evolix/evocheck
evolix/evocheck
21
2
Fork 2
Code Issues 48 Pull requests 5 Releases 37 Wiki Activity

sshpermitrootno: Use effective configuration #134

Closed
bwaegeneire wants to merge 235 commits from master into fix-129
pull from: master
merge into: evolix:fix-129
Conversation 0 Commits 235 Files changed 17 +5243 -822

235 commits

Author SHA1 Message Date
William Hirigoyen 9d011b71b0 IS_REDIS_BACKUP: full rewrite of the check to be more flexible, and also check time of dump 2023-06-21 16:58:36 +02:00
Jérémy Dubois ad9231d9a9 OpenBSD - Release 23.06 2023-06-05 11:42:10 +02:00
Mathieu Trossevin 442d1446b5
fix(check_nrpepid): bookworm should be checked like bullseye 2023-05-04 15:20:32 +02:00
Mathieu Trossevin 90c1f854cf
chore(whitespace) 2023-05-04 15:05:47 +02:00
Mathieu Trossevin 02e2d4c5c0
fix(check_minifw): iptables -L -n doesn't tranlate protocol number in bookworm 2023-05-04 15:02:28 +02:00
Jérémy Dubois 4008fb3128 OpenBSD - check_mount: removed useless echo 2023-04-25 11:46:06 +02:00
Jérémy Dubois 0dae32a135 OpenBSD - check_carpadvbase and check_carppreempt: fixed indentation 2023-04-25 11:41:51 +02:00
William Hirigoyen ae797122ad Linux - Release 23.04.01 2023-04-07 11:49:57 +02:00
William Hirigoyen 96ea77b345 Linux - Release 23.04 2023-04-07 10:55:05 +02:00
Jérémy Dubois baf26b23c4 OpenBSD - check_evobackup: zzz_evobackup is now executed with bash 2023-03-22 09:56:13 +01:00
Jérémy Dubois 8d22e5ea85 OpenBSD - Change CHANGELOG format : replace "-" for lists with "*" 2023-03-01 16:02:09 +01:00
Jérémy Dubois 011c62f984 OpenBSD - check_mountfstab and check_mount : make sure all mounted partitions are in fstab and all partitions in fstab are mounted 2023-03-01 16:01:59 +01:00
William Hirigoyen da28729577 Linux - Release 23.03.01 2023-03-01 10:06:52 +01:00
William Hirigoyen 03f9a4eb15 Linux - Release 23.03 2023-03-01 09:53:56 +01:00
William Hirigoyen e21c4e8233 IS_LXC_PHP_FPM_SERVICE_UMASK_SET: fix inverted test condition. 2023-03-01 09:44:48 +01:00
William Hirigoyen 1bb00c10bd Log output and runtime config to /var/log/evocheck.log 2023-02-17 12:54:28 +01:00
William Hirigoyen ff92e3889e Log program exit 2023-02-17 12:53:31 +01:00
William Hirigoyen 97a98c8df3 Log runtime config to /var/log/evocheck.log 2023-02-17 10:48:58 +01:00
William Hirigoyen 32d2a94b71 Log output to /var/log/evocheck.log 2023-02-17 09:52:45 +01:00
William Hirigoyen e5aa1aa323 IS_LOCALHOST_IN_POSTFIX_MYDESTINATION: set grep quiet 2023-02-14 17:31:30 +01:00
William Hirigoyen c852fb188d OpenBSD - Release 23.02 2023-02-10 14:30:45 +01:00
William Hirigoyen c621431e05 OpenBSD - Release 23.02 2023-02-10 12:31:15 +01:00
William Hirigoyen ccb6c3e4f8 Linux - Release 23.02 2023-02-10 12:28:19 +01:00
William Hirigoyen 8db26f1622 OpenBDS - Release 22.12 2023-02-10 11:42:51 +01:00
William Hirigoyen e172c27f63 Linux - Release 22.12 2023-02-10 11:37:33 +01:00
William Hirigoyen 72e4b3f045 README: Add pre-tasks for release 2023-02-10 11:35:54 +01:00
William Hirigoyen 9361e5a9cf #701Update CHANGELOG 2023-02-10 10:08:00 +01:00
William Hirigoyen 6ca6686cb3 #70141 : Corriger evocheck IS_NOTUPGRADED 2023-02-10 10:05:57 +01:00
