File: //opt/BCLinux/bse/secure_check/c15_disableUnUsedSoft
#!/bin/sh
#=======================================================
InsertSection "check the unused software"
rhel6_softck()
{
countServ="0"
resultServ=""
#needStopSer="printer tftp lpd nfs nfs.lock ypbind daytime sendmail ntalk ident bootps kshell klogin telnet rlogin avahi-daemon snmpd Rhnsd Pcmcia Kudzu Isdn Gpm Cups Anancron auth shell login exec talk imap pop-2 pop-3 finger"
needStopSer=$UNUSED_SOFTWARE_VALUE
for i in $needStopSer
do
rock=`chkconfig --list sshd | awk '{print $5 " " $6 " " $7}' | grep on | wc -l`
if [ ${rock} -gt 0 ];then
countServ=`expr $countServ + 1 `
resultServ=${resultServ}:${i}
fi
done
if [ $countServ -gt 0 ];then
echo "c15" >> $RESULT_FILE
echo "" >> $RESULT_FILE
logtext "WRN_C15_01: $countServ Services need stop, check log for details"
logtext "Suggestion: $(loadtext TXT_SUG_C15)"
#add details
Display --indent 2 --text "- Service ${resultServ} need stop... " --result WARNING --color RED
AddHP 0 1
else
#echo "This system has no $i service"
logtext "No service need stop, checking ok"
Display --indent 2 --text "- No service need stop... " --result OK --color GREEN
AddHP 1 1
fi
}
rhel78_softck()
{
countServ="0"
resultServ=""
#needStopSer="printer tftp lpd nfs.lock ypbind daytime sendmail ntalk ident bootps kshell klogin telnet rlogin avahi-daemon snmpd Rhnsd Pcmcia Kudzu Isdn Gpm Cups Anancron auth shell login exec talk imap pop-2 pop-3 finger"
needStopSer=$UNUSED_SOFTWARE_VALUE
system_active_ser_soc=$(systemctl list-units --type=service --type=socket | grep -v "failed\|exited" | grep ".socket \|.service " | awk -F "loaded" '{print $1}' | sed 's/ //g')
for i in $needStopSer
do
rock=`echo $system_active_ser_soc | grep -w ${i} | wc -l`
if [ ${rock} -gt 0 ];then
countServ=`expr $countServ + 1 `
resultServ=${resultServ}:${i}
fi
done
if [ ${countServ} -gt 0 ];then
echo "c15" >> $RESULT_FILE
echo "" >> $RESULT_FILE
logtext "WRN_C15_01: need stop ${resultServ} services"
logtext "Suggestion: $(loadtext TXT_SUG_C15)"
Display --indent 2 --text "- Service ${resultServ} need stop... " --result WARNING --color RED
AddHP 0 1
else
logtext "No service need to stop, checking ok"
Display --indent 2 --text "- No service need stop... " --result OK --color GREEN
AddHP 1 1
fi
}
case ${OS_ID} in
"\"centos\"" | "centos" |"CentOS" | "\"CentOS\"" | "\"rhel\"" | "rhel" | "\"redhat\"" | "redhat" | "\"bclinux\"" | "bclinux" | "\"BCLinux\"" | "BCLinux"|"\"openEuler\"")
case ${OS_DISTRO} in
"\"7\"" | "7"| "\"8\"" | "8")
rhel78_softck
;;
"\"20.09\"" |"20.12"|"21.10"|"22.10")
rhel78_softck
;;
"\"6\"" | "6")
rhel6_softck
;;
*)
logtext "WRN_C15_01: Detected this system is ${OS_ID}-${OS_DISTRO}, and not check the unused sotfware"
Display --indent 2 --text "- No match items... " --result WARNING --color RED
;;
esac
;;
*)
logtext "WRN_C15_02: This is not RHEL Distro, we do not support ${OS_ID}-${OS_DISTRO} at this moment"
Display --indent 2 --text "- We do not support ${OS_ID}-${OS_DISTRO} at this moment... " --result WARNING --color RED
;;
esac