elie/debian-cis
1
0
Fork 0
mirror of https://github.com/ovh/debian-cis.git synced 2025-08-31 11:54:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Damcava35/deb12 scripts 5 (#289)

Browse Source 
* refacto: systemd is-active / is-enabled

Manage different object types (service, socket, timer...) in a generic way.

* feat: add debian12 scripts

ufw_is_installed.sh				-> 4.1.1
iptables_persistent_is_not_installed.sh		-> 4.1.2
ufw_is_enabled					-> 4.1.3
nftables_not_installed_with_iptables.sh		-> 4.3.1.2
libpam_runtime_is_version 			-> 5.3.1.1

---------

Co-authored-by: damien cavagnini <damien.cavagnini@corp.ovh.com>
This commit is contained in:
damcav35
2025-08-14 12:25:25 +02:00
committed by GitHub
parent 94f110d9b3
commit 8aeb22fb60
11 changed files with 562 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

80
lib/utils.sh
View File

@@ -321,9 +321,10 @@ does_group_exist() {
# Service Boot Checks
#
is_service_enabled() {
local SERVICE=$1
systemd_is_active_or_enabled() {
local SYSTEMD_OBJECT=$1
local SYSTEMD_OBJECT_TYPE=$2
local SYSTEMD_ACTION=$3
# if running in a container, it does not make much sense to test for systemd / service
# the var "IS_CONTAINER" defined in lib/constant may not be enough, in case we are using systemd slices
# currently, did not find a unified way to manage all cases, so we check this only for systemctl usage
@@ -332,33 +333,74 @@ is_service_enabled() {
FNRET=1
return
fi
if $SUDO_CMD systemctl -t service is-enabled "$SERVICE" >/dev/null; then
debug "Service $SERVICE is enabled"
if $SUDO_CMD systemctl -t "$SYSTEMD_OBJECT_TYPE" "$SYSTEMD_ACTION" "$SYSTEMD_OBJECT" >/dev/null; then
FNRET=0
else
debug "Service $SERVICE is disabled"
FNRET=1
fi
}
is_service_enabled() {
local SERVICE=$1
systemd_is_active_or_enabled "$SERVICE" 'service' 'is-enabled'
if [ "$FNRET" -eq 0 ]; then
debug "Service $SERVICE is enabled"
else
debug "Service $SERVICE is not enabled"
fi
}
is_service_active() {
local SERVICE=$1
systemd_is_active_or_enabled "$SERVICE" 'service' 'is-active'
if [ "$FNRET" -eq 0 ]; then
debug "Service $SERVICE is active"
else
debug "Service $SERVICE is not active"
fi
}
is_socket_enabled() {
local SOCKET=$1
# if running in a container, it does not make much sense to test for systemd / service
# the var "IS_CONTAINER" defined in lib/constant may not be enough, in case we are using systemd slices
# currently, did not find a unified way to manage all cases, so we check this only for systemctl usage
is_systemctl_running
if [ "$FNRET" -eq 1 ]; then
debug "host was not started using '/sbin/init', systemd should not be available"
FNRET=1
return
fi
if $SUDO_CMD systemctl -t socket is-enabled "$SOCKET" >/dev/null; then
systemd_is_active_or_enabled "$SOCKET" 'socket' 'is-enabled'
if [ "$FNRET" -eq 0 ]; then
debug "Socket $SOCKET is enabled"
FNRET=0
else
debug "Socket $SOCKET is disabled"
FNRET=1
debug "Socket $SOCKET is not enabled"
fi
}
is_socket_active() {
local SOCKET=$1
systemd_is_active_or_enabled "$SOCKET" 'socket' 'is-active'
if [ "$FNRET" -eq 0 ]; then
debug "Socket $SOCKET is active"
else
debug "Socket $SOCKET is not active"
fi
}
is_timer_active() {
local TIMER=$1
systemd_is_active_or_enabled "$TIMER" 'timer' 'is-active'
if [ "$FNRET" -eq 0 ]; then
debug "Timer $TIMER is active"
else
debug "Timer $TIMER is not active"
fi
}