Jérémy Dubois 8ae087b799 OpenBSD - Replaced check_sudomaint with check_doasmaint and removed check_wheel 2023-02-09 16:07:14 +01:00
Jérémy Dubois 29b546584a OpenBSD - check_pkgmirror: fix openbsd mirror 2023-01-23 16:56:10 +01:00
Jérémy Lecour f1074dea2d use bash array for tmp files to cleanup 2023-01-12 17:03:35 +01:00
Jérémy Lecour f5410be26c shellcheck 2023-01-12 16:56:18 +01:00
Jérémy Lecour 3d7b2a676f whitespace 2023-01-12 16:55:08 +01:00
Jérémy Lecour 289e303801 fix syntax error 2023-01-12 16:54:42 +01:00
Jérémy Lecour be1e303040 improve readability 2023-01-12 16:53:37 +01:00
Jérémy Lecour 653f29e2d8 grep silencieux et optimisé 2023-01-12 16:48:57 +01:00
Jérémy Lecour c8ea1a3744 typos 2023-01-12 16:48:38 +01:00
William Hirigoyen f9fdc2c4ee IS_LOCALHOST_IN_POSTFIX_MYDESTINATION: fix regex and add localhost.$mydomain to check 2022-12-15 12:13:51 +01:00
David Prevot 12681b8259 Fix filename changed in 0ff69e6a07 2022-12-15 11:53:00 +01:00
William Hirigoyen 339afdcec2 Improve commit 2540c6f312 2022-12-07 16:56:01 +01:00
William Hirigoyen 6566193ebc Update CHANGELOG 2022-12-06 11:57:42 +01:00
William Hirigoyen 2540c6f312 - Add checks IS_LOCALHOST_IN_POSTFIX_MYDESTINATION, IS_SSH_FAIL2BAN_JAIL_RENAMED, IS_NO_LXC_CONTAINER, IS_LXC_PHP_FPM_SERVICE_UMASK_SET. 
- Fix quote in IS_EVOBACKUP_INCS.
- Fix missing call to IS_PURGE_FAIL2BAN.
 2022-12-06 11:45:14 +01:00
William Hirigoyen ff7aee8ea7 IS_REDIS_BACKUP: supports news and old default Redis backup path 2022-12-01 17:31:17 +01:00
Jérémy Dubois 1a2c3e0859 check_history: escape $HOME variable 2022-11-29 10:10:41 +01:00
Jérémy Dubois f7570ec865 check_pkgmirror: use our own openbsd mirror 2022-11-28 14:52:34 +01:00
Jérémy Lecour 8fd10bfeaf fix changelog 2022-11-27 22:06:08 +01:00
Jérémy Lecour 6c1d4f63ac Linux - Release 22.11 2022-11-27 22:01:43 +01:00
Jérémy Lecour 0ff69e6a07 Split versions for Debian 7-, 8 and 9+ 2022-11-27 21:59:05 +01:00
William Hirigoyen 2640bb1b11 Update IS_REDIS_BACKUP path to standard location (used in zzz_evobackup) 2022-11-22 15:48:20 +01:00
Alexis Ben Miloud--Josselin a232eeebcc check_redis: enable multi-instance dump check 
To check multiple instances, add something like this in /etc/evocheck.cf:

    REDIS_BACKUP_PATH='/home/backup/redis/dump.rdb /home/backup/redis-instance2/dump.rdb /home/backup/redis-instance3/dump.rdb'
 2022-11-14 11:08:40 +01:00
Jérémy Lecour 58a97812c6 Check Debian Security repository from apt-cache policy output 
Instead of parsing files,we can ask apt-cache to list the enabled repository
and look for one labeled "Debian-Security" provided by Debian.
 2022-11-11 10:18:12 +01:00
Jérémy Dubois 55b08445a7 OpenBSD - Release 22.10 2022-10-14 10:36:37 +02:00
David Prevot f74f1317b4 IS_PHPMYADMINAPACHECONF: check package config 
Make sure that package configuration has not been pulled in (e.g.,
/etc/apache2/conf-available/phpmyadmin.conf could be added during an
upgrade and /etc/apache2/conf-enabled/phpmyadmin.conf during an upgrade
a few years later, and thus make phpMyAdmin available in trivial URLs.
