diff --git a/evocheck.sh b/evocheck.sh index 5e5033d..fa9459a 100755 --- a/evocheck.sh +++ b/evocheck.sh @@ -1,129 +1,48 @@ #!/bin/bash # EvoCheck -# Script to verify compliance of a Debian/OpenBSD server -# powered by Evolix +# Script to verify compliance of a OpenBSD server powered by Evolix # Disable LANG* + export LANG=C export LANGUAGE=C # Default configuration values -IS_TMP_1777=1 -IS_ROOT_0700=1 -IS_VARTMPFS=1 -IS_USRSHARESCRIPTS=1 -IS_SERVEURBASE=1 -IS_LOGROTATECONF=1 -IS_SYSLOGCONF=1 -IS_DEBIANSECURITY=1 -IS_APTITUDEONLY=1 -IS_APTITUDE=1 -IS_APTGETBAK=1 -IS_APTICRON=0 -IS_USRRO=1 -IS_TMPNOEXEC=1 -IS_LISTCHANGESCONF=1 -IS_DPKGWARNING=1 -IS_CUSTOMCRONTAB=1 + IS_CUSTOMSUDOERS=1 -IS_SSHPERMITROOTNO=1 -IS_SSHALLOWUSERS=1 +IS_TMPNOEXEC=1 IS_TMOUTPROFILE=1 -IS_ALERT5BOOT=1 -IS_ALERT5MINIFW=1 -IS_MINIFW=1 -IS_NRPEPERMS=1 -IS_MINIFWPERMS=1 -IS_NRPEDISKS=0 -IS_NRPEPOSTFIX=1 -IS_NRPEPID=1 -IS_GRSECPROCS=1 -IS_UMASKSUDOERS=1 -IS_EVOMAINTENANCEUSERS=1 -IS_APACHEMUNIN=1 -IS_MYSQLUTILS=1 -IS_RAIDSOFT=1 -IS_AWSTATSLOGFORMAT=1 -IS_MUNINLOGROTATE=1 -IS_EVOMAINTENANCECONF=1 -#IS_METCHE=1 -IS_SQUID=1 -IS_MODDEFLATE=1 -IS_LOG2MAILRUNNING=1 -IS_LOG2MAILAPACHE=1 -IS_LOG2MAILMYSQL=1 -IS_LOG2MAILSQUID=1 -IS_BINDCHROOT=1 -IS_REPVOLATILE=1 -IS_AUTOIF=1 -IS_INTERFACESGW=1 -IS_TOOMUCHDEBIANSYSMAINT=1 -IS_USERLOGROTATE=1 -IS_MODSECURITY=1 -IS_APACHECTL=1 -IS_APACHESYMLINK=1 -IS_APACHEIPINALLOW=1 -IS_MUNINAPACHECONF=1 -IS_SAMBAPINPRIORITY=1 +IS_RAIDOK=1 +IS_EVOBACKUP=1 IS_KERNELUPTODATE=1 IS_UPTIME=1 -IS_MUNINRUNNING=1 IS_BACKUPUPTODATE=1 IS_GITPERMS=1 -IS_NOTUPGRADED=1 -IS_TUNE2FS_M5=1 -IS_PRIVKEYWOLRDREADABLE=1 -IS_EVOLINUXSUDOGROUP=1 -IS_USERINADMGROUP=1 -IS_APACHE2EVOLINUXCONF=1 -IS_BACKPORTSCONF=1 -IS_BIND9MUNIN=1 -IS_BIND9LOGROTATE=1 -IS_BROADCOMFIRMWARE=1 -IS_HARDWARERAIDTOOL=1 -IS_LOG2MAILSYSTEMDUNIT=1 -IS_LISTUPGRADE=1 -IS_MARIADBEVOLINUXCONF=1 -IS_MARIADBSYSTEMDUNIT=1 -IS_MYSQLMUNIN=1 -IS_PHPEVOLINUXCONF=1 -IS_SQUIDLOGROTATE=1 -IS_SQUIDEVOLINUXCONF=1 -IS_SQL_BACKUP=1 -IS_POSTGRES_BACKUP=1 -IS_LDAP_BACKUP=1 -IS_REDIS_BACKUP=1 -IS_ELASTIC_BACKUP=1 -IS_MONGO_BACKUP=1 -IS_MOUNT_FSTAB=1 -IS_NETWORK_INTERFACES=1 -IS_EVOBACKUP=1 -IS_DUPLICATE_FS_LABEL=1 -IS_EVOMAINTENANCE_FW=1 -IS_EVOLIX_USER=1 -IS_EVOACME_CRON=1 -IS_EVOACME_LIVELINKS=1 -IS_APACHE_CONFENABLED=1 -IS_MELTDOWN_SPECTRE=1 IS_OLD_HOME_DIR=1 - -#Proper to OpenBSD +IS_ADVBASE=1 +IS_PREEMPT=1 +IS_REBOOTMAIL=1 +IS_PFENABLED=1 +IS_PFCUSTOM=1 IS_SOFTDEP=1 IS_WHEEL=1 -IS_SUDOADMIN=1 IS_PKGMIRROR=1 IS_HISTORY=1 IS_VIM=1 IS_TTYC0SECURE=1 IS_CUSTOMSYSLOG=1 -IS_NOINETD=1 IS_SUDOMAINT=1 IS_POSTGRESQL=1 IS_NRPE=1 -IS_NRPEDAEMON=1 -IS_ALERTBOOT=1 IS_RSYNC=1 +IS_CRONPATH=1 +IS_TMP_1777=1 +IS_ROOT_0700=1 +IS_USRSHARESCRIPTS=1 +IS_SSHPERMITROOTNO=1 +IS_EVOMAINTENANCEUSERS=1 +IS_EVOMAINTENANCECONF=1 # Verbose function verbose() {