Benoît S.
48561592ee
Replace and condition by or condition
...
Check install_date or last_upgrade, because if you never upgraded you will
never match the limit
2019-01-16 14:12:12 +01:00
Benoît S.
288d26366a
Implement #25
...
We loop through directories in /home and see ig the owner has a resolvable ID.
2019-01-16 13:47:49 +01:00
Victor LABORIE
0f95043daf
Add testing and licence documentation to README.md
2019-01-14 18:04:36 +01:00
Victor Laborie
e6e0b8c216
Merge branch 'license-readme-conformity' of evolix/evocheck into master
2018-12-26 15:28:14 +01:00
Patrick Marchand
bf19fc1064
Added a small description to the README.md
2018-12-24 11:30:00 -05:00
Victor LABORIE
96336afca5
Detect comment for IS_BACKPORTSCONF ( Fix #28 )
2018-12-21 15:52:17 +01:00
Victor LABORIE
db1d4e4aae
Add a break to IS_PRIVKEYWOLRDREADABLE ( Fix #19 )
2018-12-21 15:29:20 +01:00
Victor LABORIE
5dfc941172
Add a Vagrantfile for testing
2018-12-21 15:23:17 +01:00
Victor LABORIE
7179cfefc8
Remove "No such file or directory" error on IS_NOTUPGRADED check
2018-12-21 15:22:30 +01:00
Benoît S.
7ea1bc444d
Add LICENSE: GNU GENERAL PUBLIC LICENSE v3
2018-12-20 11:14:34 +01:00
Victor LABORIE
22d835b733
Follow symlink for IS_PRIVKEYWOLRDREADABLE check
2018-12-19 16:18:50 +01:00
Benoît S.
956877442a
WIP: Removes /var/log/evolinux/00_prepare_system.log
...
TODO: Workaround in special case when the server was never installed
TODO: be sure that the final check with and logic is OK.
2018-09-14 15:52:08 +02:00
Jérémy Lecour
ffecb8a7c4
grep regular expressions must be quoted
2018-08-17 15:26:55 +02:00
Jérémy Lecour
87d98dc8d0
Evocheck detects installed packages even if they are "held" by APT.
2018-08-17 14:57:25 +02:00
Gregory Colpart
38beacc87b
Improve IS_EVOMAINTENANCE_FW : lower rules number to 2
...
Closes #42
2018-07-27 01:53:27 +02:00
Benoît S.
cd38bbaab4
IS_EVOACME_LIVELINKS: Add a condition when there is no certificates
2018-07-05 10:19:43 +02:00
Benoît S.
08b5ae0819
Fix: IS_APACHE_CONFENABLED only when apache2.conf exists.
2018-07-02 15:41:15 +02:00
Benoît S.
7ddb75fb5b
Fix: IS_APACHE_CONFENABLED is only for Jessie or Stretch
2018-06-29 14:17:05 +02:00
Benoît S.
2f60997e66
Merge branch '18-is_kpti-meltdown-spectre'
2018-06-28 11:56:13 +02:00
Benoît S.
8e2741dd99
Squashed commit of the following:
...
commit db23167246
Author: Benoît S <bserie@evolix.fr>
Date: Thu Jun 28 11:48:22 2018 +0200
Add a check for kernel config gile
commit ae1ec7b2b9
Author: Benoît S <bserie@evolix.fr>
Date: Wed Jun 27 18:01:07 2018 +0200
Redo the jessie part
commit 62b61aabf1
Author: Benoît S <bserie@evolix.fr>
Date: Wed Jun 27 17:49:44 2018 +0200
Well... For Stretch use only /sys/devices/system/cpu/vulnerabilities/
commit 33b19090e6
Author: Benoît S <bserie@evolix.fr>
Date: Wed Jun 27 17:45:11 2018 +0200
Add check for spectre v2
commit 3451218a16
Author: Benoît S <bserie@evolix.fr>
Date: Wed Jun 27 17:33:24 2018 +0200
Do not use the BOOT_IMAGE trick
commit ee60e28a5a
Author: Benoît S <bserie@evolix.fr>
Date: Wed Jun 27 17:30:18 2018 +0200
We cannot rely on dmesg
commit 57bd4312ce
Author: Benoît.S <benpro@benpro.fr>
Date: Thu Jan 11 14:46:46 2018 +0100
Breakline indentation
commit d2278292cc
Author: Benoît.S <benpro@benpro.fr>
Date: Thu Jan 11 14:45:12 2018 +0100
Diffrent test for Jessie kernel
commit 1418d4306e
Author: Benoît.S <benpro@benpro.fr>
Date: Thu Jan 11 11:52:43 2018 +0100
Modified Meltdown check to handle kaiser and pti
commit 2c6d075e2a
Author: Benoît.S <benpro@benpro.fr>
Date: Thu Jan 11 11:24:42 2018 +0100
Add IS_MELTDOWN
We check kaiser flags in /proc/cpuinfo and CONFIG_PAGE_TABLE_ISOLATION in
kernel config file.
