From d4d97c62885819b9d460fafc5dcdfb413d8d2cc0 Mon Sep 17 00:00:00 2001 From: Samson-W Date: Sun, 12 Apr 2020 16:58:27 +0800 Subject: [PATCH] Add bash script for deb package. --- bin/harbianaudit | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100755 bin/harbianaudit diff --git a/bin/harbianaudit b/bin/harbianaudit new file mode 100755 index 0000000..a093294 --- /dev/null +++ b/bin/harbianaudit @@ -0,0 +1,20 @@ +#!/bin/bash +# For make deb package +/opt/harbianaudit/bin/hardening.sh --init +/opt/harbianaudit/bin/hardening.sh --audit-all +/opt/harbianaudit/bin/hardening.sh --set-hardening-level 5 +sed -i 's/^status=.*/status=disabled/' /opt/harbianaudit/etc/conf.d/7.4.4_hosts_deny.cfg +sed -i 's/^status=.*/status=disabled/' /opt/harbianaudit/etc/conf.d/8.1.32_freeze_auditd_conf.cfg +sed -i 's/^status=.*/status=disabled/' /opt/harbianaudit/etc/conf.d/8.4.1_install_aide.cfg +sed -i 's/^status=.*/status=disabled/' /opt/harbianaudit/etc/conf.d/8.4.2_aide_cron.cfg +sed -i 's/^status=.*/status=disabled/' /opt/harbianaudit/etc/conf.d/9.5_pam_restrict_su.cfg +/opt/harbianaudit/bin/hardening.sh --apply +sed -i 's/^status=.*/status=enabled/' /opt/harbianaudit/etc/conf.d/8.1.32_freeze_auditd_conf.cfg +sed -i 's/^status=.*/status=enabled/' /opt/harbianaudit/etc/conf.d/8.4.1_install_aide.cfg +sed -i 's/^status=.*/status=enabled/' /opt/harbianaudit/etc/conf.d/8.4.2_aide_cron.cfg +/opt/harbianaudit/bin/hardening.sh --apply --only 8.4.1 +/opt/harbianaudit/bin/hardening.sh --apply --only 8.4.2 +/opt/harbianaudit/bin/hardening.sh --apply --only 8.1.32 +NETINTERFACE=$(ip link | grep -v "link/.*" | grep -v -w "lo" | awk -F: '{print $2}' | tr "\n" " ") +/opt/harbianaudit/bin/etc.iptables.rules.v4.sh $NETINTERFACE +/opt/harbianaudit/bin/etc.iptables.rules.v6.sh $NETINTERFACE