Benoît.S
b62a9f606e
We don't manage systemd-network yet
...
Added a IS_NETWORK_INTERFACES and disabling IS_AUTOIF and IS_INTERFACESGW if
IS_NETWORK_INTERFACES failing.
2018-01-22 16:55:42 +01:00
Benoît S.
f78628c1d7
Fix #15 . Add mysql_ prefix for munin plugin check
2017-12-20 10:06:39 +01:00
Benoît.S
15c323f56b
Add MOUNT_FSTAB check
2017-12-08 15:56:31 +01:00
Benoît.S
99451d54a8
Add ELASTIC_BACKUP check
2017-12-06 11:05:02 +01:00
Benoît.S
09c4e5f5b2
Add REDIS_BACKUP check
2017-12-06 10:49:52 +01:00
Benoît.S
824e0fcf55
Missing IS_LDAP_BACKUP=1
2017-12-06 10:46:08 +01:00
Benoît.S
35f0cc3c86
Add MONGO_BACKUP check
2017-12-06 10:42:16 +01:00
Benoît.S
227249f411
Add POSTGRES_BACKUP check
2017-12-06 10:28:39 +01:00
Benoît.S
6c37875d1f
Add LDAP_BACKUP check
2017-12-06 10:14:17 +01:00
Benoît.S
f527e92ce4
Only check if file exist
2017-12-06 10:06:03 +01:00
Benoît.S
340c686b03
Implement EvoQA#3332. Check for SQL backup.
2017-12-05 18:03:40 +01:00
Benoît S.
eeca2fab19
Don't match start of line
...
While inverse grepping some interface names, don't match the start of the line.
2017-11-22 11:31:24 +01:00
Benoît S.
a9cbeca7cc
Use group evolinux-sudo for Debian >=9
2017-11-14 17:35:23 +01:00
Benoît.S
85c757d9d4
Test if /etc/apache2 is present
...
Otherwise this check will always fail on non-apache server...
2017-11-10 11:06:33 +01:00
Benoît S.
31518d39b1
For IS_LOG2MAILMYSQL, better grep.
...
Because we can have /etc/log2mail/config/{default,mysql,mysql.conf} ⋅ ⋅ ⋅
2017-10-26 11:51:13 +02:00
Jérémy Lecour
0d4bd0a717
AUTOIF: on stretch, only look for UP interfaces
2017-10-04 14:11:50 +02:00
Romain Dessort
76495a204c
Fix IS_BROADCOMFIRMWARE and IS_HARDWARERAIDTOOL checks
2017-10-02 16:39:13 -04:00
Romain Dessort
f90b1d9e71
Use python instead of bc to get percentage of reserved blocks
...
bc is not installed on all servers.
2017-10-02 16:23:04 -04:00
Romain Dessort
3453423579
Add some checks for stretch
2017-10-02 15:05:24 -04:00
Jérémy Lecour
848a97883a
Revert "IS_MYSQLUTILS: better check for mytop user"
...
This reverts commit 604c313c90
.
2017-09-22 11:01:04 +02:00
Jérémy Lecour
604c313c90
IS_MYSQLUTILS: better check for mytop user
...
The 'debian-sys-maint' user is not necessarily the best one to use with mytop.
We just need to check that the mytop config file contains a user value.
The regular expression checks that :
* there is a line beggining with "user" (not commented)
* it is a variable assignent with optional spaces
* the value is 1 or more non-whitespace characters
2017-09-22 09:43:31 +02:00
Gregory Colpart
7314ffc631
Fix squid conffile in stretch
2017-09-14 01:18:32 +02:00
Gregory Colpart
1b843937b0
web-add.sh can be in new path
2017-09-14 01:18:32 +02:00
Gregory Colpart
80a2d4a2b6
no need of ';' avec return 0
2017-09-14 01:18:32 +02:00
Romain Dessort
69a61bcc51
Check for world readable private keys
2017-09-11 11:16:42 -04:00
Romain Dessort
9e21e22414
Check for /etc/evomaintenance.cf permissions
2017-09-11 10:11:58 -04:00
Benoît S.