2018-06-28 11:52:31 +02:00
Benoît S.
db23167246
Add a check for kernel config gile
2018-06-28 11:48:22 +02:00
Benoît S.
ae1ec7b2b9
Redo the jessie part
2018-06-27 18:01:07 +02:00
Benoît S.
62b61aabf1
Well... For Stretch use only /sys/devices/system/cpu/vulnerabilities/
2018-06-27 17:49:44 +02:00
Benoît S.
33b19090e6
Add check for spectre v2
2018-06-27 17:45:11 +02:00
Benoît S.
3451218a16
Do not use the BOOT_IMAGE trick
2018-06-27 17:33:24 +02:00
Benoît S.
ee60e28a5a
We cannot rely on dmesg
2018-06-27 17:30:18 +02:00
Benoît S.
5f19fbdf65
Merge branch '36-is_apache_confenabled' into 'master'
...
Resolve "IS_APACHE_CONFENABLED"
Closes #36
See merge request evolix/evocheck!16
2018-06-27 15:21:19 +02:00
Benoît S.
d914dd9003
Implement IS_APACHE_CONFENABLED
2018-06-27 15:20:39 +02:00
Benoît S.
fff5971310
Merge branch '35-is_evoacme_certbotcron' into 'master'
...
Resolve "IS_EVOACME_CRON"
Closes #35
See merge request evolix/evocheck!15
2018-06-13 18:10:57 +02:00
Benoît S.
e5ca035516
Add a line
2018-06-13 18:10:14 +02:00
Benoît S.
6bce242efb
Merge branch 'master' into 35-is_evoacme_certbotcron
2018-06-13 18:09:27 +02:00
Benoît S.
5fc12657d3
Check evoacme file cron
2018-06-13 18:03:14 +02:00
Benoît S.
3144cd2deb
Merge branch '33-is_evoacme_livelinks' into 'master'
...
Resolve "IS_EVOACME_LIVELINKS"
Closes #33
See merge request evolix/evocheck!14
2018-06-13 17:54:03 +02:00
Benoît S.
9c5f8653fd
IS_EVOACME_LIVELINKS: Only executed if evoacme installed
2018-05-28 11:49:57 +02:00
Benoît S.
a6b54d99e9
Add IS_EVOACME_LIVELINKS check
2018-05-25 17:55:12 +02:00
Benoît S.
fee78ee9f4
IS_DUPLICATE_FS_LABEL: Add a space for the grep pattern
...
Otherwise it will match PARTLABEL, we want only LABEL.
2018-04-10 15:44:59 +02:00
Benoît S.
dd596c0390
Release 0.13
2018-04-10 15:30:34 +02:00
Benoît S.
d0b0331d98
Merge branch '30-is_duplicate_fs_label-does-not-handle-soft-raid' into 'master'
...
Resolve "IS_DUPLICATE_FS_LABEL does not handle soft raid"
Closes #30
See merge request evolix/evocheck!13
2018-04-10 15:17:53 +02:00
Benoît S.
217e8b1115
Missing fi
2018-04-10 15:16:37 +02:00
Benoît S.
75e69e1440
Use blkid in place of lsblk
2018-04-10 15:14:54 +02:00
Benoît S.
a2fef6cb9b
Update CHANGELOG
2018-04-03 11:46:29 +02:00
Benoît S.
ffbd93ea65
Merge branch 'fix_sshallowusers_for_allowgroups' into 'master'
...
Fix IS_SSHALLOWUSERS for AllowGroups directive
See merge request evolix/evocheck!12
2018-04-03 11:45:18 +02:00
Benoît S.
311423d295
Update CHANGELOG
2018-04-03 11:41:45 +02:00
Jérémy Lecour
9c221e2919
Use "grep -E" instead of "egrep" (deprecated)
2018-03-29 22:31:50 +02:00
Jérémy Lecour
80a07783c8
IS_SSHALLOWUSERS is looking for AllowUsers or AllowGroups
2018-03-29 22:30:31 +02:00
Jérémy Lecour
c1866836aa
whitespaces
2018-03-29 22:29:50 +02:00
Romain Dessort
92b18e201c
Fix evoqa #3623 : custom limit for IS_NOTUPGRADED
...
Set higher time limit for servers not being part of the regular upgrade
process:
- if mails are sent to listupgrade-todo@
- or if listupgrade.sh is not executed on a weekly basis.
2018-03-23 17:47:17 -04:00
Romain Dessort
76575e9fb1
evoqa #4994 : check presence of evolix user
2018-03-23 17:46:11 -04:00
Benoît S.
31f45cbd6e
0.12 release
2018-03-19 16:28:06 +01:00
Benoît S.
f5f788874d
Merge branch '19-detect-depulicate-filesystem-labels' into 'master'
...
Resolve "Detect depulicate filesystem labels"
Closes #19
See merge request evolix/evocheck!9
2018-03-19 14:55:21 +01:00