ $FNRET = 0 ]; then
ok "$OPTIONNAME set condition is less-than-or-equal-to $CONDT_VAL" ok "$OPTIONNAME set condition is greater-than-or-equal-to $CONDT_VAL"
elif [ $FNRET = 1 ]; then elif [ $FNRET = 1 ]; then
crit "$PACKAGE is absent, installing it" crit "$PACKAGE is absent, installing it"
install_package $PACKAGE install_package $PACKAGE
@ -71,7 +71,7 @@ apply () {
add_option_to_password_check $FILE $KEYWORD "$OPTIONNAME=$CONDT_VAL" add_option_to_password_check $FILE $KEYWORD "$OPTIONNAME=$CONDT_VAL"
elif [ $FNRET = 5 ]; then elif [ $FNRET = 5 ]; then
reset_option_to_password_check $FILE $KEYWORD $OPTIONNAME $CONDT_VAL reset_option_to_password_check $FILE $KEYWORD $OPTIONNAME $CONDT_VAL
crit "$OPTIONNAME set is not less-than-or-equal-to $CONDT_VAL, reset it to $CONDT_VAL" crit "$OPTIONNAME set is not greater-than-or-equal-to $CONDT_VAL, reset it to $CONDT_VAL"
fi fi
} }