 2022-10-04 14:03:39 +02:00
Jérémy Dubois 76dfe5fa24 OpenBSD - check_ntp: comply with ntp configuration change on EvoBSD 2022-09-30 14:12:36 +02:00
Jérémy Lecour aeb7ea2af4 Linux - Release 22.09 2022-09-14 10:53:24 +02:00
Jérémy Lecour 5765ad2a7d restore deleted MINIFW_FILE variable 2022-09-14 10:52:12 +02:00
Jérémy Dubois 8a1bd96789 Merge branch 'openbsd' 2022-08-30 10:01:51 +02:00
Jérémy Dubois 043d1e58b1 prepare linux/openbsd split 2022-08-30 09:51:10 +02:00
Jérémy Lecour 0549b39166 Linux - Release 22.08.1 2022-08-29 17:02:36 +02:00
Jérémy Lecour 1638ed1884 IS_AUTOIF: check only statically defined interfaces 2022-08-29 17:01:48 +02:00
Jérémy Lecour a87438a41b Release linux/22.08 2022-08-29 16:36:16 +02:00
Jérémy Lecour d58c0dc335 remove all BSD specific code in Linux branch 2022-08-29 16:35:08 +02:00
Jérémy Lecour cb8d8fa738 prepare linux/openbsd split 2022-08-29 16:30:01 +02:00
Jérémy Dubois 3f88645c6f check_sshpermitrootno: do not display sshd errors 2022-08-04 16:39:15 +02:00
Jérémy Dubois f2f3155fc3 check_backupuptodate: use find with --max-depth=1 to limit the number of evaluated files 2022-08-04 16:35:29 +02:00
Jérémy Dubois 271e8623b4 check_evobackup_exclude_mount : skip if --one-file-system is used, and exclude scripts without Rsync command 2022-08-04 16:21:26 +02:00
Jérémy Dubois 2e1d873fe1 Release 22.08 2022-08-04 15:28:20 +02:00
Jérémy Dubois 18c531325d Fixed check_sshpermitrootno to check real configuration 2022-08-04 15:27:04 +02:00
William Hirigoyen (Evolix) 75f8a55e9b [IS_AUTOIF] Add support for /etc/network/interface.d 2022-08-03 15:51:45 +02:00
Jérémy Lecour 6f9607bc0e Release 22.07.1 2022-07-28 14:17:37 +02:00
Jérémy Lecour 72a85bc9ef IS_SSHPERMITROOTNO: do not display sshd errors 2022-07-28 14:17:02 +02:00
Jérémy Lecour 0c16fcf311 whitespaces 2022-07-28 14:16:27 +02:00
Jérémy Lecour 3c2b870a6d Release 22.07 2022-07-28 13:37:47 +02:00
Jérémy Lecour 69937e9c2d fix shellcheck 2022-07-28 13:35:44 +02:00
Jérémy Lecour 5c5a061d59 IS_NETWORKING_SERVICE: not in cron mode 2022-07-20 13:20:02 +02:00
Alexis Ben Miloud--Josselin 52e114e45f Corriger liste dump mongodb 2022-07-04 09:58:32 +02:00
Alexis Ben Miloud--Josselin 40753385d1 [find] -maxdepth should be before -type 2022-06-23 11:37:00 +02:00
Bruno TATU 64c7cd3424 add check if fail2ban_dbpurge is installed 2022-06-20 17:44:46 +02:00
Jérémy Dubois b8496e754d Release 22.06 2022-06-16 17:22:11 +02:00
Jérémy Dubois d35d7491f1 Fixed various shellcheck violations and added a function to cleanup files at once instead of using multiple trap rm 2022-06-16 17:21:06 +02:00
Jérémy Lecour 63dd6bf41c fix find syntax 2022-06-09 07:46:04 +02:00
Jérémy Lecour 2551401baa Release 22.06.2 2022-06-09 07:39:43 +02:00
Jérémy Lecour 3d1881fe80 IS_BACKUPUPTODATE: add --max-depth=1 to limit the number of evaluated files 2022-06-09 07:38:44 +02:00
Jérémy Lecour 78486611c5 fix changelog 2022-06-06 15:03:40 +02:00
Jérémy Lecour fb7ec6bacf Release 22.06.1 2022-06-06 15:02:59 +02:00
Jérémy Lecour bec90cb8ee Merge pull request 'IS_BACKUPUPTODATE Check all files' (#138) from check_all_files_in_backup_dir into master 
Reviewed-on: #138
 2022-06-06 14:58:50 +02:00
Jérémy Lecour 5adfdcc614 Add comment to explain why looking for all files 2022-06-06 14:58:12 +02:00
Jérémy Lecour 156435220a Merge pull request 'evocheck.sh: tfix' (#140) from dprevot/evocheck:master into master 
Reviewed-on: #140
 2022-06-06 14:46:57 +02:00
Jérémy Lecour 735c960621 Merge branch 'master' into master 2022-06-06 14:46:42 +02:00
Jérémy Lecour 5f9b6901cb Merge pull request 'add support for options in sources.list' (#143) from sources.list-support-option into master 
Reviewed-on: #143
 2022-06-06 11:17:10 +02:00
Brice Waegeneire 1a08da8afa add support for options in sources.list 
Exemple for such syntax (from the manual):
deb [ arch=amd64,armel ] http://deb.debian.org/debian bullseye main
 2022-06-03 11:20:37 +02:00
Jérémy Lecour 0c461689d1 Merge pull request 'sshpermitrootno: Use effective configuration.' (#135) from fix-129 into master 
Reviewed-on: #135
 2022-06-03 11:15:45 +02:00
Brice Waegeneire e38aa5636f sshpermitrootno: Use effective configuration. 
