tyler.durden
/
harbian-audit
mirror of https://github.com/hardenedlinux/harbian-audit.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Modify audit and apply methods for redhat/CentOS to 10.1.9 10.1.10

This commit is contained in:
Samson-W 2020-01-15 20:13:54 +08:00
parent 0cf45160f4
commit cd82d799fc
2 changed files with 8 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
bin/hardening/10.1.10_set_maxlogins_for_all_accounts.sh
View File

@ -1,7 +1,7 @@
#!/bin/bash #!/bin/bash
# #
# harbian audit 7/8/9 Hardening # harbian audit debian 7/8/9 or CentOS8 Hardening
# #
# #
@ -56,7 +56,7 @@ audit () {
# This function will be called if the script status is on enabled mode # This function will be called if the script status is on enabled mode
apply () { apply () {
if [ $FNRET = 0 ]; then if [ $FNRET = 0 ]; then
ok "$PACKAGE is installed" ok "$OPTIONS value is correct in $FILE"
elif [ $FNRET = 1 ]; then elif [ $FNRET = 1 ]; then
warn "$PACKAGE is not installed, need install." warn "$PACKAGE is not installed, need install."
install_package $PACKAGE install_package $PACKAGE
@ -73,7 +73,11 @@ apply () {
# This function will check config parameters required # This function will check config parameters required
check_config() { check_config() {
: if [ $OS_RELEASE -eq 2 ]; then
PACKAGE='pam'
else
:
fi
} }
# Source Root Dir Parameter # Source Root Dir Parameter

16
bin/hardening/10.1.9_set_create_home_bool.sh
View File

@ -1,7 +1,7 @@
#!/bin/bash #!/bin/bash
# #
# harbian audit 7/8/9 Hardening # harbian audit debian 7/8/9 or CentOS8 Hardening
# #
# #
@ -14,17 +14,11 @@ set -u # One variable unset, it's over
HARDENING_LEVEL=3 HARDENING_LEVEL=3
PACKAGE='login'
OPTIONS='CREATE_HOME=yes' OPTIONS='CREATE_HOME=yes'
FILE='/etc/login.defs' FILE='/etc/login.defs'
# This function will be called if the script status is on enabled / audit mode # This function will be called if the script status is on enabled / audit mode
audit () { audit () {
is_pkg_installed $PACKAGE
if [ $FNRET != 0 ]; then
crit "$PACKAGE is not installed!"
else
ok "$PACKAGE is installed"
for SSH_OPTION in $OPTIONS; do for SSH_OPTION in $OPTIONS; do
SSH_PARAM=$(echo $SSH_OPTION | cut -d= -f 1) SSH_PARAM=$(echo $SSH_OPTION | cut -d= -f 1)
SSH_VALUE=$(echo $SSH_OPTION | cut -d= -f 2) SSH_VALUE=$(echo $SSH_OPTION | cut -d= -f 2)
@ -36,18 +30,10 @@ audit () {
crit "$PATTERN is not present in $FILE" crit "$PATTERN is not present in $FILE"
fi fi
done done
fi
} }
# This function will be called if the script status is on enabled mode # This function will be called if the script status is on enabled mode
apply () { apply () {
is_pkg_installed $PACKAGE
if [ $FNRET = 0 ]; then
ok "$PACKAGE is installed"
else
crit "$PACKAGE is absent, installing it"
install_package $PACKAGE
fi
for SSH_OPTION in $OPTIONS; do for SSH_OPTION in $OPTIONS; do
SSH_PARAM=$(echo $SSH_OPTION | cut -d= -f 1) SSH_PARAM=$(echo $SSH_OPTION | cut -d= -f 1)
SSH_VALUE=$(echo $SSH_OPTION | cut -d= -f 2) SSH_VALUE=$(echo $SSH_OPTION | cut -d= -f 2)