CloudyScripts 1.6.1 → 1.7.27

data/Rakefile

@@ -12,7 +12,7 @@ require 'rake/testtask'
 
 spec = Gem::Specification.new do |s|
   s.name = 'CloudyScripts'
-  s.version = '1.6.1'
+  s.version = '1.7.27'
   s.has_rdoc = true
   s.extra_rdoc_files = ['README.rdoc', 'LICENSE']
   s.summary = 'Scripts to facilitate programming for infrastructure clouds.'

data/lib/audit/checks/APACHE2.group

@@ -0,0 +1,6 @@
+ID: APACHE2
+Children: 
+   - APACHE2_INIT_2
+   - APACHE2_CONFIG_01
+   - APACHE2_CONFIG_02
+   - APACHE2_CONFIG_03

data/lib/audit/checks/APACHE2_CONFIG_01.check

@@ -0,0 +1,36 @@
+ID: APACHE2_CONFIG_01
+Depends: [APACHE2_INIT_2, HAS_CAT, HAS_BASE, HAS_GREP]
+Description: Get user for running Apache2 from configuration files and export it to APACHE2_USER.
+Type: [info]
+Name: APACHE2 get user from configuration files
+Script: |
+   APACHE2_USER=""
+   TMP_NUM_USERS=$(${CAT} ${APACHE2_CONFIG_FILES} | ${GREP} -c -E '^[[:blank:]]*User')
+
+   if [ ! "${TMP_NUM_USERS}" = 1 ]
+   then
+      script_error_message "Found more than one 'User' directive in configuration files"
+   else
+      TMP_USER=$(${CAT} ${APACHE2_CONFIG_FILES} | ${GREP} -E '^[[:blank:]]*User' | sed -e 's/^[[:blank:]]*User[[:blank:]]*//')
+
+      #In Ubuntu, the user name is a variable and is really defined in /etc/apache2/envvars
+      if echo "${TMP_USER}" | ${GREP} '$' 2>/dev/null 1>/dev/null
+      then
+         TMP_USER_VAR=$( echo "${TMP_USER}" | ${SED} -e 's/\${\?//;s/}//' )
+         TMP_USER=$(${CAT} /etc/apache2/envvars | ${GREP} "${TMP_USER_VAR}" | ${SED} -e "s/^.*${TMP_USER_VAR}[[:blank:]]*=[[:blank:]]*\(.*\)$/\1/")
+         APACHE2_USER=${TMP_USER}
+      else
+         APACHE2_USER=${TMP_USER}
+      fi
+
+      if [ "${APACHE2_USER}" = "" ]
+      then
+         script_error_message "could not find Apache2 user"
+         false
+      else
+         script_info_message "Found Apache2 user: ${APACHE2_USER}"
+         ! false
+      fi
+   fi
+      
+      

data/lib/audit/checks/APACHE2_CONFIG_02.check

@@ -0,0 +1,34 @@
+ID: APACHE2_CONFIG_02
+Depends: [APACHE2_INIT_2, HAS_CAT, HAS_BASE, HAS_GREP]
+Description: Get group for running Apache2 from configuration files and export it to APACHE2_GROUP.
+Type: [info]
+Name: APACHE2 get group from configuration files
+Script: |
+   APACHE2_GROUP=""
+   TMP_NUM_GROUPS=$(${CAT} ${APACHE2_CONFIG_FILES} | ${GREP} -c -E '^[[:blank:]]*Group')
+
+   if [ ! "${TMP_NUM_GROUPS}" = 1 ]
+   then
+      script_error_message "Found more than one 'Group' directive in configuration files"
+   else
+      TMP_GROUP=$(${CAT} ${APACHE2_CONFIG_FILES} | ${GREP} -E '^[[:blank:]]*Group' | sed -e 's/^[[:blank:]]*Group[[:blank:]]*//')
+
+      #In Ubuntu, the group name is a variable and is really defined in /etc/apache2/envvars
+      if echo "${TMP_GROUP}" | ${GREP} '$' 2>/dev/null 1>/dev/null
+      then
+         TMP_GROUP_VAR=$( echo "${TMP_GROUP}" | ${SED} -e 's/\${\?//;s/}//' )
+         TMP_GROUP=$(${CAT} /etc/apache2/envvars | ${GREP} "${TMP_GROUP_VAR}" | ${SED} -e "s/^.*${TMP_GROUP_VAR}[[:blank:]]*=[[:blank:]]*\(.*\)$/\1/")
+         APACHE2_GROUP=${TMP_GROUP}
+      else
+         APACHE2_GROUP=${TMP_GROUP}
+      fi
+
+      if [ "${APACHE2_GROUP}" = "" ]
+      then
+         script_error_message "could not find Apache2 group"
+         false
+      else
+         script_info_message "Found Apache2 group: ${APACHE2_GROUP}"
+         ! false
+      fi
+   fi

