#!/bin/sh

#=======================================================
InsertSection "check if record the error events"

SYSLOG_CONF="/etc/rsyslog.conf /etc/syslog.conf"

for i in ${SYSLOG_CONF}
do
    if [ -s ${i} ];then
        cp -np ${i} ${i}_bak
        grep "*.err \{1,\}\/var\/log\/.\{1,\}" ${i}|grep -v "#" |wc -l | while read count
        do
            if [ $count -lt 1 ];then
                echo "c19" >> $RESULT_FILE
                echo "" >> $RESULT_FILE
                logtext "WRN_C19: $(loadtext TXT_WRN_C19)"
                logtext "Suggestion: $(loadtext TXT_SUG_C19)"
                Display --indent 2 --text "- Check if there have *.err set... " --result WARNING --color RED
                AddHP 0 1
            else
                logtext "The security audit modle *err is set, checking OK"
                Display --indent 2 --text "- Check if there have *.err set... " --result OK --color GREEN
                AddHP 1 1
            fi
        done

    fi
done