skeleton

lib/common.sh

@@ -1,7 +1,50 @@
 # CIS Debian 7 Hardening common functions
 
-logger() {
+# Logging functions
+
+case $LOGLEVEL in
+    error )
+        MACHINE_LOG_LEVEL=1
+        ;;
+    warning )
+        MACHINE_LOG_LEVEL=2
+        ;;
+    info )
+        MACHINE_LOG_LEVEL=3
+        ;;
+    debug )
+        MACHINE_LOG_LEVEL=4
+        ;;
+    *)
+        MACHINE_LOG_LEVEL=3 ## Default loglevel value to info
+esac
+
+_logger() {
+    COLOR=$1
+    shift
     test -z "$SCRIPT_NAME" && SCRIPT_NAME=$(basename $0)
-    /usr/bin/logger -i -t "$SCRIPT_NAME" -p "user.info" "$*"
-    test -t 1 && echo "$*"
+    /usr/bin/logger -t "[CIS_Hardening] $SCRIPT_NAME" -p "user.info" "$*"
+    test -t 1 && cecho $COLOR "$SCRIPT_NAME $*"
+}
+
+cecho () {
+    COLOR=$1
+    shift
+    echo -e "${COLOR}$*${NC}"
+}
+
+info () { 
+    [ $MACHINE_LOG_LEVEL -ge 3 ] && _logger $BWHITE "[INFO] $*"
+}
+
+warn () {
+    [ $MACHINE_LOG_LEVEL -ge 2 ] && _logger $BYELLOW "[WARN] $*"
+}
+
+crit () {
+    [ $MACHINE_LOG_LEVEL -ge 1 ] && _logger $BRED "[ KO ] $*"
+}
+
+debug () {
+    [ $MACHINE_LOG_LEVEL -ge 4 ] && _logger $GRAY "[DBG ] $*"
 }

lib/constants.sh

@@ -21,13 +21,15 @@
 
 # Reset Color (for syslog)
 NC='\033[0m'
-
+WHITE='\033[0m'
 # Colors
-RED='\033[1;31m'
-GREEN='\033[1;32m'
-YELLOW='\033[1;33m'
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[0;33m'
+GRAY='\033[0;40m'        # Gray
 
 # Bold
 BRED='\033[1;31m'         # Red
 BGREEN='\033[1;32m'       # Green
 BYELLOW='\033[1;33m'      # Yellow
+BWHITE='\033[1;37m'       # White

lib/main.sh

@@ -0,0 +1,41 @@
+LONG_SCRIPT_NAME=$(basename $0)
+SCRIPT_NAME=${LONG_SCRIPT_NAME%.sh}
+# Variable initialization, to avoid crash
+status=""
+
+[ -r $CIS_ROOT_DIR/lib/constants.sh  ] && . $CIS_ROOT_DIR/lib/constants.sh
+[ -r $CIS_ROOT_DIR/etc/hardening.cfg ] && . $CIS_ROOT_DIR/etc/hardening.cfg
+[ -r $CIS_ROOT_DIR/lib/common.sh     ] && . $CIS_ROOT_DIR/lib/common.sh
+[ -r $CIS_ROOT_DIR/lib/utils.sh      ] && . $CIS_ROOT_DIR/lib/utils.sh
+
+# Source specific configuration file
+[ -r $CIS_ROOT_DIR/etc/conf.d/$SCRIPT_NAME.cfg ] && . $CIS_ROOT_DIR/etc/conf.d/$SCRIPT_NAME.cfg
+
+# Environment Sanitizing
+export PATH='/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'
+
+info "Working on $SCRIPT_NAME"
+
+if [ -z $status ]; then
+    crit "Could not find status variable for $SCRIPT_NAME, considered as disabled"
+    exit 0
+fi
+
+case $status in
+    enabled | true ) 
+        info "Performing audit"
+        audit # Perform audit
+        info "Applying Hardening"
+        apply # Perform hardening
+        ;;
+    audit )
+        info "Performing audit"
+        audit # Perform audit
+        ;;
+    disabled | false )
+        info "$SCRIPT_NAME is disabled, ignoring"
+        ;;
+    *)
+        warn "Wrong value for status : $status. Must be [ enabled | true | audit | disabled | false ]"
+        ;;
+esac