data/lib/audit/checks/APACHE2_CONFIG_03.check

@@ -0,0 +1,60 @@
+ID: APACHE2_CONFIG_03
+Depends: [APACHE2_INIT_2, HAS_CAT, HAS_BASE, HAS_GREP]
+Description: Find all directories that are publicly accessible through Apache2.
+Exports: [APACHE2_DOCUMENT_ROOT]
+Type: [info]
+Name: APACHE2 find public directories
+Script: |
+   # first check for alias definitions (see mod_alias for details)
+   TMP_ALIAS_NUM=1
+   for TMP_FILE in ${APACHE2_CONFIG_FILES}
+   do 
+      TMP_PUBLICDIRS=$( ${CAT} ${TMP_FILE} | ${GREP} -E '^[[:blank:]]*(Alias|ScriptAlias)' | ${SED} -e 's/^[[:blank:]]*//' )
+      IFS=$( printf '\n+' ); IFS=${IFS%+}
+
+      for TMP_PUBLICDIR in ${TMP_PUBLICDIRS}
+      do
+         TMP_SHARETYPE=$( echo ${TMP_PUBLICDIR} | ${CUT} -d" " -f1)
+         TMP_DIRECTORY=$( echo ${TMP_PUBLICDIR} | ${CUT} -d" " -f3 | ${SED} -e 's/^"//;s/"$//')
+         TMP_URL=$( echo ${TMP_PUBLICDIR} | ${CUT} -d" " -f2 | ${SED} -e 's/^"//;s/"$//')
+
+         script_data "apache2.aliases.${TMP_ALIAS_NUM}.defined_in" "${TMP_FILE}" 
+         script_data "apache2.aliases.${TMP_ALIAS_NUM}.type" "${TMP_SHARETYPE}" 
+         script_data "apache2.aliases.${TMP_ALIAS_NUM}.directory" "${TMP_DIRECTORY}"
+         script_data "apache2.aliases.${TMP_ALIAS_NUM}.url" "${TMP_URL}"
+         script_info_message "Directory ${TMP_DIRECTORY} is accessible as ${TMP_URL} through alias in file ${TMP_FILE}"
+         TMP_ALIAS_NUM=$(( ${TMP_ALIAS_NUM} + 1 ))
+      done
+      IFS=" "
+   done
+
+   #then check for document root definitions
+   #I've dropped the idea of checking that there is only one document root definition, there may be 
+   #multiple vhosts, each with a document root definition.
+   TMP_DOCROOT_NUM=1
+   for TMP_FILE in ${APACHE2_CONFIG_FILES}
+   do 
+      TMP_PUBLICDIRS=$( ${CAT} ${TMP_FILE} | ${GREP} -E '^[[:blank:]]*DocumentRoot' | ${SED} -e 's/^[[:blank:]]*//' )
+      IFS=$( printf '\n+' ); IFS=${IFS%+}
+      for TMP_PUBLICDIR in ${TMP_PUBLICDIRS}
+      do
+         TMP_SHARETYPE=$( echo ${TMP_PUBLICDIR} | ${CUT} -d" " -f1)
+         TMP_DIRECTORY=$( echo ${TMP_PUBLICDIR} | ${CUT} -d" " -f2)
+
+         script_data "apache2.document_roots.${TMP_DOCROOT_NUM}.defined_in" "${TMP_FILE}" 
+         script_data "apache2.document_roots.${TMP_DOCROOT_NUM}.type" "${TMP_SHARETYPE}" 
+         script_data "apache2.document_roots.${TMP_DOCROOT_NUM}.directory" "${TMP_DIRECTORY}"
+
+         script_info_message "Directory ${TMP_DIRECTORY} is accessible as document root in file ${TMP_FILE}"
+
+         #up to now, I don't have a better idea on how to set this ... normally there should be one 
+         #document root definition for port 80 of the principal server (not a vhost), that should be
+         #used here ...
+         APACHE2_DOCUMENT_ROOT="${TMP_DIRECTORY}"
+         TMP_DOCROOT_NUM=$(( ${TMP_DOCROOT_NUM} + 1 ))
+      done
+      IFS=" "
+   done
+
+   IFS=${TMP_IFS}
+   