461dec1a37
Missing () for the condition
2017-09-07 11:53:16 +02:00
Romain Dessort
67665c2738
Fix IS_SQUID in stretch
2017-08-31 12:41:18 -04:00
Romain Dessort
d30b1dbace
Fix Grégory's fix about IS_APACHEMUNIN for non-stretch machines
2017-08-31 12:34:58 -04:00
Romain Dessort
516adc25f9
Improve previous commit for mytop check
2017-08-31 12:23:21 -04:00
Romain Dessort
b2fa3073c0
mytop is now part of mariadb-client
2017-08-31 11:24:02 -04:00
Gregory Colpart
2eddb6b1bf
Fix IS_APACHEMUNIN check in Stretch
2017-08-22 03:42:16 +02:00
Gregory Colpart
a2839d24c0
Forget -q in grep
2017-08-22 03:19:16 +02:00
Gregory Colpart
cb7a0adf79
Fix vlan interfaces in Debian 9
2017-08-22 03:18:04 +02:00
Romain Dessort
18ca4d4845
TMOUT is now set in /etc/profile.d/evolinux.sh
2017-08-14 11:02:18 -04:00
Gregory Colpart
fee216b218
autorize no PermitRoot option for Stretch because default is secure
2017-07-11 00:21:52 +02:00
Gregory Colpart
03db1f93ba
Improve check (avoid warning)
2017-07-11 00:05:43 +02:00
Gregory Colpart
53c67a0157
For Stretch (we don't use anymore listchanges)
2017-07-10 23:41:04 +02:00
Romain Dessort
87e280895f
Allow use of env= in Allow from directives.
2017-07-07 16:34:46 -04:00
Benoît S.
6869dba9fb
Added a protection in case of buggy partition.
...
Like I/O error.
2017-06-01 15:38:18 +02:00
Benoît S.
5b6e30d992
Added check IS_TUNE2FS_M5.
2017-05-31 16:01:19 +02:00
Romain Dessort
81c28cd59e
Increase grace for IS_NOTUPGRADED
2017-04-03 08:44:46 -04:00
Romain Dessort
acca5f226e
Fix #1959 . IS_BACKUPUPTODATE now fails if files are older than 2 day
2017-02-03 10:44:36 -05:00
Romain Dessort
3a5fe95bed
Add tun to interfaces to exclude
2017-02-03 10:42:30 -05:00
Romain Dessort
ee3d82b5c6
Fix comment for IS_NOTUPGRADED check
2016-11-30 11:49:38 -05:00
Romain Dessort
ec677f720d
Add a check to ensure system is upgraded periodically
2016-11-30 11:39:25 -05:00
Benoît S.
43bc39a72d
Implement #1957 . IS_APTGETBAK
2016-08-31 15:38:38 +02:00
Romain Dessort
dbe53542f0
Fix parenthesis in condition for Squeeze.
2016-06-30 08:12:27 -04:00
Gregory Colpart
0b39053882
Fix check when there is no partitions /usr /tmp in Jessie
2016-06-24 01:37:46 +02:00
Romain Dessort
16a53a5dc6
Add check for /etc/.git/ permissions.
2016-06-16 12:08:22 -04:00
Romain Dessort
251f02ac1a
Fix some bugs.
2016-06-03 11:29:45 -04:00
Romain Dessort
3b59217d0d
Fix #1861 . More explicit check for NRPE pid.
2016-05-13 10:42:53 -04:00
Romain Dessort
b7c41b9181
Fix #1864 . Add quotes to avoid error in comparaison.
2016-05-13 10:34:28 -04:00
Romain Dessort
62b13e9e77
Exclude macvtap interfaces from check.
2016-05-12 19:59:26 -04:00
Romain Dessort
3c9ba79ad5
Missing quiet option for grep.
2016-05-12 19:59:01 -04:00
Romain Dessort
0325dc93e4
In case of many generated graphs, take the newest.
2016-05-12 14:21:32 -04:00
Romain Dessort
b8969e6f12
IPv6 compatible regexp for BINDCHROOT.
