elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2024-11-22 21:47:02 +01:00
Code Issues Packages Projects Releases Wiki Activity

FIX(2.2.12) handle smbd as a service

Browse Source
This commit is contained in:
Charles Herlin 2019-10-25 16:03:11 +02:00 committed by Thibault Ayanides
parent 0fa10240cd
commit 5074c5a8bd
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
bin/hardening/2.2.12_disable_samba.sh
View File

@ -15,7 +15,8 @@ HARDENING_LEVEL=3
DESCRIPTION="Ensure Samba is not enabled." DESCRIPTION="Ensure Samba is not enabled."
HARDENING_EXCEPTION=samba HARDENING_EXCEPTION=samba
PACKAGES='samba smbd' PACKAGES='samba'
SERVICE='smbd'
# This function will be called if the script status is on enabled / audit mode # This function will be called if the script status is on enabled / audit mode
audit () { audit () {
@ -27,6 +28,12 @@ audit () {
ok "$PACKAGE is absent" ok "$PACKAGE is absent"
fi fi
done done
is_service_enabled $SERVICE
if [ $FNRET = 1 ]; then
crit "Service $SERVICE is enabled!"
else
ok "Service $SERVICE is disabled"
fi
} }
# This function will be called if the script status is on enabled mode # This function will be called if the script status is on enabled mode
@ -41,6 +48,13 @@ apply () {
ok "$PACKAGE is absent" ok "$PACKAGE is absent"
fi fi
done done
is_service_enabled $SERVICE
if [ $FNRET = 1 ]; then
crit "Service $SERVICE is enabled!"
systemctl disable $SERVICE
else
ok "Service $SERVICE is disabled"
fi
} }
# This function will check config parameters required # This function will check config parameters required