evolix/evocheck
evolix/evocheck
21
2
Fork 2
Code Issues 48 Pull requests 5 Releases 37 Wiki Activity
323 commits 21 branches 50 tags 1.5 MiB
Commit graph

252 commits

Author SHA1 Message Date
Jérémy Lecour 848a97883a Revert "IS_MYSQLUTILS: better check for mytop user" 
This reverts commit 604c313c90.
 2017-09-22 11:01:04 +02:00
Jérémy Lecour 604c313c90 IS_MYSQLUTILS: better check for mytop user 
The 'debian-sys-maint' user is not necessarily the best one to use with mytop.
We just need to check that the mytop config file contains a user value.

The regular expression checks that :
* there is a line beggining with "user" (not commented)
* it is a variable assignent with optional spaces
* the value is 1 or more non-whitespace characters
 2017-09-22 09:43:31 +02:00
Gregory Colpart 7314ffc631 Fix squid conffile in stretch 2017-09-14 01:18:32 +02:00
Gregory Colpart 1b843937b0 web-add.sh can be in new path 2017-09-14 01:18:32 +02:00
Gregory Colpart 80a2d4a2b6 no need of ';' avec return 0 2017-09-14 01:18:32 +02:00
Romain Dessort 69a61bcc51 Check for world readable private keys 2017-09-11 11:16:42 -04:00
Romain Dessort 9e21e22414 Check for /etc/evomaintenance.cf permissions 2017-09-11 10:11:58 -04:00
Benoît S. 461dec1a37 Missing () for the condition 2017-09-07 11:53:16 +02:00
Romain Dessort 67665c2738 Fix IS_SQUID in stretch 2017-08-31 12:41:18 -04:00
Romain Dessort d30b1dbace Fix Grégory's fix about IS_APACHEMUNIN for non-stretch machines 2017-08-31 12:34:58 -04:00
Romain Dessort 516adc25f9 Improve previous commit for mytop check 2017-08-31 12:23:21 -04:00
Romain Dessort b2fa3073c0 mytop is now part of mariadb-client 2017-08-31 11:24:02 -04:00
Gregory Colpart 2eddb6b1bf Fix IS_APACHEMUNIN check in Stretch 2017-08-22 03:42:16 +02:00
Gregory Colpart a2839d24c0 Forget -q in grep 2017-08-22 03:19:16 +02:00
Gregory Colpart cb7a0adf79 Fix vlan interfaces in Debian 9 2017-08-22 03:18:04 +02:00
Romain Dessort 18ca4d4845 TMOUT is now set in /etc/profile.d/evolinux.sh 2017-08-14 11:02:18 -04:00
Gregory Colpart fee216b218 autorize no PermitRoot option for Stretch because default is secure 2017-07-11 00:21:52 +02:00
Gregory Colpart 03db1f93ba Improve check (avoid warning) 2017-07-11 00:05:43 +02:00
Gregory Colpart 53c67a0157 For Stretch (we don't use anymore listchanges) 2017-07-10 23:41:04 +02:00
Romain Dessort 87e280895f Allow use of env= in Allow from directives. 2017-07-07 16:34:46 -04:00
Benoît S. 6869dba9fb Added a protection in case of buggy partition. 
Like I/O error.
