From 358da207c684bb4746724a58bdf63814e81c0c0e Mon Sep 17 00:00:00 2001
From: Gregory Colpart <gcolpart@ioakim.evolix.net>
Date: Mon, 13 Jul 2009 01:44:31 +0200
Subject: [PATCH] Add a lot of tests during sunday

---
 evocheck.cf | 15 ++++++++++++
 evocheck.sh | 67 ++++++++++++++++++++++++++++++++++++++++++++++++++++-
 2 files changed, 81 insertions(+), 1 deletion(-)

diff --git a/evocheck.cf b/evocheck.cf
index 5e9948f..9d131d2 100644
--- a/evocheck.cf
+++ b/evocheck.cf
@@ -5,3 +5,18 @@ IS_ROOT_0700=1
 IS_VARTMPFS=1
 IS_USRSHARESCRIPTS=1
 IS_SERVEURBASE=1
+IS_LOGROTATECONF=1
+IS_SYSLOGCONF=1
+IS_DEBIANSECURITY=1
+IS_APTITUDEONLY=1
+IS_USRRO=1
+IS_TMPNOEXEC=1
+IS_LISTCHANGESCONF=1
+IS_DPKGWARNING=1
+IS_CUSTOMCRONTAB=1
+IS_CUSTOMSUDOERS=1
+IS_SSHPERMITROOTNO=1
+IS_SSHALLOWUSERS=1
+IS_TMOUTPROFILE=1
+IS_ALERT5BOOT=1
+IS_ALERT5MINIFW=1
diff --git a/evocheck.sh b/evocheck.sh
index 5a4be31..f46c798 100644
--- a/evocheck.sh
+++ b/evocheck.sh
@@ -2,7 +2,7 @@
 
 # EvoCheck script
 
-# version 0.1
+# version 0.2
 # Copyright 2009 Gregory Colpart <reg@evolix.fr>, Evolix <info@evolix.fr>
 
 test -f /etc/evocheck.cf && . /etc/evocheck.cf
@@ -26,3 +26,68 @@ fi
 if [ "$IS_SERVEURBASE" = 1 ]; then
     dpkg -l serveur-base | grep ^ii > /dev/null || echo 'IS_SERVEURBASE FAILED!'
 fi
+
+if [ "$IS_LOGROTATECONF" = 1 ]; then
+    test -e /etc/logrotate.d/zsyslog || echo 'IS_LOGROTATECONF FAILED!'
+fi
+
+if [ "$IS_SYSLOGCONF" = 1 ]; then
+    grep "^# Syslog for Pack Evolix serveur$" /etc/*syslog.conf > /dev/null || echo 'IS_SYSLOGCONF FAILED!'
+fi
+
+if [ "$IS_DEBIANSECURITY" = 1 ]; then
+    grep "^deb.*security" /etc/apt/sources.list  > /dev/null || echo 'IS_DEBIANSECURITY FAILED!'
+fi
+
+if [ "$IS_APTITUDEONLY" = 1 ]; then
+    test -e /usr/bin/apt-get && echo 'IS_APTITUDEONLY FAILED!'
+fi
+
+if [ "$IS_USRRO" = 1 ]; then
+    grep /usr /etc/fstab | grep ro > /dev/null || echo 'IS_USRRO FAILED!'
+fi
+
+if [ "$IS_TMPNOEXEC" = 1 ]; then
+    mount | grep "on /tmp" | grep noexec > /dev/null || echo 'IS_TMPNOEXEC FAILED!'
+fi
+
+if [ "$IS_LISTCHANGESCONF" = 1 ]; then
+    egrep "(which=both|confirm=1)" /etc/apt/listchanges.conf | wc -l | grep ^2$ > /dev/null || echo 'IS_LISTCHANGESCONF FAILED!'
+fi
+
+if [ "$IS_DPKGWARNING" = 1 ] && ( [ "$IS_USRRO" = 1 ] || [ "$IS_TMPNOEXEC" = 1 ] ); then
+    egrep -i "(Pre-Invoke ..echo Are you sure to have rw on|Post-Invoke ..echo Dont forget to mount -o remount)" /etc/apt/apt.conf | wc -l | grep ^2$ > /dev/null || echo 'IS_DPKGWARNING FAILED!'
+fi
+
+if [ "$IS_CUSTOMCRONTAB" = 1 ]; then
+    egrep "^(17 \*|25 6|47 6|52 6)" /etc/crontab | wc -l | grep ^4$ > /dev/null && echo 'IS_CUSTOMCRONTAB FAILED!'
+fi
+
+if [ "$IS_CUSTOMSUDOERS" = 1 ]; then
+    egrep "env_reset,.*umask=0077" /etc/sudoers > /dev/null || echo 'IS_CUSTOMSUDOERS FAILED!'
+fi
+
+if [ "$IS_SSHPERMITROOTNO" = 1 ]; then
+    egrep -i "PermitRoot.*no" /etc/ssh/sshd_config > /dev/null || echo 'IS_SSHPERMITROOTNO FAILED!'
+fi
+
+if [ "$IS_SSHALLOWUSERS" = 1 ]; then
+    egrep -i "AllowUsers" /etc/ssh/sshd_config > /dev/null || echo 'IS_SSHALLOWUSERS FAILED!'
+fi
+
+if [ "$IS_DISKPERF" = 1 ]; then
+    test -e /root/disk-perf.txt || echo 'IS_DISKPERF FAILED!'
+fi
+
+if [ "$IS_TMOUTPROFILE" = 1 ]; then
+    grep TMOUT= /etc/profile > /dev/null || echo 'IS_TMOUTPROFILE FAILED!'
+fi
+
+if [ "$IS_ALERT5BOOT" = 1 ]; then
+    grep ^date /etc/rc2.d/S99alert5 > /dev/null || echo 'IS_ALERT5BOOT FAILED!'
+fi
+
+if [ "$IS_ALERT5MINIFW" = 1 ]; then
+    grep ^/etc/init.d/minifirewall /etc/rc2.d/S99alert5 > /dev/null || echo 'IS_ALERT5MINIFW FAILED!'
+fi
+