Fixes #129.
 2022-06-03 11:03:50 +02:00
Jérémy Lecour 9ad34bd485 fix changelog 2022-06-03 09:11:54 +02:00
Jérémy Lecour 38276b0271 Release 22.06 2022-06-03 09:10:19 +02:00
Jérémy Lecour 1d75b5fbbf fix CHANGELOG 2022-06-03 09:07:46 +02:00
Jérémy Lecour 5fa58e8321 Add abenmiloud to authors 2022-06-03 09:07:46 +02:00
Alexis Ben Miloud--Josselin d834e69cf6 Add IS_NETWORKING_SERVICE check 2022-06-03 09:07:46 +02:00
Jérémy Lecour d94dad77bb IS_AUTOIF: Ignore WireGuard interfaces 2022-06-03 09:06:17 +02:00
Gregory Colpart 294c96b077 Fix Debian security repo for Bullseye, cf https://www.debian.org/releases/stable/errata 2022-05-31 11:04:35 +02:00
Bruno TATU 3935bccfab #65947 meilleure détection de dump compressé ou non pour mongo 2022-05-25 17:02:28 +02:00
William Hirigoyen (Evolix) 124efe7f38 Ajoute le cas /etc/init.d/alert5 pour IS_ALERT5MINIFW et IS_ALERT5BOOT 2022-05-25 12:22:55 +02:00
Jérémy Lecour 40687bc294 Release 22.05 2022-05-12 15:45:54 +02:00
Jérémy Lecour 7a57016da1 IS_EVOBACKUP_EXCLUDE_MOUNT: exclude scripts without Rsync command 2022-05-12 15:44:23 +02:00
Jérémy Lecour 7ff09cd973 Release 22.04.1
All checks were successful
continuous-integration/drone Build is passing
Details
2022-04-25 10:33:11 +02:00
Jérémy Lecour bef0eba539 IS_EVOBACKUP_EXCLUDE_MOUNT: fix one-file-system restriction 2022-04-25 10:32:26 +02:00
Jérémy Lecour f5b19ad656 fix various shellcheck violations 2022-04-25 10:08:49 +02:00
Jérémy Lecour e1bafc2a0a Release 22.04
Some checks failed
continuous-integration/drone Build is failing
Details
2022-04-25 09:57:09 +02:00
Jérémy Lecour 3694b364d3 IS_EVOBACKUP_EXCLUDE_MOUNT : skip if --one-file-system is used 2022-04-25 09:55:12 +02:00
David Prevot 13859f306b evocheck.sh: tfix
Some checks reported errors
continuous-integration/drone/pr Build encountered an error
Details
2022-04-19 17:47:57 +02:00
Alexis Ben Miloud--Josselin b92d81fd91 Typo in check_version' error message
Some checks reported errors
continuous-integration/drone/push Build encountered an error
Details
2022-04-19 14:22:15 +02:00
Jérémy Dubois 8d460b039d check_versions: renamed "IS_VERSIONS_CHECK" to "IS_CHECK_VERSIONS" to match function name logic, and do not run check in cron mode 2022-04-14 09:52:32 +02:00
Jérémy Dubois 6eeca5eacd check_versions: "IS_CHECK_VERSIONS" was checked but "IS_VERSIONS_CHECK" was echoed, now "IS_CHECK_VERSIONS" everywhere
Some checks reported errors
continuous-integration/drone/push Build was killed
Details
2022-04-14 09:45:39 +02:00
Jérémy Dubois 1281891363 Added check_root_user: make sure that root user does not have a password 2022-04-13 15:57:10 +02:00
Mathieu Trossevin 3c0a88074f
Update changelog
Some checks reported errors
continuous-integration/drone/push Build was killed
Details
2022-03-29 16:27:15 +02:00
Mathieu Trossevin a14c83904f
check_debiansecurity: https://security.debian.org/debian-security is valid on bullseye
Some checks reported errors
continuous-integration/drone/push Build was killed
Details 
The documentation for upgrading from buster and
https://www.debian.org/security/ use 2 different URLs for the security
repository. Consider both as valid.
