diff --git a/bin/hardening/5.2.10_disable_root_login.sh b/bin/hardening/5.2.10_disable_root_login.sh index 48b08b9..bc2f2af 100755 --- a/bin/hardening/5.2.10_disable_root_login.sh +++ b/bin/hardening/5.2.10_disable_root_login.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.11_disable_sshd_permitemptypasswords.sh b/bin/hardening/5.2.11_disable_sshd_permitemptypasswords.sh index 4a164be..1200613 100755 --- a/bin/hardening/5.2.11_disable_sshd_permitemptypasswords.sh +++ b/bin/hardening/5.2.11_disable_sshd_permitemptypasswords.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.12_disable_sshd_setenv.sh b/bin/hardening/5.2.12_disable_sshd_setenv.sh index 0eed930..09c1066 100755 --- a/bin/hardening/5.2.12_disable_sshd_setenv.sh +++ b/bin/hardening/5.2.12_disable_sshd_setenv.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.13_sshd_ciphers.sh b/bin/hardening/5.2.13_sshd_ciphers.sh index 3134a72..cdfb18e 100755 --- a/bin/hardening/5.2.13_sshd_ciphers.sh +++ b/bin/hardening/5.2.13_sshd_ciphers.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.14_ssh_cry_mac.sh b/bin/hardening/5.2.14_ssh_cry_mac.sh index 9f3e801..5867162 100755 --- a/bin/hardening/5.2.14_ssh_cry_mac.sh +++ b/bin/hardening/5.2.14_ssh_cry_mac.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.15_ssh_cry_kex.sh b/bin/hardening/5.2.15_ssh_cry_kex.sh index e17d7a9..630bb97 100755 --- a/bin/hardening/5.2.15_ssh_cry_kex.sh +++ b/bin/hardening/5.2.15_ssh_cry_kex.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.16_sshd_idle_timeout.sh b/bin/hardening/5.2.16_sshd_idle_timeout.sh index 2b96e4f..d6c82da 100755 --- a/bin/hardening/5.2.16_sshd_idle_timeout.sh +++ b/bin/hardening/5.2.16_sshd_idle_timeout.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.17_sshd_login_grace_time.sh b/bin/hardening/5.2.17_sshd_login_grace_time.sh index 59872fd..6dada4e 100755 --- a/bin/hardening/5.2.17_sshd_login_grace_time.sh +++ b/bin/hardening/5.2.17_sshd_login_grace_time.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.18_sshd_limit_access.sh b/bin/hardening/5.2.18_sshd_limit_access.sh index b843dde..7a1d04d 100755 --- a/bin/hardening/5.2.18_sshd_limit_access.sh +++ b/bin/hardening/5.2.18_sshd_limit_access.sh @@ -25,7 +25,7 @@ audit() { OPTIONS="AllowUsers='$ALLOWED_USERS' AllowGroups='$ALLOWED_GROUPS' DenyUsers='$DENIED_USERS' DenyGroups='$DENIED_GROUPS'" is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.19_ssh_banner.sh b/bin/hardening/5.2.19_ssh_banner.sh index 5822514..c689fa6 100755 --- a/bin/hardening/5.2.19_ssh_banner.sh +++ b/bin/hardening/5.2.19_ssh_banner.sh @@ -25,7 +25,7 @@ audit() { OPTIONS="Banner=$BANNER_FILE" is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.20_enable_ssh_pam.sh b/bin/hardening/5.2.20_enable_ssh_pam.sh index f4e5635..9de1523 100755 --- a/bin/hardening/5.2.20_enable_ssh_pam.sh +++ b/bin/hardening/5.2.20_enable_ssh_pam.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.21_disable_ssh_allow_tcp_forwarding.sh b/bin/hardening/5.2.21_disable_ssh_allow_tcp_forwarding.sh index 1158667..5eae6e8 100755 --- a/bin/hardening/5.2.21_disable_ssh_allow_tcp_forwarding.sh +++ b/bin/hardening/5.2.21_disable_ssh_allow_tcp_forwarding.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.22_configure_ssh_max_startups.sh b/bin/hardening/5.2.22_configure_ssh_max_startups.sh index 31550ff..527a53b 100755 --- a/bin/hardening/5.2.22_configure_ssh_max_startups.sh +++ b/bin/hardening/5.2.22_configure_ssh_max_startups.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.23_limit_ssh_max_sessions.sh b/bin/hardening/5.2.23_limit_ssh_max_sessions.sh index 730ca6a..16ff59a 100755 --- a/bin/hardening/5.2.23_limit_ssh_max_sessions.sh +++ b/bin/hardening/5.2.23_limit_ssh_max_sessions.