 2017-06-01 15:38:18 +02:00
Benoît S. 5b6e30d992 Added check IS_TUNE2FS_M5. 2017-05-31 16:01:19 +02:00
Romain Dessort 81c28cd59e Increase grace for IS_NOTUPGRADED 2017-04-03 08:44:46 -04:00
Romain Dessort acca5f226e Fix #1959. IS_BACKUPUPTODATE now fails if files are older than 2 day 2017-02-03 10:44:36 -05:00
Romain Dessort 3a5fe95bed Add tun to interfaces to exclude 2017-02-03 10:42:30 -05:00
Romain Dessort ee3d82b5c6 Fix comment for IS_NOTUPGRADED check 2016-11-30 11:49:38 -05:00
Romain Dessort ec677f720d Add a check to ensure system is upgraded periodically 2016-11-30 11:39:25 -05:00
Benoît S. 43bc39a72d Implement #1957. IS_APTGETBAK 2016-08-31 15:38:38 +02:00
Romain Dessort dbe53542f0 Fix parenthesis in condition for Squeeze. 2016-06-30 08:12:27 -04:00
Gregory Colpart 0b39053882 Fix check when there is no partitions /usr /tmp in Jessie 2016-06-24 01:37:46 +02:00
Romain Dessort 16a53a5dc6 Add check for /etc/.git/ permissions. 2016-06-16 12:08:22 -04:00
Romain Dessort 251f02ac1a Fix some bugs. 2016-06-03 11:29:45 -04:00
Romain Dessort 3b59217d0d Fix #1861. More explicit check for NRPE pid. 2016-05-13 10:42:53 -04:00
Romain Dessort b7c41b9181 Fix #1864. Add quotes to avoid error in comparaison. 2016-05-13 10:34:28 -04:00
Romain Dessort 62b13e9e77 Exclude macvtap interfaces from check. 2016-05-12 19:59:26 -04:00
Romain Dessort 3c9ba79ad5 Missing quiet option for grep. 2016-05-12 19:59:01 -04:00
Romain Dessort 0325dc93e4 In case of many generated graphs, take the newest. 2016-05-12 14:21:32 -04:00
Romain Dessort b8969e6f12 IPv6 compatible regexp for BINDCHROOT. 2016-05-12 14:20:57 -04:00
Romain Dessort 5ec7be4111 Check mtime of images only with graph_strategy = cron. 2016-05-12 13:37:58 -04:00
Romain Dessort 57a68cdd1d Fix first regexp in 'IS_APACHEIPINALLOW check. 2016-05-12 13:37:25 -04:00
Romain Dessort ef262a8272 Improve/simplify regexp to support IPv6, netmasks and ignore commented lines. 2016-05-12 12:24:55 -04:00
Romain Dessort 4509f6d0e4 IS_BINDCHROOT is relevant only if bind listen to public interface. 2016-05-12 12:23:58 -04:00
Romain Dessort 89c58093f8 Replace uptime -s by /proc/uptime 
Since uptime -s does not exist on <Jessie.
 2016-05-12 11:43:16 -04:00
Romain Dessort 5c66992f03 Fix bad regexp in IS_INTERFACESGW check. 2016-05-11 14:14:23 -04:00
Benoît S. d4813d7280 Fixed condition in IS_APACHEIPINALLOW. 2016-05-11 11:25:25 +02:00
Benoît S. 97b064e426 Fixed errors in code. 2016-05-11 11:21:23 +02:00
Romain Dessort 199c3952f1 Typo in some added checks 2016-05-10 18:24:46 -04:00
Romain Dessort 40d0536aa0 Fix #1854. Add NRPEPID check for wheezy and newer. 2016-05-10 18:23:48 -04:00
Romain Dessort 452b8eea32 Fix #1675. Add check to ensure files are up-to-date in /home/backup/. 2016-05-10 18:17:02 -04:00
Romain Dessort 83c0371334 Add option to skip KERNELUPTODATE check. 2016-05-10 17:58:04 -04:00
Romain Dessort ec08f0fe19 Fix #1545. Check also generated images in Munin check. 2016-05-10 17:53:31 -04:00
Romain Dessort ec3713fbe3 Fix #1543. Add check if server is running for more than a year. 2016-05-10 17:28:09 -04:00
Romain Dessort e59adc86f9 Fix #1200. Replace who -b by uptime -s which does not depend on a TTY and locales. 2016-05-10 17:26:26 -04:00
Romain Dessort 596fad44d1 Fix #1077. Add check to ensure there is real IP addresses in Allow/Deny directives 2016-05-10 16:50:44 -04:00
Romain Dessort 411774e83b Fix #1076. Add check to ensure Apache configuration for munin is absent. 2016-05-10 16:10:32 -04:00
Romain Dessort 0ec499498b Fix #1851. Error in condition comparing md5sums. 2016-05-10 11:32:36 -04:00
Romain Dessort ff53d8bcdf Fix #1747. Bad regexp for BINDCHROOT check. 2016-05-10 11:25:42 -04:00
Romain Dessort aacaa541be refs #1848. Add LOG2MAILRUNNING check. 2016-05-10 11:10:24 -04:00
Romain Dessort f749a656fb refs #1848. Add MUNINRUNNING check. 2016-05-10 10:41:16 -04:00
Romain Dessort 52a9d14a68 Close #1590. Tolerate 127.0.0.1 or 127.0.0.0/8 in iptables rules for Squid. 2016-05-10 10:30:39 -04:00
Romain Dessort d2ebf78e2c Fix a wrong error message in APTITUDE check. 2016-05-10 10:29:50 -04:00
Romain Dessort ad26ff2d22 refs #1848. Add LOG2MAILRUNNING check. 2016-05-10 10:28:07 -04:00
Romain Dessort e92292de9f Fix #1587. Disable APTICRON check. 2016-05-10 10:23:52 -04:00
Benoît S. a2430945a7 Added tapX interfaces to the exclude list of AUTOIF 2016-04-21 15:11:25 +02:00
Romain Dessort 3b8487db7d Take only the md5sum of md5sum output in comparison. 2016-02-18 10:41:30 -05:00
Romain Dessort 15aaa75664 Fix a bug on IS_BINDCHROOT check. 
