HEX
Server: nginx/1.16.1
System: Linux ecs-04358622 4.19.90-2107.6.0.0100.oe1.bclinux.x86_64 #1 SMP Wed Dec 1 19:59:44 CST 2021 x86_64
User: nginx (994)
PHP: 8.0.0
Disabled: NONE
Upload Files
File: //opt/BCLinux/bse/secure_check/c15_disableUnUsedSoft
#!/bin/sh

#=======================================================
InsertSection "check the unused software"

rhel6_softck()
{
    countServ="0"
    resultServ=""
    #needStopSer="printer tftp lpd nfs nfs.lock ypbind daytime sendmail ntalk ident bootps kshell klogin telnet rlogin avahi-daemon snmpd Rhnsd Pcmcia Kudzu Isdn Gpm Cups Anancron auth shell login exec talk imap pop-2 pop-3 finger"
    needStopSer=$UNUSED_SOFTWARE_VALUE
    for i in $needStopSer
    do
        rock=`chkconfig --list sshd | awk '{print $5 " " $6 " " $7}' | grep on | wc -l`
        if [ ${rock} -gt 0 ];then
            countServ=`expr $countServ + 1 `
            resultServ=${resultServ}:${i}
        fi
    done

    if [ $countServ -gt 0 ];then
        echo "c15" >> $RESULT_FILE
        echo "" >> $RESULT_FILE
        logtext "WRN_C15_01: $countServ Services need stop, check log for details"
        logtext "Suggestion: $(loadtext TXT_SUG_C15)"
        #add details
        Display --indent 2 --text "- Service ${resultServ} need stop... " --result WARNING --color RED
        AddHP 0 1
    else
        #echo "This system has no $i service"
        logtext "No service need stop, checking ok"
        Display --indent 2 --text "- No service need stop... " --result OK --color GREEN
        AddHP 1 1
    fi
}

rhel78_softck()
{
    countServ="0"
    resultServ=""
    #needStopSer="printer tftp lpd nfs.lock ypbind daytime sendmail ntalk ident bootps kshell klogin telnet rlogin avahi-daemon snmpd Rhnsd Pcmcia Kudzu Isdn Gpm Cups Anancron auth shell login exec talk imap pop-2 pop-3 finger"
    needStopSer=$UNUSED_SOFTWARE_VALUE
    system_active_ser_soc=$(systemctl list-units --type=service --type=socket  | grep -v "failed\|exited" | grep  ".socket \|.service "  | awk -F "loaded" '{print $1}' | sed  's/ //g')
    for i in $needStopSer
    do
        rock=`echo $system_active_ser_soc | grep -w ${i} | wc -l`
        if [ ${rock} -gt 0 ];then
            countServ=`expr $countServ + 1 `
            resultServ=${resultServ}:${i}
        fi
    done
    if [ ${countServ} -gt 0 ];then
        echo "c15" >> $RESULT_FILE
        echo "" >> $RESULT_FILE
        logtext "WRN_C15_01: need stop ${resultServ} services"
        logtext "Suggestion: $(loadtext TXT_SUG_C15)"
        Display --indent 2 --text "- Service ${resultServ} need stop... " --result WARNING --color RED
        AddHP 0 1
    else
        logtext "No service need to stop, checking ok"
        Display --indent 2 --text "- No service need stop... " --result OK --color GREEN
        AddHP 1 1
    fi
}



case ${OS_ID} in
    "\"centos\"" | "centos" |"CentOS" | "\"CentOS\"" | "\"rhel\"" | "rhel" | "\"redhat\"" | "redhat" | "\"bclinux\"" | "bclinux" | "\"BCLinux\"" | "BCLinux"|"\"openEuler\"") 
        case ${OS_DISTRO} in
            "\"7\"" | "7"| "\"8\"" | "8")
            rhel78_softck
            ;;
	    "\"20.09\"" |"20.12"|"21.10"|"22.10")
	    rhel78_softck
	    ;;
            "\"6\"" | "6")
            rhel6_softck
            ;;
            *)
            logtext "WRN_C15_01: Detected this system is  ${OS_ID}-${OS_DISTRO}, and not check the unused sotfware"
            Display --indent 2 --text "- No match items... " --result WARNING --color RED
            ;;
        esac
    ;;
    *)
        logtext "WRN_C15_02: This is not RHEL Distro, we do not support ${OS_ID}-${OS_DISTRO} at this moment"
        Display --indent 2 --text "- We do not support ${OS_ID}-${OS_DISTRO} at this moment... " --result WARNING --color RED
    ;;
esac