2016-05-12 14:20:57 -04:00
Romain Dessort
5ec7be4111
Check mtime of images only with graph_strategy = cron.
2016-05-12 13:37:58 -04:00
Romain Dessort
57a68cdd1d
Fix first regexp in 'IS_APACHEIPINALLOW check.
2016-05-12 13:37:25 -04:00
Romain Dessort
ef262a8272
Improve/simplify regexp to support IPv6, netmasks and ignore commented lines.
2016-05-12 12:24:55 -04:00
Romain Dessort
4509f6d0e4
IS_BINDCHROOT is relevant only if bind listen to public interface.
2016-05-12 12:23:58 -04:00
Romain Dessort
89c58093f8
Replace uptime -s by /proc/uptime
...
Since uptime -s does not exist on <Jessie.
2016-05-12 11:43:16 -04:00
Romain Dessort
5c66992f03
Fix bad regexp in IS_INTERFACESGW check.
2016-05-11 14:14:23 -04:00
Benoît S.
d4813d7280
Fixed condition in IS_APACHEIPINALLOW.
2016-05-11 11:25:25 +02:00
Benoît S.
97b064e426
Fixed errors in code.
2016-05-11 11:21:23 +02:00
Romain Dessort
199c3952f1
Typo in some added checks
2016-05-10 18:24:46 -04:00
Romain Dessort
40d0536aa0
Fix #1854 . Add NRPEPID check for wheezy and newer.
2016-05-10 18:23:48 -04:00
Romain Dessort
452b8eea32
Fix #1675 . Add check to ensure files are up-to-date in /home/backup/.
2016-05-10 18:17:02 -04:00
Romain Dessort
83c0371334
Add option to skip KERNELUPTODATE check.
2016-05-10 17:58:04 -04:00
Romain Dessort
ec08f0fe19
Fix #1545 . Check also generated images in Munin check.
2016-05-10 17:53:31 -04:00
Romain Dessort
ec3713fbe3
Fix #1543 . Add check if server is running for more than a year.
2016-05-10 17:28:09 -04:00
Romain Dessort
e59adc86f9
Fix #1200 . Replace who -b by uptime -s which does not depend on a TTY and locales.
2016-05-10 17:26:26 -04:00
Romain Dessort
596fad44d1
Fix #1077 . Add check to ensure there is real IP addresses in Allow/Deny directives
2016-05-10 16:50:44 -04:00
Romain Dessort
411774e83b
Fix #1076 . Add check to ensure Apache configuration for munin is absent.
2016-05-10 16:10:32 -04:00
Romain Dessort
0ec499498b
Fix #1851 . Error in condition comparing md5sums.
2016-05-10 11:32:36 -04:00
Romain Dessort
ff53d8bcdf
Fix #1747 . Bad regexp for BINDCHROOT check.
2016-05-10 11:25:42 -04:00
Romain Dessort
aacaa541be
refs #1848 . Add LOG2MAILRUNNING check.
2016-05-10 11:10:24 -04:00
Romain Dessort
f749a656fb
refs #1848 . Add MUNINRUNNING check.
2016-05-10 10:41:16 -04:00
Romain Dessort
52a9d14a68
Close #1590 . Tolerate 127.0.0.1 or 127.0.0.0/8 in iptables rules for Squid.
2016-05-10 10:30:39 -04:00
Romain Dessort
d2ebf78e2c
Fix a wrong error message in APTITUDE check.
2016-05-10 10:29:50 -04:00
Romain Dessort
ad26ff2d22
refs #1848 . Add LOG2MAILRUNNING check.
2016-05-10 10:28:07 -04:00
Romain Dessort
e92292de9f
Fix #1587 . Disable APTICRON check.
2016-05-10 10:23:52 -04:00
Benoît S.
a2430945a7
Added tapX interfaces to the exclude list of AUTOIF
2016-04-21 15:11:25 +02:00
Romain Dessort
3b8487db7d
Take only the md5sum of md5sum output in comparison.
2016-02-18 10:41:30 -05:00
Romain Dessort
15aaa75664
Fix a bug on IS_BINDCHROOT check.