data/lib/audit/checks/APACHE2_CONFIG_04.check

@@ -0,0 +1,23 @@
+ID: APACHE2_CONFIG_04
+Depends: [APACHE2_CONFIG_01, APACHE_CONFIG_02, HAS_GROUPS]
+Description: Find groups for Apache2 user and verify that she is only in one group and that this group corresponds to the web server group.
+Type: [info]
+Name: APACHE2 check groups of web server user
+Script: |
+   if ${GROUPS} ${APACHE2_USER}
+   then
+      script_error_message "something went wrong while executing the ${GROUP} command to find the groups of ${APACHE2_USER}"
+      false
+   else
+      TMP_GROUPS=$(${GROUPS} ${APACHE2_USER})
+      #strip leading and trailing whitespace
+      TMP_GROUPS=$(echo ${TMP_GROUPS})
+      
+      if [ "${APACHE2_GROUP}" = "${TMP_GROUPS}" ]
+      then
+         ! false
+      else
+         script_warn_message "Either apache user ${APACHE2_USER} with apache group ${APACHE2_GROUP} has multiple groups or not the same group as in the web server configuration file: ${TMP_GROUPS}"
+         false
+      fi
+   fi

data/lib/audit/checks/APACHE2_CONFIG_05.check

@@ -0,0 +1,23 @@
+ID: APACHE2_CONFIG_05
+Depends: [APACHE2_CONFIG_01, APACHE_CONFIG_02, HAS_GROUPS]
+Description: Check that the ServerSignature directive is off.
+Type: [info]
+Name: APACHE2 check groups of web server user
+Script: |
+   if ${GROUPS} ${APACHE2_USER}
+   then
+      script_error_message "something went wrong while executing the ${GROUP} command to find the groups of ${APACHE2_USER}"
+      false
+   else
+      TMP_GROUPS=$(${GROUPS} ${APACHE2_USER})
+      #strip leading and trailing whitespace
+      TMP_GROUPS=$(echo ${TMP_GROUPS})
+      
+      if [ "${APACHE2_GROUP}" = "${TMP_GROUPS}" ]
+      then
+         ! false
+      else
+         script_warn_message "Either apache user ${APACHE2_USER} with apache group ${APACHE2_GROUP} has multiple groups or not the same group as in the web server configuration file: ${TMP_GROUPS}"
+         false
+      fi
+   fi

data/lib/audit/checks/APACHE2_CONFIG_06.check

@@ -0,0 +1,30 @@
+ID: APACHE2_CONFIG_06
+Depends: [APACHE2_CONFIG_01, APACHE_CONFIG_02, HAS_GROUPS]
+Description: Check that Apache2 user is not allowed to login in /etc/passwd and /etc/shadow
+Type: [info]
+Name: Check that Apache2 user login is disabled
+Script: |
+   #test that user is not allowed to login via /etc/passwd
+   TMP_PASSWD=$(${GREP} "${APACHE2_USER}" "${PASSWD_FILE}" | ${CUT} -d: -f2)
+
+   if ! [ "${TMP_PASSWD}" = x ]
+   then
+      script_error_message "Apache2 user ${APACHE2_USER} is allowed to login in ${PASSWD_FILE}"
+   fi
+
+   #test that user is not allowed to login via /etc/shadow
+   #this test needs superuser privileges to access /etc/shadow
+   if [ "${HAVE_SUPERUSER_PRIVILEGES}" = 1 ]
+   then
+      TMP_SHADOW=$(execute_as_superuser "${GREP} \"${APACHE2_USER}\" \"${SHADOW_FILE}\" | ${CUT} -d: -f2")
+
+      if [ ! "${TMP_SHADOW}" = '*' ] || [ ! "${TMP_SHADOW##\!}" = "${TMP_SHADOW}" ]
+      then
+         script_error_message "Apache2 user ${APACHE2_USER} is allowed to login in ${SHADOW_FILE}"
+      fi
+   fi
+
+   #test that user is not allowed to login via ssh
+   #test that user is not allowed to login via rlogin
+   #test that user is not allowed to login via ftp
+      

