File: //opt/BCLinux/bse/include/consts
#!/bin/sh
#################################################################################
#
# BCLinux
# ------------------
#
# This software is licensed under GPL, version 3. See LICENSE file for
# usage of this software.
#
#################################################################################
#
# Consts
#
#################################################################################
#
# Paths where system and program binaries are located
BIN_PATHS="/bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin \
/usr/local/libexec /usr/libexec /usr/sfw/bin /usr/sfw/sbin \
/usr/sfw/libexec /opt/sfw/bin /opt/sfw/sbin /opt/sfw/libexec \
/usr/xpg4/bin /usr/css/bin /usr/ucb /usr/X11R6/bin /usr/X11R7/bin \
/usr/pkg/bin /usr/pkg/sbin"
ETC_PATHS="/etc /usr/local/etc"
# Do not use specific language, fall back to default
# Some tools with translated strings are very hard to parse
unset LANG
#
#################################################################################
#
# Initialize defaults
#
#################################################################################
#
# == Variable initializing ==
#
AUDITORNAME=""
AUTH_FAILED_LOGINS_LOGGED=0
AUTH_UNLOCK_TIME=-1
PROFILE=""
REPORTFILE=""
AFICKBINARY=""
AIDEBINARY=""
AASTATUSBINARY=""
AUDITD_RUNNING=0
APPLICATION_FIREWALL_ACTIVE=0
BINARY_SCAN_FINISHED=0
CHECK_BINARIES=1
CHKROOTKITBINARY=""
CHKCONFIGBINARY=""
COMPLIANCE_ENABLE_CIS=0
COMPLIANCE_ENABLE_HIPAA=0
COMPLIANCE_ENABLE_ISO27001=0
COMPLIANCE_ENABLE_PCI_DSS=0
COMPLIANCE_TESTS_PERFORMED=0
COMPLIANCE_FINDINGS_FOUND=0
COMPRESSED_UPLOADS=0
CONTROL_URL_APPEND=""
CONTROL_URL_PREPEND=""
CONTROL_URL_PROTOCOL=""
CSUMBINARY=""
CUSTOM_URL_APPEND=""
CUSTOM_URL_PREPEND=""
CUSTOM_URL_PROTOCOL=""
DISCOVERED_BINARIES=""
DOCKER_DAEMON_RUNNING=0
FILEVALUE=""
FIND=""
FIREWALL_ACTIVE=0
FOUNDPATH=0
GREPBINARY="grep"
GRPCKBINARY=""
GROUP_NAME=""
GRUB2INSTALLBINARY=""
HELPER=""
HOSTID=""
IPTABLESBINARY=""
LINUX_VERSION=""
LINUXCONFIGFILE=""
LMDBINARY=""
LMDFOUND=0
LOGFILE=""
MACHINEID=""
MACHINE_ROLE=""
MALWARE_SCANNER_INSTALLED=0
MIN_PASSWORD_LENGTH=-1
NAME_CACHE_USED=0
NETWORK_INTERFACES=""
NGINX_ACCESS_LOG_DISABLED=0
NGINX_ACCESS_LOG_MISSING=0
NGINX_ALIAS_FOUND=0
NGINX_ALLOW_FOUND=0
NGINX_DENY_FOUND=0
NGINX_ERROR_LOG_DEBUG=0
NGINX_ERROR_LOG_MISSING=0
NGINX_EXPIRES_FOUND=0
NGINX_FASTCGI_FOUND=0
NGINX_FASTCGI_PARAMS_FOUND=0
NGINX_FASTCGI_PASS_FOUND=0
NGINX_LISTEN_FOUND=0
NGINX_LOCATION_FOUND=0
NGINX_SSL_CIPHERS=0
NGINX_SSL_ON=0
NGINX_SSL_PREFER_SERVER_CIPHERS=0
NGINX_SSL_PROTOCOLS=0
NGINX_RETURN_FOUND=0
NGINX_ROOT_FOUND=0
NTPD_ROLE=""
OS=""; OS_MODE=""
OS_REDHAT_OR_CLONE=0
OSIRISBINARY=""
PASSWORD_MAXIMUM_DAYS=-1
PASSWORD_MINIMUM_DAYS=-1
PAM_2F_AUTH_ENABLED=0
PAM_2F_AUTH_REQUIRED=0
