elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-04-20 00:56:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat: enhance NIS check

Browse Source
This commit is contained in:
thibault.dewailly 2024-12-24 09:34:10 +00:00
parent 7fa2d5f516
commit 68f2c640b1
2 changed files with 20 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
bin/hardening/2.2.17_disable_nis.sh
View File

@ -17,7 +17,7 @@ HARDENING_LEVEL=3
# shellcheck disable=2034 # shellcheck disable=2034
DESCRIPTION="Disable NIS Server." DESCRIPTION="Disable NIS Server."
PACKAGES='nis' PACKAGES='nis ypserv'
# This function will be called if the script status is on enabled / audit mode # This function will be called if the script status is on enabled / audit mode
audit() { audit() {

35
bin/hardening/2.3.1_disable_nis.sh
View File

@ -17,29 +17,32 @@ HARDENING_LEVEL=3
# shellcheck disable=2034 # shellcheck disable=2034
DESCRIPTION="Ensure that Network Information Service is not installed. Recommended alternative : LDAP." DESCRIPTION="Ensure that Network Information Service is not installed. Recommended alternative : LDAP."
PACKAGE='nis' PACKAGES='nis ypbind-mt'
# This function will be called if the script status is on enabled / audit mode # This function will be called if the script status is on enabled / audit mode
audit() { audit() {
is_pkg_installed "$PACKAGE" for PACKAGE in $PACKAGES; do
if [ "$FNRET" = 0 ]; then is_pkg_installed "$PACKAGE"
crit "$PACKAGE is installed!" if [ "$FNRET" = 0 ]; then
else crit "$PACKAGE is installed!"
ok "$PACKAGE is absent" else
fi ok "$PACKAGE is absent"
: fi
done
} }
# This function will be called if the script status is on enabled mode # This function will be called if the script status is on enabled mode
apply() { apply() {
is_pkg_installed "$PACKAGE" for PACKAGE in $PACKAGES; do
if [ "$FNRET" = 0 ]; then is_pkg_installed "$PACKAGE"
crit "$PACKAGE is installed, purging it" if [ "$FNRET" = 0 ]; then
apt-get purge "$PACKAGE" -y crit "$PACKAGE is installed, purging it"
apt-get autoremove -y apt-get purge "$PACKAGE" -y
else apt-get autoremove -y
ok "$PACKAGE is absent" else
fi ok "$PACKAGE is absent"
fi
done
} }
# This function will check config parameters required # This function will check config parameters required