evolix
/
ansible-roles
22
2
Fork 2
Code Issues 61 Pull Requests 18 Releases 32 Wiki Activity

Adapte le check minifirewall pour le cas systemd
continuous-integration/drone/push Build is passing Details

This commit is contained in:
William Hirigoyen (Evolix) 2022-05-11 17:46:08 +02:00
parent 9973a62c16
commit 36ed916b96
1 changed files with 19 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
minifirewall/files/check_minifirewall
View File

@ -10,29 +10,37 @@ is_alert5_enabled() {
if test -f /etc/init.d/alert5; then
test -f /etc/rc2.d/S*alert5
else
systemctl is-enabled alert5 -q
systemctl is-active alert5 | grep -q "^active$"
fi
}
is_minifirewall_enabled() {
# TODO: instead of nested conditionals, we could loop with many possible paths
# and grep the first found, or error if none is found
if test -f /etc/rc2.d/S*alert5; then
grep -q "^/etc/init.d/minifirewall" /etc/rc2.d/S*alert5
if [ -f /etc/systemd/system/minifirewall.service ]; then
systemctl is-enabled minifirewall 2>&1 > /dev/null
else
if test -f /usr/share/scripts/alert5.sh; then
grep -q "^/etc/init.d/minifirewall" /usr/share/scripts/alert5.sh
if test -f /etc/rc2.d/S*alert5; then
grep -q "^/etc/init.d/minifirewall" /etc/rc2.d/S*alert5
else
return_critical "No Alert5 scripts has been found."
if test -f /usr/share/scripts/alert5.sh; then
grep -q "^/etc/init.d/minifirewall" /usr/share/scripts/alert5.sh
else
return_critical "No Alert5 scripts has been found."
fi
fi
fi
}
is_minifirewall_started() {
if test -x /usr/share/scripts/minifirewall_status; then
/usr/share/scripts/minifirewall_status > /dev/null
if [ -f /etc/systemd/system/minifirewall.service ]; then
systemctl is-active minifirewall 2>&1 > /dev/null
else
/sbin/iptables -L -n | grep -q -E "^(DROP\s+udp|ACCEPT\s+icmp)\s+--\s+0\.0\.0\.0\/0\s+0\.0\.0\.0\/0\s*$"
if test -x /usr/share/scripts/minifirewall_status; then
/usr/share/scripts/minifirewall_status > /dev/null
else
/sbin/iptables -L -n | grep -q -E "^(DROP\s+udp|ACCEPT\s+icmp)\s+--\s+0\.0\.0\.0\/0\s+0\.0\.0\.0\/0\s*$"
fi
fi
}
@ -61,9 +69,9 @@ main() {
fi
else
if is_minifirewall_started; then
return_warning "Minifirewall is started, but disabled in alert5."
return_warning "Minifirewall is started, but disabled in alert5 or systemd."
else
return_ok "Minifirewall is not started, but disabled in alert5."
return_ok "Minifirewall is not started, but disabled in alert5 or systemd."
fi
fi
else