Thibault Ayanides
dee0ebc821
IMP(shellcheck): quote variables
2020-12-10 09:50:33 +01:00
Thibault Ayanides
b09b75a51e
IMP(shellcheck): quote variables (SC2086)
2020-12-07 17:11:32 +01:00
Thibault Ayanides
8012234096
IMP(shellcheck): fix harmless warnings
2020-12-07 14:53:10 +01:00
Thibault Ayanides
3a342b784a
IMP(shfmt): add shell formatter
2020-12-04 14:08:01 +01:00
Thibault Ayanides
4add6ddc33
IMP(shellcheck): add prefix to define shell (SC2148)
2020-11-27 09:22:47 +01:00
Thibault Ayanides
cccc0881e9
IMP(shellcheck): add run-shellcheck prefix
2020-11-23 17:10:37 +01:00
Charles Herlin
41e3402b10
FIX(batch): sed \n to space in batch echo
2019-03-19 10:38:41 +01:00
Charles Herlin
d014405e1f
FIX: add becho to send batch output to syslog too
...
becho stands for batch echo
formats the log line for syslog
Also logs audit summary into syslog (in batch mode only)
2019-02-06 17:25:16 +01:00
Charles Herlin
6cea326921
Update debian 7/8/9 in help files and remove in generic scripts
2019-02-06 15:19:14 +01:00
Charles Herlin
71b70a2b8c
FEAT: Add sudo_wrapper to catch unauthorized sudo commands
...
As for now, if a sudo command was not allowed, check might sometimes
pass, resulting compliant state even if it actually is not.
Sudo wrapper first checks wether command is allowed before running it,
otherwise issues a crit message, setting check as not compliant
Fix script to make sudo_wrapper work, split "find" lines
Fix quotes in $@ and $* when running sudo command
Fixed quotes and curly braces with shellcheck report
2018-03-16 12:06:56 +01:00
Charles Herlin
67df4da781
Adding batch mode to output just one line of text (no colors) in order to be parsed by computer tools
...
Adding DESCRIPTION field in tests and [INFO] DESCRIPTION in main
Update README with --batch mode info
Add --batch mode in hardening.sh
Change summary to make it oneliner when batch mode
AUDIT_SUMMARY PASSED_CHECKS:95 RUN_CHECKS:191 TOTAL_CHECKS_AVAIL:191 CONFORMITY_PERCENTAGE:49.74
2017-10-31 17:44:15 +01:00
Stéphane Lesimple
676b17c54f
add hardening templating and several enhancements
2017-05-18 18:40:09 +02:00
Stéphane Lesimple
cca0310d64
set a fixed-size prefix for logger
2017-05-18 18:27:02 +02:00
jeremydenoun
53626bd926
Remove test on _logger() function
...
the original line contain test that can hide echo if we launch script with pipe or IO redirection
2016-05-14 20:39:32 +02:00
thibault.dewailly
3ece442743
Added exit code to CIS_ROOT_DIR test def, optimized sed and sort
2016-04-20 11:29:44 +02:00
thibault.dewailly
b2d3ed937e
Corrected script names, added License, Completed README and corrected bug with too long logger messages
2016-04-19 09:31:01 +02:00
thibault.dewailly
b1b96cf4e3
log format correction, loglevel defaults to info
2016-04-18 14:01:03 +02:00
thibault.dewailly
fa98efc32b
Added argument parsing and test checks
2016-04-17 23:10:47 +02:00
thibault.dewailly
b079798e62
2.2_tmp_nodev.sh
2016-04-04 15:05:10 +02:00
thibault.dewailly
6aa74d6188
1.1 Install updates
2016-04-04 11:23:03 +02:00
thibault.dewailly
1a41e2f592
skeleton
2016-04-01 16:48:31 +02:00
thibault.dewailly
08da17be24
hardening : building basic configuration
2016-04-01 09:52:39 +02:00
thibault.dewailly
9a5e962cd4
Added basic Configuration files and skeleton scripts
2016-04-01 09:32:17 +02:00
