diff options
| author | Eugeni Dodonov <eugeni@mandriva.org> | 2009-06-23 20:53:31 +0000 |
|---|---|---|
| committer | Eugeni Dodonov <eugeni@mandriva.org> | 2009-06-23 20:53:31 +0000 |
| commit | 6fc30bba6219bd1020f055170e4523f0a61c5d4f (patch) | |
| tree | e0529ed5aebb2fd5fcf13d6b7457058d75063109 /cron-sh/diff_check.sh | |
| parent | c8ede8c05478d1f85a43d8029cb082c2a7d6e8cb (diff) | |
| download | msec-6fc30bba6219bd1020f055170e4523f0a61c5d4f.tar msec-6fc30bba6219bd1020f055170e4523f0a61c5d4f.tar.gz msec-6fc30bba6219bd1020f055170e4523f0a61c5d4f.tar.bz2 msec-6fc30bba6219bd1020f055170e4523f0a61c5d4f.tar.xz msec-6fc30bba6219bd1020f055170e4523f0a61c5d4f.zip | |
Added support for CHECK_FIREWALL.
Diffstat (limited to 'cron-sh/diff_check.sh')
| -rwxr-xr-x | cron-sh/diff_check.sh | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/cron-sh/diff_check.sh b/cron-sh/diff_check.sh index 5f020cc..4761dc2 100755 --- a/cron-sh/diff_check.sh +++ b/cron-sh/diff_check.sh @@ -140,6 +140,24 @@ if [[ ${CHECK_OPEN_PORT} == yes ]]; then fi +### Changed firewall +if [[ ${CHECK_FIREWALL} == yes ]]; then + + if [[ -f ${FIREWALL_YESTERDAY} ]]; then + diff -u ${FIREWALL_YESTERDAY} ${FIREWALL_TODAY} 1> ${FIREWALL_DIFF} + if [ -s ${FIREWALL_DIFF} ]; then + printf "\nSecurity Warning: There are modifications for firewall configuration on your machine :\n" >> ${TMP} + grep '^+' ${FIREWALL_DIFF} | grep -vw "^+++ " | sed 's|^.||'|sed -e 's/%/%%/g' | while read file; do + printf "\t\t- New entries : ${file}\n" + done >> ${TMP} + grep '^-' ${FIREWALL_DIFF} | grep -vw "^--- " | sed 's|^.||'|sed -e 's/%/%%/g' | while read file; do + printf "\t\t- Removed entries : ${file}\n" + done >> ${TMP} + fi + fi + +fi + ### rpm database if [[ ${CHECK_RPM} == yes ]]; then if [[ -f ${RPM_QA_YESTERDAY} ]]; then |