The correct package name is bind9 instead of bind!
 2016-02-02 16:30:04 -05:00
Romain Dessort cc8ef31a6d Improve IS_BINDCHROOT to check if Bind must be rechrooted (if binary differ). 2016-02-02 16:07:00 -05:00
Gregory Colpart 99bbcd5420 Fix IS_LOG2MAILSQUID : we parse now all log2mail config files 2015-11-28 17:12:20 +01:00
Gregory Colpart a1c1ad3a60 Fix #1654 : minifirewall uses now /etc/default/minifirewall then change check for jessie 2015-11-28 17:03:27 +01:00
Gregory Colpart e018379753 Add test to check if aptitude is well removed in Jessie 2015-11-28 16:53:37 +01:00
Gregory Colpart e41af65080 Fix #1587 : enable check for aptitude/apticron only in squeeze/wheezy 2015-11-28 16:46:47 +01:00
Gregory Colpart 29fae2b7ae - Apply policy to avoid test duplication 
- Minor cleaning
 2015-11-28 16:23:28 +01:00
Gregory Colpart 50e9a816bb add non physical interfaces 2015-02-04 21:01:07 +01:00
Benoît S. 724bb6b235 Add support of IPv6 for check IS_INTERFACESGW. 2014-10-09 16:41:34 +02:00
Gregory Colpart 6248aacbe1 Improve comments 2014-10-08 22:13:15 +02:00
Gregory Colpart 9b8ccd7213 Remove IS_TOOMUCHDEBIANSYSMAINT check 2014-10-08 22:11:16 +02:00
Gregory Colpart d670d62bae Fix IS_APTICRON check (confusion + remove active actions) 2014-10-08 22:01:10 +02:00
Benoît S. 1188586ec0 Fix a bug in test apache symlink. #834 2014-10-08 17:20:05 +02:00
Benoît S. 9bf216c5ec Amelioration of check apitcron. #936 2014-10-08 17:13:37 +02:00
Benoît S. 481369107c Better check for apt.conf* 2014-10-08 16:43:59 +02:00
Benoît S. 1927448149 Better check for iptables. 2014-10-08 15:46:36 +02:00
Benoît S. 32dd21ae20 Fix an issue in check modsec. 2014-10-08 15:12:51 +02:00
Benoît S. 3116eaf987 Check sudoers, grep only umask. 2014-10-08 14:54:59 +02:00
Benoît S. 68ea07c919 Revert "Merge conflicts." 
This reverts commit 534cb10a1b.

Due to 9d2844ce1a.