 2022-03-29 16:23:20 +02:00
Jérémy Dubois dabf05b4b7 Release 22.03.1
Some checks reported errors
continuous-integration/drone/push Build was killed
Details
2022-03-22 11:01:43 +01:00
Jérémy Dubois e921420d20 check_autoif : Ignore lxcbr interfaces, new in bullseye 2022-03-22 11:01:21 +01:00
Jérémy Lecour 26be0dfe72 Release 22.03
Some checks reported errors
continuous-integration/drone/push Build was killed
Details
2022-03-15 23:23:24 +01:00
Jérémy Lecour 93f8440c92 check_versions : track minifirewall version
Some checks reported errors
continuous-integration/drone/push Build was killed
Details
2022-03-15 23:21:49 +01:00
Jérémy Dubois 3fcab1eeb3 Many improvements and bump to version 22.03. See CHANGELOG 2022-03-10 16:46:31 +01:00
Jérémy Lecour 1f81732c44 Better cleanup of temporary files + buffer for main output 2022-01-27 18:42:48 +01:00
Jérémy Lecour 3fa6c082a1 check_mysqlmunin : Complain if munin plugin mysql_commands returns an error
Some checks reported errors
continuous-integration/drone/push Build was killed
Details 
This is important to catch  incompatibilities between the munin plugin and the mysql output
 2022-01-03 09:34:30 +01:00
Alexis Ben Miloud--Josselin 43d09c3ba1 IS_BACKUPUPTODATE Check all files
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/pr Build is failing
Details 
Check time of last data modification of all files
under $backup_dir. That will include files like
$backup_dir/mysql/dump.sql.gz
 2021-11-29 18:29:01 +01:00
Ludovic Poujol dc17587423 Correct false warning of IS_APACHE2EVOLINUXCONF by ensuring apache is installed
Some checks failed
continuous-integration/drone/push Build is failing
Details
continuous-integration/drone/tag Build is failing
Details
2021-11-19 10:52:59 +01:00
Jérémy Lecour 9ac9d3d3e5 Release 21.10.4 2021-10-25 10:01:41 +02:00
Jérémy Lecour 1172169004 IS_CHECK_VERSIONS disabled in cron mode 2021-10-25 10:00:33 +02:00
Jérémy Lecour 4728ce52d0 Release 21.10.3 2021-10-22 13:57:32 +02:00
Jérémy Lecour 0185f661fa check for newer versions 2021-10-22 13:56:16 +02:00
Jérémy Lecour 7990b7924f Release 21.10.2 2021-10-22 13:43:03 +02:00
Jérémy Lecour 5cfbc705f8 Let's try the --version flag before falling back to grep for the constant 2021-10-22 13:42:18 +02:00
Jérémy Lecour efbcf53d5d Release 21.10.1 2021-10-21 17:06:00 +02:00
Jérémy Lecour 73e98d1c52 plus de fiabilité pour la récupération des versions 2021-10-20 20:46:07 +02:00
Jérémy Lecour 921e596718 whitespace 2021-10-19 21:06:31 +02:00
Jérémy Lecour 51360264a8 IS_CHECK_VERSIONS: check installed versions of Evolix programs 2021-10-19 16:27:33 +02:00
Jérémy Lecour 8fc54ea299 clean files at the end of function 2021-10-19 16:26:31 +02:00
Jérémy Lecour dd91c825df whitespace 2021-10-19 16:25:58 +02:00
Jérémy Lecour e545bb3714 IS_VERSION_MINIFW is not ready yet 2021-10-09 11:14:22 +02:00
Jérémy Lecour 564bc4b610 IS_SSHALLOWUSERS: also scan /etc/ssh/sshd_config.d 2021-10-09 11:14:22 +02:00
Jérémy Lecour c145c54201 Release 21.10 2021-10-09 11:14:22 +02:00
Jérémy Lecour 6a81702271 Squid logrotate can be daily or monthly 2021-10-08 07:28:44 +02:00
Jérémy Lecour c031c60c59 Git ignore .DS_Store 2021-10-08 07:28:13 +02:00
Jérémy Dubois 11d77659a0 Fixed check_tmoutprofile : syntax error on if/else/fi test 2021-10-07 15:01:48 +02:00
Jérémy Lecour 3c25482172 Release 21.09 2021-09-30 10:37:59 +02:00
Jérémy Lecour 0586eefc46 Improve MySQL utils configuration checks 
Debian 11 and MariaDB 10.5 might not have a /root/.my.cnf