PAM_AUTH_BRUTE_FORCE_PROTECTION=0
PAM_PASSWORD_HISTORY_AMOUNT=0
PAM_PASSWORD_HISTORY_ENABLED=0
PAM_PASSWORD_STRENGTH_TESTED=0
PAM_PASSWORD_PWHISTORY_ENABLED=0
PAM_PASSWORD_UXHISTORY_ENABLED=0
PFFOUND=0
PIDFILE=""
PLUGINDIR=""
PLUGIN_PHASE=0
PRIVILEGED=0
PROFILEVALUE=""
PSBINARY="ps"
REMOTE_LOGGING_ENABLED=0
RKHUNTERBINARY=""
RPMBINARY=""
RUN_HELPERS=0
RUN_PLUGINS=1
RUN_TESTS=1
SAMHAINBINARY=""
SCAN_TEST_HEAVY=""; SCAN_TEST_MEDIUM=""; SCAN_TEST_LOW=""
SESTATUSBINARY=""
SERVICE_MANAGER=""
SHELL_IS_BUSYBOX=0
SHOW_PROGRAM_DETAILS=1
SHOW_REPORT=1
SHOW_SETTINGS_FILE=0
SKIPPED_TESTS_ROOTONLY=""
SSHKEYSCANBINARY=""
SSHKEYSCANFOUND=0
SYSLOGNGBINARY=""
SYSTEMCTLBINARY=""
TEMP_FILE=""
TEMP_FILES=""
TEST_SKIP_ALWAYS=""
TESTS_CATEGORY_TO_PERFORM=""
TESTS_EXECUTED=""
TESTS_SKIPPED=""
TMPFILE=""
TOTAL_SUGGESTIONS=0
TOTAL_WARNINGS=0
TRIPWIREBINARY=""
UEFI_BOOTED=0
UEFI_BOOTED_SECURE=0
UNBOUND_RUNNING=0
UPLOAD_OPTIONS=""
UPLOAD_PROXY_PORT=""
UPLOAD_PROXY_PROTOCOL=""
UPLOAD_PROXY_SERVER=""
UPDATE_CHECK_SKIPPED=0
VALUE=""
VMTYPE=""
VULNERABLE_PACKAGES_FOUND=0
#
#################################################################################
#
# * Options
#
#################################################################################
#
CRONJOB=0 # Run as a cronjob
CTESTS_PERFORMED=0 # Number of tests which are performed
DEBUG=0 # Debugging mode (to screen)
HPPOINTS=0 # Number of hardening points
HPTOTAL=0 # Maximum number of hardening points
LOG_INCORRECT_OS=1 # Log tests with incorrect OS
NEVERBREAK=0 # Don't wait for user input
PENTESTINGMODE=0 # Try tests without root privileges
QUICKMODE=0 # Don't wait for user input
QUIET=0 # Show normal messages and warnings as well
SHOW_TOOL_TIPS=1 # Show inline tool tips (default true)
SKIPLOGTEST=0 # Skip logging for one test
SKIP_UPGRADE_TEST=0 # Skip upgrade test
TESTS_TO_PERFORM="" # Which tests only to perform
TEST_PAUSE_TIME=0 # Default pause time
TOTAL_TESTS=0 # Total amount of tests (counter)
UPLOAD_DATA=0 # Upload of data to central node
VIEWHELP=0 # Show help
WRONGOPTION=0 # A wrong option is used
#
#################################################################################
#
# Installed packages and other settings
COMPILER_INSTALLED=0
#
#################################################################################
#
# * Colors
#
# For improved display
#
#################################################################################
#
WARNING="[1;31m" # Bad (red)
SECTION="[1;33m" # Section (yellow)
NOTICE="[1;33m" # Notice (yellow)
OK="[1;32m" # Ok (green)
BAD="[1;31m" # Bad (red)
# Normal color names
YELLOW="[1;33m"
YELLOW_BLINK="[1;5;33m"
WHITE="[1;37m"
GREEN="[1;32m"
RED="[1;31m"
PURPLE="[0;35m"
MAGENTA="[1;35m"
BROWN="[0;33m"
CYAN="[0;36m"
BLUE="[0;34m"
NORMAL="[0;39m"