Conflicts:
	evocheck.sh
 2014-10-08 12:18:36 +02:00
Benoît S. e926cc3c66 Fix indent. 2014-10-08 12:10:34 +02:00
Benoît S. a2b6703b35 Better check for modsec. 2014-10-08 12:09:04 +02:00
Benoît S. 1dd9281e11 Check for apticron. #936 2014-10-08 12:08:23 +02:00
Benoît S. 84d05c2176 Add a check of gateway in /etc/network/interfaces. #910 2014-10-08 12:08:23 +02:00
Benoît S. ba6dc0fb32 Add a check for regular files in /etc/apache2/sites-enabled 2014-10-08 12:08:23 +02:00
Benoît S. d0436a02be Add a check for minifirewall. #729 2014-10-08 12:08:23 +02:00
Benoît S. 534cb10a1b Merge conflicts. 2014-10-08 12:07:41 +02:00
Gregory Colpart 9d2844ce1a Less strict with Wheezy systems upgraded from Squeeze 2014-10-06 21:45:47 +02:00
Gregory Colpart 56cff02585 Improve AUTOIF test for virtualization 2014-07-21 15:03:12 +02:00
Benoît S. b79a56710b Adapting IS_NRPEPOSTFIX check for Wheezy. 2013-06-07 14:36:37 +02:00
Benoît S. bf1a39e9e1 Adding support for Wheezy-evolinux. 2013-04-12 18:03:48 +02:00
Romain Dessort 2ae4555e63 Fix a bug in MODDEFLATE check when apache isn't installed. 
Missing parenthesis.
 2012-06-20 15:32:21 +02:00
Romain Dessort cdd468f4ab Fix a bug in MODDEFLATE check. 2012-03-27 12:07:24 +02:00
Romain Dessort 170ed656d4 IS_NRPEDISK is now deprecated. 2012-02-27 12:12:06 +01:00
Romain Dessort 428b91b731 Improve IS_KERNELUPTODATE to check if the kernel is installed. 2012-02-27 12:06:33 +01:00
Romain Dessort c00c5a9677 Fix a bug when comparing dates in IS_KERNELUPTODATE check. 2012-02-27 11:54:55 +01:00
Benoît S. 7297c07faf Annule un gros bug dans evomaintenance.cf ... 2012-01-27 12:40:57 +01:00
Benoît S. 463886de12 Ajout d'un check qui vérifie si le système nécessite un reboot ou pas. 
Pour cela il vérifie la dernière date de modification dans /boot et la
compare avec la date d'uptime.
 2012-01-25 18:05:05 +01:00
atomei 062dc51a90 mod_deflate check correction 2011-06-08 17:38:34 +02:00
Gregory Colpart 59dcf5c509 Compatibilité squid et squid3 2011-05-23 02:16:33 +02:00
Gregory Colpart 3aacf1af70 Disable IS_METCHE test 2011-05-23 02:16:33 +02:00
Gregory Colpart d69d6dacf3 We are now a bashscript :( 2011-05-23 02:16:33 +02:00
Gregory Colpart ccb1ca01f8 mod_security pour Apache est dans le paquet libapache-mod-security et non libapache2-mod-security2 2011-05-23 02:16:33 +02:00
Gregory Colpart 3ca65e1a37 Amelioration du test $IS_REPVOLATILE 2011-05-23 02:16:33 +02:00
Gregory Colpart bd781da770 Amelioration du test $IS_EVOMAINTENANCECONF 2011-05-23 02:16:32 +02:00
Gregory Colpart 0edf60489f Soucis caractere invisible incorrect (?) 2011-05-23 02:16:32 +02:00
Gregory Colpart cb1b916fce Amelioration du test $IS_RAIDSOFT 2011-05-23 02:16:32 +02:00
Gregory Colpart 219e60ca40 Correction de soucis pour le test $IS_APACHECTL 2011-05-22 22:49:58 +02:00
Gregory Colpart 3abf02b19d Amelioration du check de (r)syslog.conf 2011-05-22 22:49:58 +02:00
Gregory Colpart 125c3a588e Typo 2011-05-22 22:49:58 +02:00
Gregory Colpart 2395dec622 Utilisation "grep -q foo" au lieu de "grep foo >/dev/null" 2011-05-22 22:49:54 +02:00
Romain Dessort a71ebf147b Adaptation in alert5 check to be compatible with Debian Squeeze 2011-04-12 12:00:31 +02:00
Romain Dessort 2dddd8079e Check du pin-priority de samba, dans le cas d'un pack-samba avec les 
dépots backports.