The mytop user can be something else than debian-sys-maint
 2021-09-30 10:37:09 +02:00
Jérémy Dubois f1c63f827f Fixed check_tmoutprofile and changed version numbering 2021-09-17 17:15:19 +02:00
Jérémy Lecour 92ef1bff32 Add firewall checks for new configuration 2021-09-06 15:03:17 +02:00
Jérémy Lecour 7740e919a5 Check for bullseye security repository
All checks were successful
continuous-integration/drone/push Build is passing
Details
2021-08-18 09:25:53 +02:00
Jérémy Dubois e0202f28ff Fix IS_PREEMPT remaining 2021-07-23 16:21:32 +02:00
Jérémy Dubois 8a735ca4ca Renamed multiple CARP checks 
Renamed check_advskew, check_preempt, check_advbase and their alert to add "carp" in them
 2021-07-23 16:01:12 +02:00
Jérémy Dubois af259252be Add check_advskew and boot version 2021-07-16 14:52:49 +02:00
Jérémy Lecour b5a467b82f Release 21.07
All checks were successful
continuous-integration/drone/push Build is passing
Details
2021-07-07 15:18:39 +02:00
Jérémy Lecour 96ba05975d IS_HARDWARERAIDTOOL: match more RAID PCI cards 2021-07-07 15:15:00 +02:00
Jérémy Lecour 5ec4cd6fff meta-data and shellcheck fixes 2021-07-07 15:15:00 +02:00
Jérémy Lecour 29363bcc23 Preliminary support for Debian 11 « Bullseye » 2021-07-07 15:14:53 +02:00
Jérémy Dubois 5bf2959aac Update changelog and boost version number 2020-10-23 18:13:35 +02:00
Jérémy Dubois e21628fea7 Fix check_noatime : do not take into account commented entry in fstab 2020-10-23 17:32:15 +02:00
Jérémy Dubois 04139f3d60 Add check_openvpncronlog and update CHANGELOG 
A cron is needed to rotate logs, because a restart of OpenVPN would be needed
with the use of newsyslog to rotate logs
 2020-10-22 18:16:52 +02:00
Jérémy Dubois b6f4889ac5 Fix check_raidok : the same device could be displayed multiple times 2020-10-22 14:16:56 +02:00
Jérémy Dubois b49a1fbea5 Fix check_uptodate : properly check that syspatch exists 2020-10-22 12:12:42 +02:00
Jérémy Dubois 682cd3afaa Add check_noatime and fix check_softdep 
Add check_noatime - Check that all ffs partitions are mounted with the noatime
option

Fix check_softdep - We now check the number of ffs partitions and we compare it
to the number of softdep options currently there
 2020-10-15 10:19:31 +02:00
Jérémy Dubois 7cb6055af5 Fix check_cronpath 
Do not check PATH=XXX but only XXX
because XXX can also be in quotes
(PATH="XXX" would not be matched)
 2020-10-09 14:09:21 +02:00
Jérémy Dubois 4798873ace Add check_backupuptodate - Check that /home/backup is not older than 2 days 2020-08-04 15:08:21 +02:00
Jérémy Dubois 8eb2c5f9bc Update changelog 2020-07-27 17:01:15 +02:00
Jérémy Dubois 5bad0301d9 Add check_ntp() - Check the ntpd configuration 2020-07-27 16:59:54 +02:00
Jérémy Dubois 57d44cbf91 Removed check_postgresql - Deprecated since we now use an API 2020-07-23 11:00:34 +02:00
Jérémy Dubois 3d86996f5d Fix check_defaultroute - We need to check if the /etc/mygate file exists before comparing it - version 6.7.3 2020-07-23 10:28:34 +02:00
Jérémy Dubois 04994ecebc Add check_defaultroute function and update CHANGELOG file to 6.7.2 2020-07-22 14:27:27 +02:00
Tristan PILAT c688b0d524 Bump to version 6.7.1 2020-07-15 11:31:38 +02:00
Tristan PILAT b58ad51307 Fix check_sudomaint function - ADMIN group does not exist anymore, we now check that the wheel group has NOPASSWD for evomaintenance 2020-07-15 11:21:10 +02:00
Tristan PILAT 5eedf3ad4d Fix check_customsyslog - We have to check whether EvoBSD is present in newsyslog.conf file 2020-07-15 11:19:30 +02:00