...
The correct package name is bind9 instead of bind!
2016-02-02 16:30:04 -05:00
Romain Dessort
cc8ef31a6d
Improve IS_BINDCHROOT to check if Bind must be rechrooted (if binary differ).
2016-02-02 16:07:00 -05:00
Gregory Colpart
99bbcd5420
Fix IS_LOG2MAILSQUID : we parse now all log2mail config files
2015-11-28 17:12:20 +01:00
Gregory Colpart
a1c1ad3a60
Fix #1654 : minifirewall uses now /etc/default/minifirewall then change check for jessie
2015-11-28 17:03:27 +01:00
Gregory Colpart
e018379753
Add test to check if aptitude is well removed in Jessie
2015-11-28 16:53:37 +01:00
Gregory Colpart
e41af65080
Fix #1587 : enable check for aptitude/apticron only in squeeze/wheezy
2015-11-28 16:46:47 +01:00
Gregory Colpart
29fae2b7ae
- Apply policy to avoid test duplication
...
- Minor cleaning
2015-11-28 16:23:28 +01:00
Gregory Colpart
50e9a816bb
add non physical interfaces
2015-02-04 21:01:07 +01:00
Benoît S.
724bb6b235
Add support of IPv6 for check IS_INTERFACESGW.
2014-10-09 16:41:34 +02:00
Gregory Colpart
6248aacbe1
Improve comments
2014-10-08 22:13:15 +02:00
Gregory Colpart
9b8ccd7213
Remove IS_TOOMUCHDEBIANSYSMAINT check
2014-10-08 22:11:16 +02:00
Gregory Colpart
d670d62bae
Fix IS_APTICRON check (confusion + remove active actions)
2014-10-08 22:01:10 +02:00
Benoît S.
1188586ec0
Fix a bug in test apache symlink. #834
2014-10-08 17:20:05 +02:00
Benoît S.
9bf216c5ec
Amelioration of check apitcron. #936
2014-10-08 17:13:37 +02:00
Benoît S.
481369107c
Better check for apt.conf*
2014-10-08 16:43:59 +02:00
Benoît S.
1927448149
Better check for iptables.
2014-10-08 15:46:36 +02:00
Benoît S.
32dd21ae20
Fix an issue in check modsec.
2014-10-08 15:12:51 +02:00
Benoît S.
3116eaf987
Check sudoers, grep only umask.
2014-10-08 14:54:59 +02:00
Benoît S.
68ea07c919
Revert "Merge conflicts."
...
This reverts commit 534cb10a1b
.
Due to 9d2844ce1a
.
Conflicts:
evocheck.sh
2014-10-08 12:18:36 +02:00
Benoît S.
e926cc3c66
Fix indent.
2014-10-08 12:10:34 +02:00
Benoît S.
a2b6703b35
Better check for modsec.
2014-10-08 12:09:04 +02:00
Benoît S.
1dd9281e11
Check for apticron. #936
2014-10-08 12:08:23 +02:00
Benoît S.
84d05c2176
Add a check of gateway in /etc/network/interfaces. #910
2014-10-08 12:08:23 +02:00
Benoît S.
ba6dc0fb32
Add a check for regular files in /etc/apache2/sites-enabled
2014-10-08 12:08:23 +02:00
Benoît S.
d0436a02be
Add a check for minifirewall. #729
2014-10-08 12:08:23 +02:00
Benoît S.
534cb10a1b
Merge conflicts.
2014-10-08 12:07:41 +02:00
Gregory Colpart
9d2844ce1a
Less strict with Wheezy systems upgraded from Squeeze
2014-10-06 21:45:47 +02:00
Gregory Colpart
56cff02585
Improve AUTOIF test for virtualization
2014-07-21 15:03:12 +02:00
Benoît S.
b79a56710b
Adapting IS_NRPEPOSTFIX check for Wheezy.
2013-06-07 14:36:37 +02:00
Benoît S.
bf1a39e9e1
Adding support for Wheezy-evolinux.