 2010-06-14 16:13:41 +02:00
Romain Dessort e864ae60e3 Typo dans les checks userlogrotate et mod-security 2010-06-11 19:11:30 +02:00
Romain Dessort 73319a43dd Check de la syntaxe de la configuration d'Apache. 2010-06-11 19:10:47 +02:00
Romain Dessort f775b64e06 Check de mod-security pour Apache 2010-06-11 18:16:20 +02:00
Romain Dessort b7eb749612 Check de la présence de userlogrotate 2010-06-11 17:49:17 +02:00
Romain Dessort 514e9c41f5 check evobackup en place. 2010-06-10 11:16:15 +02:00
Romain Dessort 74678b0417 check du nombre de debian-sys-maint dans mysql. 2010-06-10 10:59:41 +02:00
Romain Dessort a1f96efe78 Check de la configuration des interfaces dans /e/n/i 2010-06-10 10:42:44 +02:00
Romain Dessort 30349e516d Réécriture du check raid soft pour prendre en compte plus d'options 
(notamment l'adresse mail d'alerte).
 2010-06-09 18:54:15 +02:00
Romain Dessort c764a20ad4 Ajout du check du dépot volatile 2010-06-09 18:35:19 +02:00
Romain Dessort 3d38dc670d Check si Bind est chrooté. 2010-06-08 14:37:29 +02:00
Romain Dessort 38981bc128 Oubli d'un remplacement de dpkg -l par la nouvelle fonction 
is_installed.
 2010-06-08 14:28:02 +02:00
Romain Dessort 43a2869c95 Ajout d'une fonction is_installed pour remplacer le dpkg -l |grep ^ii 
présent dans de nombreux checks.
 2010-06-08 14:24:52 +02:00
Romain Dessort 3c983f24de Check pour la conf de log2mail pour Apache, MySQL et Squid dans le cas 
d'un pack web. À voir si faire des checks plus poussés...
 2010-06-08 11:50:00 +02:00
Romain Dessort e4b268215b Check de la conf du mod_deflate. 2010-06-07 17:46:36 +02:00
Romain Dessort 25b3b4d51b Correction dans le check Squid + ajout d'une fonction is_pack_web pour 
plus de lisibilité.
 2010-06-07 15:32:44 +02:00
Romain Dessort bf2e88a849 Check de l'activation de Squid 2010-06-07 15:06:52 +02:00
Romain Dessort 5598c7a8b3 check de la présence de metche 2010-06-07 12:38:54 +02:00
Romain Dessort 8466efbf9a Ajout du check de la conf d'evomaintenance. 2010-06-07 12:33:07 +02:00
Romain Dessort 26ae073b5b - Ajout du check du paramètre LogFormat d'AwStats 
- Ajout du check de la présence d'un logrotate.d/munin*
 2010-06-07 11:24:22 +02:00
Romain Dessort c72f253775 Ajout d'un check pour le demon RAID software (mdadm) 2010-05-14 17:49:25 +02:00
Romain Dessort f38d7ce9e4 Correction d'un bug du test $IS_MYSQLUTILS 2010-05-14 17:22:42 +02:00
Gregory Colpart 17cf73bccc Add "rpc_pipefs" exclusion for IS_NRPEDISKS test 2010-01-24 02:17:15 +01:00
Gregory Colpart 46b1ec5e6c Use generic LANG* vars for tests 2009-09-14 18:58:38 +02:00
Thomas Martin c843d7cbbb Store default configuration values in evocheck.sh, 
so evocheck.cf is only used to overwrite them.
 2009-09-08 15:00:25 +02:00
Gregory Colpart 8adb80aaa5 Disable stderr if no mytop package 2009-08-15 10:03:18 +02:00
Gregory Colpart cac5013669 Correct a bug in IS_APACHEMUNIN for Etch 2009-07-23 23:11:08 +02:00
Gregory Colpart c1e9688195 Release 0.3 2009-07-23 13:40:50 +02:00
Gregory Colpart c476512766 Improve IS_EVOMAINTENANCEUSERS test 2009-07-23 13:40:36 +02:00
Gregory Colpart e4ecf247c0 Improve IS_APACHEMUNIN test 2009-07-19 02:10:46 +02:00
Gregory Colpart 1a653346b3 Disable $LANG 2009-07-19 02:01:50 +02:00
Gregory Colpart 4d94355bf2 Correct IS_APACHEMUNIN test 2009-07-18 20:35:49 +02:00
Gregory Colpart f5e82bc42b Add some tests during saturday 2009-07-18 17:21:00 +02:00
Gregory Colpart ec8c09d80d Add test to verify /etc/nagios/ perms 2009-07-13 12:38:47 +02:00