#!/bin/sh

#=======================================================
InsertSection "check the ssh syslogfacility"


#-----------------Check the syslogfacility to AUTH----------------
IS_EXIST=`egrep -v '^#|^$' /etc/ssh/sshd_config | grep 'SyslogFacility' | wc -l`
if [ ${IS_EXIST} -eq 0 ] ; then
   
    echo "c26" >> $RESULT_FILE
    echo "" >> $RESULT_FILE
    logtext "WRN_C26_01: $(loadtext TXT_WRN_C26_01)"
    logtext "Suggestion: $(loadtext TXT_SUG_C26)"
    Display --indent 2 --text "- No ssh syslogfacility config set... " --result WARNING --color RED
    AddHP 0 1
else
    if [  $(egrep -v '^#|^$' /etc/ssh/sshd_config | grep 'SyslogFacility' | grep -w 'AUTH' | wc -l) -eq 0 ];then
        echo "c26" >> $RESULT_FILE
        echo "" >> $RESULT_FILE
   	logtext "WRN_C26_02: $(loadtext TXT_WRN_C26_02)"
    	logtext "Suggestion: $(loadtext TXT_SUG_C26)"
    	Display --indent 2 --text "- Wrong ssh syslogfacility config set... " --result WARNING --color RED
    	AddHP 0 1
    else
        logtext "Has ssh syslogfacility set, checking ok"
        Display --indent 2 --text "- Check the ssh syslogfacility... " --result OK --color GREEN
        AddHP 1 1
    fi
fi