2013-04-12 18:03:48 +02:00
Romain Dessort
2ae4555e63
Fix a bug in MODDEFLATE check when apache isn't installed.
...
Missing parenthesis.
2012-06-20 15:32:21 +02:00
Romain Dessort
cdd468f4ab
Fix a bug in MODDEFLATE check.
2012-03-27 12:07:24 +02:00
Romain Dessort
170ed656d4
IS_NRPEDISK is now deprecated.
2012-02-27 12:12:06 +01:00
Romain Dessort
428b91b731
Improve IS_KERNELUPTODATE to check if the kernel is installed.
2012-02-27 12:06:33 +01:00
Romain Dessort
c00c5a9677
Fix a bug when comparing dates in IS_KERNELUPTODATE check.
2012-02-27 11:54:55 +01:00
Benoît S.
7297c07faf
Annule un gros bug dans evomaintenance.cf ...
2012-01-27 12:40:57 +01:00
Benoît S.
463886de12
Ajout d'un check qui vérifie si le système nécessite un reboot ou pas.
...
Pour cela il vérifie la dernière date de modification dans /boot et la
compare avec la date d'uptime.
2012-01-25 18:05:05 +01:00
atomei
062dc51a90
mod_deflate check correction
2011-06-08 17:38:34 +02:00
Gregory Colpart
59dcf5c509
Compatibilité squid et squid3
2011-05-23 02:16:33 +02:00
Gregory Colpart
3aacf1af70
Disable IS_METCHE test
2011-05-23 02:16:33 +02:00
Gregory Colpart
d69d6dacf3
We are now a bashscript :(
2011-05-23 02:16:33 +02:00
Gregory Colpart
ccb1ca01f8
mod_security pour Apache est dans le paquet libapache-mod-security et non libapache2-mod-security2
2011-05-23 02:16:33 +02:00
Gregory Colpart
3ca65e1a37
Amelioration du test $IS_REPVOLATILE
2011-05-23 02:16:33 +02:00
Gregory Colpart
bd781da770
Amelioration du test $IS_EVOMAINTENANCECONF
2011-05-23 02:16:32 +02:00
Gregory Colpart
0edf60489f
Soucis caractere invisible incorrect (?)
2011-05-23 02:16:32 +02:00
Gregory Colpart
cb1b916fce
Amelioration du test $IS_RAIDSOFT
2011-05-23 02:16:32 +02:00
Gregory Colpart
219e60ca40
Correction de soucis pour le test $IS_APACHECTL
2011-05-22 22:49:58 +02:00
Gregory Colpart
3abf02b19d
Amelioration du check de (r)syslog.conf
2011-05-22 22:49:58 +02:00
Gregory Colpart
125c3a588e
Typo
2011-05-22 22:49:58 +02:00
Gregory Colpart
2395dec622
Utilisation "grep -q foo" au lieu de "grep foo >/dev/null"
2011-05-22 22:49:54 +02:00
Romain Dessort
a71ebf147b
Adaptation in alert5 check to be compatible with Debian Squeeze
2011-04-12 12:00:31 +02:00
Romain Dessort
2dddd8079e
Check du pin-priority de samba, dans le cas d'un pack-samba avec les
...
dépots backports.
2010-06-14 16:13:41 +02:00
Romain Dessort
e864ae60e3
Typo dans les checks userlogrotate et mod-security
2010-06-11 19:11:30 +02:00
Romain Dessort
73319a43dd
Check de la syntaxe de la configuration d'Apache.
2010-06-11 19:10:47 +02:00
Romain Dessort
f775b64e06
Check de mod-security pour Apache
2010-06-11 18:16:20 +02:00
Romain Dessort
b7eb749612
Check de la présence de userlogrotate
2010-06-11 17:49:17 +02:00
Romain Dessort
514e9c41f5
check evobackup en place.
2010-06-10 11:16:15 +02:00
Romain Dessort
74678b0417
check du nombre de debian-sys-maint dans mysql.
2010-06-10 10:59:41 +02:00
Romain Dessort
a1f96efe78
Check de la configuration des interfaces dans /e/n/i
2010-06-10 10:42:44 +02:00
Romain Dessort
30349e516d
Réécriture du check raid soft pour prendre en compte plus d'options
...