Tristan PILAT 239c5896df We want evocheck advbase output to be uniq 2020-07-15 11:08:32 +02:00
Tristan PILAT 8d80e5bfc8 Update CHANGELOG to 6.6.2 2020-04-27 15:45:41 +02:00
Tristan PILAT 4fead89240 Add check_sync function - If a server is a Carp member we check whether the sync.sh script is present or not 2020-04-27 15:38:27 +02:00
Tristan PILAT e0716d3197 Remove check_oldhomedir - This information is irrelevant since we always keep home directories of former sysadmins 2020-04-27 15:35:28 +02:00
Tristan PILAT c436480014 Add check_pfenabled function 2020-04-27 15:30:42 +02:00
Tristan PILAT a5a034e611 Add check_uptodate function 2020-04-27 15:30:00 +02:00
Tristan PILAT 1d47e0f8d8 Raname kerneluptodate function to uptodate 2020-04-27 15:28:59 +02:00
Tristan PILAT 82a9050e00 Now use a version-naming scheme based on OpenBSD's one 2020-04-27 15:27:31 +02:00
Tristan PILAT 0b6ad08b5b Add RAID check 2020-04-22 17:53:26 +02:00
Tristan PILAT b1868829aa It might be useful to have /usr/share/scripts in the crontab PATH 2020-04-21 18:21:03 +02:00
Tristan PILAT cf975ee14b We have no use of Vagrant here 2020-04-21 18:19:33 +02:00
Tristan PILAT f019e82255 Update main contributors of this branch 2020-04-21 18:18:39 +02:00
Tristan PILAT c72a779f6c Let's create a new changelog file for this version of evocheck 2020-04-21 18:17:51 +02:00
Tristan PILAT 68823b7c91 We can't run the OpenBSD version of evocheck in DroneCI 2020-04-21 18:16:53 +02:00
Tristan PILAT 6f5b5d78d8 Create the main function and add calls to all checks
Some checks reported errors
continuous-integration/drone/push Build encountered an error
Details
2020-04-21 17:44:37 +02:00
Tristan PILAT e69e08160d We now use functions instead of if statements as in the linux version of the script 2020-04-21 17:41:32 +02:00
Tristan PILAT 425b08552a Merge --version flag to --help. Both are now showing the help message 2020-04-21 17:37:07 +02:00
Tristan PILAT fe76e40b35 Delete show_version since it is now included in show_help function 2020-04-21 17:34:19 +02:00
Tristan PILAT 9164fe2459 Amend show_help function for a more complete 2020-04-21 17:32:48 +02:00
Tristan PILAT 5ee0d20fe9 Add VERSION variable from linux version 2020-04-21 17:30:39 +02:00
Tristan PILAT 82af0db8b2 Delete default configuration values since they are now included in the main function 2020-04-21 16:59:58 +02:00
Tristan PILAT ef2b234d49 Fix a mistake in the description 2020-04-21 16:59:08 +02:00
Tristan PILAT 53015152b3 We now use is_installed function to test whether a package is installed
Some checks failed
continuous-integration/drone/push Build is failing
Details
2019-03-25 17:50:10 +01:00
Tristan PILAT 12ccfa914b Fix is_installed function to work on OpenBSD 2019-03-25 17:49:22 +01:00
Tristan PILAT 477c15df8a Fix the stat command for OpenBSD
Some checks failed
continuous-integration/drone/push Build is failing
Details
2019-03-25 17:10:22 +01:00
Tristan PILAT 1add27c67d We don't have to test whether the system is Debian or OpenBSD anymore 2019-03-25 17:09:49 +01:00
Tristan PILAT 71436c2f44 Amend all the checks to use the new logging function 2019-03-25 17:08:08 +01:00
Tristan PILAT 53c7c42324 Import some functions from the cleanup branch 2019-03-25 17:06:09 +01:00
Tristan PILAT 3a18ec50a7 Since the script is compatible with sh, let's switch to /bin/sh 2019-03-25 17:02:51 +01:00
Tristan PILAT ec7de84aa7 Update default variables
Some checks failed
continuous-integration/drone/push Build is failing
Details
