Commit graph

407 commits

Author SHA1 Message Date
Jérémy Lecour ffecb8a7c4 grep regular expressions must be quoted 2018-08-17 15:26:55 +02:00
Jérémy Lecour 87d98dc8d0 Evocheck detects installed packages even if they are "held" by APT. 2018-08-17 14:57:25 +02:00
Gregory Colpart 38beacc87b Improve IS_EVOMAINTENANCE_FW : lower rules number to 2
Closes #42
2018-07-27 01:53:27 +02:00
Benoît S. cd38bbaab4 IS_EVOACME_LIVELINKS: Add a condition when there is no certificates 2018-07-05 10:19:43 +02:00
Benoît S. 08b5ae0819 Fix: IS_APACHE_CONFENABLED only when apache2.conf exists. 2018-07-02 15:41:15 +02:00
Benoît S. 7ddb75fb5b Fix: IS_APACHE_CONFENABLED is only for Jessie or Stretch 2018-06-29 14:17:05 +02:00
Benoît S. 2f60997e66 Merge branch '18-is_kpti-meltdown-spectre' 2018-06-28 11:56:13 +02:00
Benoît S. 8e2741dd99 Squashed commit of the following:
commit db23167246
Author: Benoît S <bserie@evolix.fr>
Date:   Thu Jun 28 11:48:22 2018 +0200

    Add a check for kernel config gile

commit ae1ec7b2b9
Author: Benoît S <bserie@evolix.fr>
Date:   Wed Jun 27 18:01:07 2018 +0200

    Redo the jessie part

commit 62b61aabf1
Author: Benoît S <bserie@evolix.fr>
Date:   Wed Jun 27 17:49:44 2018 +0200

    Well... For Stretch use only /sys/devices/system/cpu/vulnerabilities/

commit 33b19090e6
Author: Benoît S <bserie@evolix.fr>
Date:   Wed Jun 27 17:45:11 2018 +0200

    Add check for spectre v2

commit 3451218a16
Author: Benoît S <bserie@evolix.fr>
Date:   Wed Jun 27 17:33:24 2018 +0200

    Do not use the BOOT_IMAGE trick

commit ee60e28a5a
Author: Benoît S <bserie@evolix.fr>
Date:   Wed Jun 27 17:30:18 2018 +0200

    We cannot rely on dmesg

commit 57bd4312ce
Author: Benoît.S <benpro@benpro.fr>
Date:   Thu Jan 11 14:46:46 2018 +0100

    Breakline indentation

commit d2278292cc
Author: Benoît.S <benpro@benpro.fr>
Date:   Thu Jan 11 14:45:12 2018 +0100

    Diffrent test for Jessie kernel

commit 1418d4306e
Author: Benoît.S <benpro@benpro.fr>
Date:   Thu Jan 11 11:52:43 2018 +0100

    Modified Meltdown check to handle kaiser and pti

commit 2c6d075e2a
Author: Benoît.S <benpro@benpro.fr>
Date:   Thu Jan 11 11:24:42 2018 +0100

    Add IS_MELTDOWN

    We check kaiser flags in /proc/cpuinfo and CONFIG_PAGE_TABLE_ISOLATION in
    kernel config file.
2018-06-28 11:52:31 +02:00
Benoît S. db23167246 Add a check for kernel config gile 2018-06-28 11:48:22 +02:00
Benoît S. ae1ec7b2b9 Redo the jessie part 2018-06-27 18:01:07 +02:00
Benoît S. 62b61aabf1 Well... For Stretch use only /sys/devices/system/cpu/vulnerabilities/ 2018-06-27 17:49:44 +02:00
Benoît S. 33b19090e6 Add check for spectre v2 2018-06-27 17:45:11 +02:00
Benoît S. 3451218a16 Do not use the BOOT_IMAGE trick 2018-06-27 17:33:24 +02:00
Benoît S. ee60e28a5a We cannot rely on dmesg 2018-06-27 17:30:18 +02:00
Benoît S. 5f19fbdf65 Merge branch '36-is_apache_confenabled' into 'master'
Resolve "IS_APACHE_CONFENABLED"

Closes #36

See merge request evolix/evocheck!16
2018-06-27 15:21:19 +02:00
Benoît S. d914dd9003 Implement IS_APACHE_CONFENABLED 2018-06-27 15:20:39 +02:00
Benoît S. fff5971310 Merge branch '35-is_evoacme_certbotcron' into 'master'
Resolve "IS_EVOACME_CRON"

Closes #35

See merge request evolix/evocheck!15
2018-06-13 18:10:57 +02:00
Benoît S. e5ca035516 Add a line 2018-06-13 18:10:14 +02:00
Benoît S. 6bce242efb Merge branch 'master' into 35-is_evoacme_certbotcron 2018-06-13 18:09:27 +02:00
Benoît S. 5fc12657d3 Check evoacme file cron 2018-06-13 18:03:14 +02:00
Benoît S. 3144cd2deb Merge branch '33-is_evoacme_livelinks' into 'master'
Resolve "IS_EVOACME_LIVELINKS"