#
#################################################################################
#
#
#################################################################################
#
# * default options
#
# initialize for default.prf
#
#################################################################################
#
TEST_PAUSE_TIME=0
SET_MOTD=0
MOTD="Authorized users only. All activity may be monitored and reported"
SET_PASSWORD_REM=0
PASSWORD_REM=5
SET_PASSCOMPLEX=0
MINCLASS=4
MINLEN=8
UCREDIT=-1
LCREDIT=-1
DCREDIT=-1
OCREDIT=-1
LOCK_ATTACKING_USER=0
DENY_TIMES=5
UNLOCK_TIME=300
ROOT_UNLOCK_TIME=300
DISABLE_ICMP_REDIRECT=0
SET_UMASK=0
UMASK_VALUE=027
SET_TMOUT=0
TMOUT_VALUE=180
SET_FILE_PROPERTY=0
CHMOD_644_FILE="/etc/passwd /etc/group"
CHMOD_600_FILE="/etc/grub2.conf /boot/grub2/grub.cfg /etc/lilo.conf"
CHMOD_400_FILE="/etc/shadow"
CHMOD_751_FILE="/etc/security"
#CHMOD_750_FILE="/etc/rc.d/init.d/ /etc/rc0.d/ /etc/rc1.d/ /etc/rc2.d/ /etc/rc3.d/ /etc/rc4.d/ /etc/rc5.d/ /etc/rc6.d/ /tmp"
SET_PASS_MAX_DAYS=0
PASS_MAX_DAYS_VALUE=90
SET_PASS_MIN_LEN=0
PASS_MIN_LEN_VALUE=8
SET_PASS_MIN_DAYS=0
PASS_MIN_DAYS_VALUE=6
SET_PASS_WARN_AGE=0
PASS_WARN_AGE_VALUE=30
SET_SSH_LOGIN_BANNER=0
SET_SSH_CIPHER=0
SET_SSH_GSSAPI=0
SET_SSH_PROTOCOL=0
SSH_LOGIN_BANNER_VALUE="You have logged onto a secured server..All accesses logged"
SSH_CIPHER_VALUE="Ciphers aes256-ctr,aes192-ctr,aes128-ctr"
SSH_MACS_VALUE="MACs hmac-sha1"
DISABLE_UNUSED_SOFTWARE=0
UNUSED_SOFTWARE_VALUE="printer tftp lpd nfs nfs.lock ypbind daytime sendmail ntalk ident bootps kshell klogin telnet telnet.socket rlogin avahi-daemon snmpd Rhnsd Pcmcia Kudzu Isdn Gpm Cups Anancron auth shell login exec talk imap pop-2 pop-3 finger"
UNUSED_USER_VALUE="adm lp sync shutdown halt news uucp operator games nobody rpm smmsp nfsnobody"
DISABLE_UNUSED_USER=0
RECORDING_LOGIN_EVENTS=0
LOGIN_EVENTS_FILE_NAME="authpriv.log"
RECORDING_KERNEL_WARN=0
KERNEL_WARN_FILE_NAME="kern.log"
RECORDING_ERROR_EVENTS=0
ERROR_FILE_NAME="errors.log"
RECORDING_AUTH_EVENTS=0
AUTH_EVENTS_FILE_NAME="auth.log"
SET_CORE_DUMP=0
SET_VSFTP_SECURITY=0
DENY_ROOT_LOGIN=0
HIDE_ISSUE_INFO=0
FORBIDDEN_TO_SU=0
ADD_ADITIONAL_USER=0
UserName=wangguan
UserPass=f48^XfyB
SET_IP_FILTER=0
ALLOWIP_RANGE="ALL: ALL: ALLOW"
SET_LOG_FILE_PROPERTY=0
CHECK_SYS_VULNER=0
RPM_ASSEMBLY="activemq apr bash file glibc httpd mysql nginx ntp openssh openssl php squid sudo tomcat vsftpd ftp wget samba"
CVE_REPORT_MAX_ITEMS=6
DISABLE_UNUSED_ALIASES=0
UNUSED_ALIASES_VALUE="games ingres system toor uucp manager dumper operator decode marc"
SET_SSH_SYSLOGFACILITY=0
SET_ALWAYS_SET_PATH=0
SET_SSH_LOGLEVEL=0
#================================================================================
# BCLinux - Copyright 2007-2016, Michael Boelen, CISOfy - https://cisofy.com