2019-03-22 17:51:56 +01:00
Tristan PILAT 6f55586f6b That check is not required in our use case for OpenBSD 2019-03-22 17:51:06 +01:00
Tristan PILAT f8f0effa94 Check IS_PFCUSTOM is left to be done 2019-03-22 17:36:23 +01:00
Tristan PILAT ba43de597e Check IS_PFENABLED is left to be done 2019-03-22 17:36:01 +01:00
Tristan PILAT 94cbf9e589 Fix IS_SSHPERMITROOTNO for OpenBSD 2019-03-22 17:34:05 +01:00
Tristan PILAT 7eba87917f Add VERBOSE message for the IS_RSYNC check 2019-03-22 17:32:48 +01:00
Tristan PILAT ed93ba9f5d This is not required anymore 2019-03-22 17:32:20 +01:00
Tristan PILAT 3948702561 IS_ALERTBOOT is redondant with IS_REBOOTMAIL 2019-03-22 17:30:42 +01:00
Tristan PILAT 4f1ee5a982 Update the IS_NRPE check 2019-03-22 17:24:45 +01:00
Tristan PILAT e509ea879e inetd is now disabled by default 2019-03-22 17:22:24 +01:00
Tristan PILAT 5d5291f08d Add VERBOSE message for the IS_TTYC0SECURE check 2019-03-22 17:21:43 +01:00
Tristan PILAT e3f0b45724 Let's use the proper tools to check if a package is present 2019-03-22 17:21:08 +01:00
Tristan PILAT 6a9ba37c30 Check IS_OLD_HOME_DIR is left to be done 2019-03-22 17:18:25 +01:00
Tristan PILAT d6ef05803e Update IS_HISTORY check for OpenBSD 2019-03-22 17:17:55 +01:00
Tristan PILAT 950ea6fca6 Check if /etc/.git has the proper rights 2019-03-22 15:00:40 +01:00
Tristan PILAT 8ae3707044 Check IS_BACKUPUPTODATE is left to be done 2019-03-22 14:57:58 +01:00
Tristan PILAT 08edb86da6 Update IS_UPTIME check for OpenBSD 2019-03-22 14:57:18 +01:00
Tristan PILAT e4269d793c Check whether the system should be restarted after an update is left to be done 2019-03-22 14:56:46 +01:00
Tristan PILAT 37f3c1faee Update evobackup installation check for OpenBSD 2019-03-22 14:55:57 +01:00
Tristan PILAT 823a4f9ee0 RAID check with bioctl is left to be done 2019-03-22 14:55:09 +01:00
Tristan PILAT 954eaf5e28 Add VERBOSE message for the IS_TMOUTPROFILE check 2019-03-22 14:53:59 +01:00
Tristan PILAT de487e964c Add VERBOSE message for the IS_TMPNOEXEC check 2019-03-22 14:53:32 +01:00
Tristan PILAT 53cd10f4a8 Remove incompatible or useless checks under OpenBSD 2019-03-22 14:52:25 +01:00
Tristan PILAT 4c43e1b21a Remove Linux/OpenBSD condition test and clean up some useless evocheck tests under OpenBSD 2019-03-20 09:43:50 +01:00
Tristan 4dc94a19b0 Some characters have to be escaped
Some checks failed
continuous-integration/drone/push Build is failing
Details
2019-03-13 14:43:03 +01:00
Tristan 9832da8b03 Check whether the send of a mail after every reboot is present in the rc.local file 2019-03-13 14:37:49 +01:00
Tristan d52aa4915b Now using 'command -v' instead of 'which'
Some checks failed
continuous-integration/drone/push Build is failing
Details
2019-03-12 17:42:44 +01:00
Tristan 9a52beedbe It's more readable when using that syntax with test 2019-03-12 17:38:41 +01:00
Tristan 6f4f299006 Fix a condition mistake 2019-03-12 17:34:40 +01:00
Tristan f10df11143 Add PREEMPT detection 2019-03-12 17:33:01 +01:00
Tristan 5be38dc4f5 Update OpenBSD IS_PKGMIRROR check 2019-03-11 16:32:58 +01:00
Tristan 2815c211f4 We don't need that part anymore 2019-03-11 16:04:30 +01:00
Tristan 4c83cf1a28 Under OpenBSD, for 'wheel' group activation detection in sudoers file check if /etc/sudoers exists first 2019-03-11 16:03:16 +01:00
Tristan c90de6ec1f Under OpenBSD, fix if statement for hostname.carp file detection 2019-03-11 15:53:04 +01:00
Tristan f379f6210a Under OpenBSD, add advbase value detection 2019-03-11 15:17:23 +01:00