evolix/ansible-roles
22
2
Fork 2
Code Issues 61 Pull requests 18 Releases 33 Wiki Activity

evocheck: upstream version 19.11.1
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse source
This commit is contained in:
Jérémy Lecour 2019-11-06 07:50:45 +01:00
parent 049d36ab8f
commit 767760cbe0
2 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
CHANGELOG.md
View file

@ -36,7 +36,7 @@ The **patch** part changes incrementally at each release.
### Changed ### Changed
* elasticsearch: listen on local interface only by default * elasticsearch: listen on local interface only by default
* evocheck: upstream version 19.11 * evocheck: upstream version 19.11.1
* evocheck: cron jobs execute in verbose * evocheck: cron jobs execute in verbose
* evolinux-base: use "evolinux_internal_group" for SSH authentication * evolinux-base: use "evolinux_internal_group" for SSH authentication
* evomaintenance: Turn on API by default (instead of DB) * evomaintenance: Turn on API by default (instead of DB)

8
evocheck/files/evocheck.sh
View file

@ -249,15 +249,15 @@ check_apticron() {
fi fi
} }
check_usrro() { check_usrro() {
grep /usr /etc/fstab | grep -q ro || failed "IS_USRRO" "missing ro directive on fstab for /usr" grep /usr /etc/fstab | grep -qE "\bro\b" || failed "IS_USRRO" "missing ro directive on fstab for /usr"
} }
check_tmpnoexec() { check_tmpnoexec() {
FINDMNT_BIN=$(command -v findmnt) FINDMNT_BIN=$(command -v findmnt)
if [ -x ${FINDMNT_BIN} ]; then if [ -x ${FINDMNT_BIN} ]; then
options=$(${FINDMNT_BIN} --noheadings --first-only --output OPTIONS /tmp) options=$(${FINDMNT_BIN} --noheadings --first-only --output OPTIONS /tmp)
grep -qE "\bnoexec\b" ${options} || failed "IS_TMPNOEXEC" "/tmp is not mounted with 'noexec'" echo "${options}" | grep -qE "\bnoexec\b" || failed "IS_TMPNOEXEC" "/tmp is not mounted with 'noexec'"
else else
mount | grep "on /tmp" | grep -q noexec || failed "IS_TMPNOEXEC" "/tmp is not mounted with 'noexec' (WARNING: findmnt(8) is not found)" mount | grep "on /tmp" | grep -qE "\bnoexec\b" || failed "IS_TMPNOEXEC" "/tmp is not mounted with 'noexec' (WARNING: findmnt(8) is not found)"
fi fi
} }
check_mountfstab() { check_mountfstab() {
@ -1458,7 +1458,7 @@ readonly PROGDIR=$(realpath -m "$(dirname "$0")")
# shellcheck disable=2124 # shellcheck disable=2124
readonly ARGS=$@ readonly ARGS=$@
readonly VERSION="19.11" readonly VERSION="19.11.1"
# Disable LANG* # Disable LANG*
export LANG=C export LANG=C