(notamment l'adresse mail d'alerte).
2010-06-09 18:54:15 +02:00
Romain Dessort
c764a20ad4
Ajout du check du dépot volatile
2010-06-09 18:35:19 +02:00
Romain Dessort
3d38dc670d
Check si Bind est chrooté.
2010-06-08 14:37:29 +02:00
Romain Dessort
38981bc128
Oubli d'un remplacement de dpkg -l par la nouvelle fonction
...
is_installed.
2010-06-08 14:28:02 +02:00
Romain Dessort
43a2869c95
Ajout d'une fonction is_installed pour remplacer le dpkg -l |grep ^ii
...
présent dans de nombreux checks.
2010-06-08 14:24:52 +02:00
Romain Dessort
3c983f24de
Check pour la conf de log2mail pour Apache, MySQL et Squid dans le cas
...
d'un pack web. À voir si faire des checks plus poussés...
2010-06-08 11:50:00 +02:00
Romain Dessort
e4b268215b
Check de la conf du mod_deflate.
2010-06-07 17:46:36 +02:00
Romain Dessort
25b3b4d51b
Correction dans le check Squid + ajout d'une fonction is_pack_web pour
...
plus de lisibilité.
2010-06-07 15:32:44 +02:00
Romain Dessort
bf2e88a849
Check de l'activation de Squid
2010-06-07 15:06:52 +02:00
Romain Dessort
5598c7a8b3
check de la présence de metche
2010-06-07 12:38:54 +02:00
Romain Dessort
8466efbf9a
Ajout du check de la conf d'evomaintenance.
2010-06-07 12:33:07 +02:00
Romain Dessort
26ae073b5b
- Ajout du check du paramètre LogFormat d'AwStats
...
- Ajout du check de la présence d'un logrotate.d/munin*
2010-06-07 11:24:22 +02:00
Romain Dessort
c72f253775
Ajout d'un check pour le demon RAID software (mdadm)
2010-05-14 17:49:25 +02:00
Romain Dessort
f38d7ce9e4
Correction d'un bug du test $IS_MYSQLUTILS
2010-05-14 17:22:42 +02:00
Gregory Colpart
17cf73bccc
Add "rpc_pipefs" exclusion for IS_NRPEDISKS test
2010-01-24 02:17:15 +01:00
Gregory Colpart
46b1ec5e6c
Use generic LANG* vars for tests
2009-09-14 18:58:38 +02:00
Thomas Martin
c843d7cbbb
Store default configuration values in evocheck.sh,
...
so evocheck.cf is only used to overwrite them.
2009-09-08 15:00:25 +02:00
Gregory Colpart
8adb80aaa5
Disable stderr if no mytop package
2009-08-15 10:03:18 +02:00
Gregory Colpart
cac5013669
Correct a bug in IS_APACHEMUNIN for Etch
2009-07-23 23:11:08 +02:00
Gregory Colpart
c1e9688195
Release 0.3
2009-07-23 13:40:50 +02:00
Gregory Colpart
c476512766
Improve IS_EVOMAINTENANCEUSERS test
2009-07-23 13:40:36 +02:00
Gregory Colpart
e4ecf247c0
Improve IS_APACHEMUNIN test
2009-07-19 02:10:46 +02:00
Gregory Colpart
1a653346b3
Disable $LANG
2009-07-19 02:01:50 +02:00
Gregory Colpart
4d94355bf2
Correct IS_APACHEMUNIN test
2009-07-18 20:35:49 +02:00
Gregory Colpart
f5e82bc42b
Add some tests during saturday
2009-07-18 17:21:00 +02:00
Gregory Colpart
ec8c09d80d
Add test to verify /etc/nagios/ perms
2009-07-13 12:38:47 +02:00
Gregory Colpart
358da207c6
Add a lot of tests during sunday
2009-07-13 01:44:31 +02:00
Gregory Colpart
3da0598470
Initial commit with basic files
2009-07-05 01:58:11 +02:00