Closes #33

See merge request evolix/evocheck!14
2018-06-13 17:54:03 +02:00
Benoît S. 9c5f8653fd IS_EVOACME_LIVELINKS: Only executed if evoacme installed 2018-05-28 11:49:57 +02:00
Benoît S. a6b54d99e9 Add IS_EVOACME_LIVELINKS check 2018-05-25 17:55:12 +02:00
Benoît S. fee78ee9f4 IS_DUPLICATE_FS_LABEL: Add a space for the grep pattern
Otherwise it will match PARTLABEL, we want only LABEL.
2018-04-10 15:44:59 +02:00
Benoît S. dd596c0390 Release 0.13 2018-04-10 15:30:34 +02:00
Benoît S. d0b0331d98 Merge branch '30-is_duplicate_fs_label-does-not-handle-soft-raid' into 'master'
Resolve "IS_DUPLICATE_FS_LABEL does not handle soft raid"

Closes #30

See merge request evolix/evocheck!13
2018-04-10 15:17:53 +02:00
Benoît S. 217e8b1115 Missing fi 2018-04-10 15:16:37 +02:00
Benoît S. 75e69e1440 Use blkid in place of lsblk 2018-04-10 15:14:54 +02:00
Benoît S. a2fef6cb9b Update CHANGELOG 2018-04-03 11:46:29 +02:00
Benoît S. ffbd93ea65 Merge branch 'fix_sshallowusers_for_allowgroups' into 'master'
Fix IS_SSHALLOWUSERS for AllowGroups directive

See merge request evolix/evocheck!12
2018-04-03 11:45:18 +02:00
Benoît S. 311423d295 Update CHANGELOG 2018-04-03 11:41:45 +02:00
Jérémy Lecour 9c221e2919 Use "grep -E" instead of "egrep" (deprecated) 2018-03-29 22:31:50 +02:00
Jérémy Lecour 80a07783c8 IS_SSHALLOWUSERS is looking for AllowUsers or AllowGroups 2018-03-29 22:30:31 +02:00
Jérémy Lecour c1866836aa whitespaces 2018-03-29 22:29:50 +02:00
Romain Dessort 92b18e201c Fix evoqa #3623: custom limit for IS_NOTUPGRADED
Set higher time limit for servers not being part of the regular upgrade
process:
  - if mails are sent to listupgrade-todo@
  - or if listupgrade.sh is not executed on a weekly basis.
2018-03-23 17:47:17 -04:00
Romain Dessort 76575e9fb1 evoqa #4994: check presence of evolix user 2018-03-23 17:46:11 -04:00
Benoît S. 31f45cbd6e 0.12 release 2018-03-19 16:28:06 +01:00
Benoît S. f5f788874d Merge branch '19-detect-depulicate-filesystem-labels' into 'master'
Resolve "Detect depulicate filesystem labels"

Closes #19

See merge request evolix/evocheck!9
2018-03-19 14:55:21 +01:00
Benoît S. f686aad9a5 Merge branch 'master' into '19-detect-depulicate-filesystem-labels'
# Conflicts:
#   evocheck.sh
2018-03-19 14:53:44 +01:00
Benoît S. 12d5205485 Added the test to found duplicate 2018-03-19 14:51:18 +01:00
Benoît S. 8963a85269 Move the detection of minifirewall config 2018-03-15 17:53:58 +01:00
Benoît S. e5594f3f1b IS_EVOMAINTENANCE_FW: Fix wrong variable 2018-03-15 17:51:12 +01:00
Benoît S. 0e620b42d5 Merge branch 'djakots/evocheck-master' 2018-03-15 17:49:57 +01:00
Daniel Jakots 75fbba7644 Set at the beginning $MINIFW_FILE and use it 2018-03-15 12:44:23 -04:00
Benoît S. cf32f6d98f Merge branch '29-is_evomaintenance_fw' into 'master'
Resolve "IS_EVOMAINTENANCE_FW"

Closes #29

See merge request evolix/evocheck!10
2018-03-15 16:14:33 +01:00
Benoît S. d0975f7719 First implementatio for IS_EVOMAINTENANCE_FW
We check if there is at least the 4 evomaintenance rules.
2018-03-15 16:13:20 +01:00
Benoît S. 36822bf383 WIP #19: Detect duplicate LABEL entries 2018-03-09 18:05:09 +01:00
Benoît S. b8deaf2f5d Merge branch '21-is_evobackup-disabled' into 'master'
Resolve "IS_EVOBACKUP disabled"

Closes #21

See merge request evolix/evocheck!8
2018-03-09 15:23:34 +01:00
Benoît S. 0dec7c6545 Fix #21. IS_EVOBACKUP was disabled and using bad grep pattern 2018-03-09 15:22:08 +01:00
Benoît S. 46086f263c Merge branch 'mysqlmunin-no-need-for-failed-variable' into 'master'
Well... Don't need for failed variable after all.

See merge request evolix/evocheck!7
2018-02-23 11:14:12 +01:00