elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-06-22 02:33:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

1.1 Install updates

Browse Source
This commit is contained in:
thibault.dewailly
2016-04-04 11:23:03 +02:00
parent 5efc1d1a96
commit 6aa74d6188
4 changed files with 74 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
bin/hardening/1.1_Install_Updates.sh
View File

@ -13,16 +13,32 @@ set -u # One variable unset, it's over
# This function will be called if the script status is on enabled / audit mode
audit () {
:
info "Checking if apt needs an update"
apt_update_if_needed
info "Fetching upgrades ..."
apt_check_updates "CIS_APT"
if [ $FNRET -gt 0 ]; then
warn "$RESULT"
FNRET=1
else
ok "No upgrades available"
FNRET=0
fi
}
# This function will be called if the script status is on enabled mode
apply () {
:
if [ $FNRET -gt 0 ]; then
info "Applying Upgrades..."
DEBIAN_FRONTEND='noninteractive' apt-get -o Dpkg::Options::='--force-confdef' -o Dpkg::Options::='--force-confold' upgrade -y
else
ok "No Upgrades to apply"
fi
}
# This function will check config parameters required
check_config() {
# No parameters for this function
:
}
@ -37,4 +53,5 @@ else
fi
fi
# Main function, will call the proper functions given the configuration (audit, enabled, disabled)
[ -r $CIS_ROOT_DIR/lib/main.sh ] && . $CIS_ROOT_DIR/lib/main.sh