2016-04-01 16:48:31 +02:00
|
|
|
LONG_SCRIPT_NAME=$(basename $0)
|
|
|
|
|
SCRIPT_NAME=${LONG_SCRIPT_NAME%.sh}
|
|
|
|
|
# Variable initialization, to avoid crash
|
|
|
|
|
status=""
|
|
|
|
|
|
|
|
|
|
[ -r $CIS_ROOT_DIR/lib/constants.sh ] && . $CIS_ROOT_DIR/lib/constants.sh
|
|
|
|
|
[ -r $CIS_ROOT_DIR/etc/hardening.cfg ] && . $CIS_ROOT_DIR/etc/hardening.cfg
|
|
|
|
|
[ -r $CIS_ROOT_DIR/lib/common.sh ] && . $CIS_ROOT_DIR/lib/common.sh
|
|
|
|
|
[ -r $CIS_ROOT_DIR/lib/utils.sh ] && . $CIS_ROOT_DIR/lib/utils.sh
|
|
|
|
|
|
|
|
|
|
# Source specific configuration file
|
|
|
|
|
[ -r $CIS_ROOT_DIR/etc/conf.d/$SCRIPT_NAME.cfg ] && . $CIS_ROOT_DIR/etc/conf.d/$SCRIPT_NAME.cfg
|
|
|
|
|
|
|
|
|
|
# Environment Sanitizing
|
|
|
|
|
export PATH='/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'
|
|
|
|
|
|
|
|
|
|
info "Working on $SCRIPT_NAME"
|
|
|
|
|
|
|
|
|
|
if [ -z $status ]; then
|
|
|
|
|
crit "Could not find status variable for $SCRIPT_NAME, considered as disabled"
|
|
|
|
|
exit 0
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
case $status in
|
2016-04-04 11:23:03 +02:00
|
|
|
enabled | true )
|
|
|
|
|
info "Checking Configuration"
|
|
|
|
|
check_config
|
2016-04-01 16:48:31 +02:00
|
|
|
info "Performing audit"
|
|
|
|
|
audit # Perform audit
|
|
|
|
|
info "Applying Hardening"
|
|
|
|
|
apply # Perform hardening
|
|
|
|
|
;;
|
|
|
|
|
audit )
|
2016-04-04 11:23:03 +02:00
|
|
|
info "Checking Configuration"
|
|
|
|
|
check_config
|
2016-04-01 16:48:31 +02:00
|
|
|
info "Performing audit"
|
|
|
|
|
audit # Perform audit
|
|
|
|
|
;;
|
|
|
|
|
disabled | false )
|
|
|
|
|
info "$SCRIPT_NAME is disabled, ignoring"
|
|
|
|
|
;;
|
|
|
|
|
*)
|
|
|
|
|
warn "Wrong value for status : $status. Must be [ enabled | true | audit | disabled | false ]"
|
|
|
|
|
;;
|
|
|
|
|
esac
|