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.4_sshd_protocol.sh b/bin/hardening/5.2.4_sshd_protocol.sh index c6497bb..c34b3ac 100755 --- a/bin/hardening/5.2.4_sshd_protocol.sh +++ b/bin/hardening/5.2.4_sshd_protocol.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.5_sshd_loglevel.sh b/bin/hardening/5.2.5_sshd_loglevel.sh index b6d2a4f..e45280b 100755 --- a/bin/hardening/5.2.5_sshd_loglevel.sh +++ b/bin/hardening/5.2.5_sshd_loglevel.sh @@ -26,7 +26,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.6_disable_x11_forwarding.sh b/bin/hardening/5.2.6_disable_x11_forwarding.sh index 5c262bf..8751ed6 100755 --- a/bin/hardening/5.2.6_disable_x11_forwarding.sh +++ b/bin/hardening/5.2.6_disable_x11_forwarding.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.7_sshd_maxauthtries.sh b/bin/hardening/5.2.7_sshd_maxauthtries.sh index a5b1c8a..5f95af7 100755 --- a/bin/hardening/5.2.7_sshd_maxauthtries.sh +++ b/bin/hardening/5.2.7_sshd_maxauthtries.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.8_enable_sshd_ignorerhosts.sh b/bin/hardening/5.2.8_enable_sshd_ignorerhosts.sh index 0dec3df..db7a7a1 100755 --- a/bin/hardening/5.2.8_enable_sshd_ignorerhosts.sh +++ b/bin/hardening/5.2.8_enable_sshd_ignorerhosts.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/5.2.9_disable_sshd_hostbasedauthentication.sh b/bin/hardening/5.2.9_disable_sshd_hostbasedauthentication.sh index 96a8b1b..42a26b4 100755 --- a/bin/hardening/5.2.9_disable_sshd_hostbasedauthentication.sh +++ b/bin/hardening/5.2.9_disable_sshd_hostbasedauthentication.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/99.5.2.1_ssh_auth_pubk_only.sh b/bin/hardening/99.5.2.1_ssh_auth_pubk_only.sh index 8b300af..e7f0392 100755 --- a/bin/hardening/99.5.2.1_ssh_auth_pubk_only.sh +++ b/bin/hardening/99.5.2.1_ssh_auth_pubk_only.sh @@ -25,7 +25,7 @@ OPTIONS='PubkeyAuthentication=yes PasswordAuthentication=no KbdInteractiveAuthen audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/99.5.2.2_ssh_cry_rekey.sh b/bin/hardening/99.5.2.2_ssh_cry_rekey.sh index fc8d5a1..06c5f81 100755 --- a/bin/hardening/99.5.2.2_ssh_cry_rekey.sh +++ b/bin/hardening/99.5.2.2_ssh_cry_rekey.sh @@ -40,7 +40,7 @@ audit() { set -u is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/99.5.2.3_ssh_disable_features.sh b/bin/hardening/99.5.2.3_ssh_disable_features.sh index 06866f9..8428f69 100755 --- a/bin/hardening/99.5.2.3_ssh_disable_features.sh +++ b/bin/hardening/99.5.2.3_ssh_disable_features.sh @@ -24,7 +24,7 @@ OPTIONS='AllowAgentForwarding=no AllowTcpForwarding=no AllowStreamLocalForwardin audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/99.5.2.5_ssh_strict_modes.sh b/bin/hardening/99.5.2.5_ssh_strict_modes.sh index ed34c7a..acde7e3 100755 --- a/bin/hardening/99.5.2.5_ssh_strict_modes.sh +++ b/bin/hardening/99.5.2.5_ssh_strict_modes.sh @@ -23,7 +23,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do diff --git a/bin/hardening/99.5.2.6_ssh_sys_accept_env.sh b/bin/hardening/99.5.2.6_ssh_sys_accept_env.sh index 2e0a663..c4319d2 100755 --- a/bin/hardening/99.5.2.6_ssh_sys_accept_env.sh +++ b/bin/hardening/99.5.2.6_ssh_sys_accept_env.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" does_pattern_exist_in_file_nocase "$FILE" "$PATTERN" diff --git a/bin/hardening/99.5.2.8_ssh_sys_sandbox.sh b/bin/hardening/99.5.2.8_ssh_sys_sandbox.sh index 8f298e2..e81166e 100755 --- a/bin/hardening/99.5.2.8_ssh_sys_sandbox.sh +++ b/bin/hardening/99.5.2.8_ssh_sys_sandbox.sh @@ -25,7 +25,7 @@ FILE='/etc/ssh/sshd_config' audit() { is_pkg_installed "$PACKAGE" if [ "$FNRET" != 0 ]; then - crit "$PACKAGE is not installed!" + ok "$PACKAGE is not installed!" else ok "$PACKAGE is installed" for SSH_OPTION in $OPTIONS; do