data/lib/audit/checks/APACHE2_INIT_1.check

@@ -0,0 +1,14 @@
+ID: APACHE2_INIT_1
+Depends: [HAS_PS, HAS_SED, HAS_GREP]
+Imports: [PS, SED, GREP]
+Exports: [APACHE2_PID]
+Description: Check if the Apache server version 2 is running. 
+Type: [check, export]
+Script: |
+   APACHE2_PID=$(${PS} -A | ${GREP} apache2 | ${SED} -e 's/^[[:blank:]]*\([0-9]\+\)[[:blank:]]\+.*/\1/')
+   if [ ! -z "${APACHE2_PID}" ]
+   then 
+      ! false
+   else 
+      false
+   fi

data/lib/audit/checks/APACHE2_INIT_2.check

@@ -0,0 +1,66 @@
+# Copyright 2010-2011 SecludIT
+#
+#  Licensed under the Apache License, Version 2.0 (the "License");
+#  you may not use this file except in compliance with the License.
+#  You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+#  Unless required by applicable law or agreed to in writing, software
+#  distributed under the License is distributed on an "AS IS" BASIS,
+#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#  See the License for the specific language governing permissions and
+#  limitations under the License.
+
+ID: APACHE2_INIT_2
+Imports: [SED, GREP, CUT]
+Exports: [APACHE2_CONFIG_FILES]
+Depends: [HAS_BASE, HAS_GREP, HAS_CUT]
+Description: Find the Apache 2 daemon configuration files.
+WarningMessage: > 
+   Apache2 daemon configuration file not found, Apache2 checks will be omitted. 
+Type: [check, export]
+Script: |
+   TMP_UNTREATED_CONFIG_FILES=""
+   APACHE2_CONFIG_FILES=""
+   for path in /etc/apache2/apache2.conf /etc/apache2/httpd.conf
+   do
+      ls ${path} 2>/dev/null 1>/dev/null &&
+         TMP_UNTREATED_CONFIG_FILES="${TMP_UNTREATED_CONFIG_FILES}${path}:"
+   done
+
+   while [ ! -z "${TMP_UNTREATED_CONFIG_FILES%%:}" ]
+   do
+      #get next configuration file from the untreated config files fifo
+      NEXT_CONFIG_FILE=$(echo "${TMP_UNTREATED_CONFIG_FILES}" | ${CUT} -d: -f1) && TMP_UNTREATED_CONFIG_FILES=$(echo "${TMP_UNTREATED_CONFIG_FILES}" | ${CUT} -d: -f2-)
+
+      if [ -z "${NEXT_CONFIG_FILE}" ]; then continue; fi
+
+      #for each include directive in the config file (automatically expands file expressions with *)
+      for f in $(${GREP} -E "^[[:blank:]]*Include" "${NEXT_CONFIG_FILE}" | ${SED} -e 's/^[[:blank:]]*Include[[:blank:]]\+\([^#]\+\)/\1/')
+      do
+         #if a whole directory is included, we want to expand to every file in the directory
+         if [ -d "$f" ]; then f="${f%%/}/*"; fi
+
+         #to handle the 'every file in directory' we just constructed
+         for g in $f
+         do
+            #check that file is not in any fifo yet; this avoids looping forever if there is an include loop
+            if ! ( echo "${APACHE2_CONFIG_FILES}" | ${GREP} "$g" 1>/dev/null 2>/dev/null || echo "${TMP_UNTREATED_CONFIG_FILES}" | ${GREP} "$g" 1>/dev/null 2>/dev/null )
+            then
+               #append newly found configuration file to the fifo of untreated files
+               TMP_UNTREATED_CONFIG_FILES="${TMP_UNTREATED_CONFIG_FILES%%:}:$g:"
+            fi
+         done
+      done
+      #all includes from this file fleshed out, put it to the treated config files
+      APACHE2_CONFIG_FILES="${APACHE2_CONFIG_FILES%% } ${NEXT_CONFIG_FILE}"
+      script_info_message "Found configuration file ${NEXT_CONFIG_FILE}"
+   done
+
+   #to remove nasty leading/trailing colons
+   APACHE2_CONFIG_FILES="${APACHE2_CONFIG_FILES%% }"
+   APACHE2_CONFIG_FILES="${APACHE2_CONFIG_FILES## }"
+
+   #check only successful if at least one configuration file is found
+   [ ! "${APACHE2_CONFIG_FILES}" = "" ]

data/lib/audit/checks/APACHE2_INIT_3.check

@@ -0,0 +1,13 @@
+ID: APACHE2_INIT_3
+Depends: [HAS_WHICH, HAS_BASE]
+Imports: [WHICH, HEAD]
+Exports: [APACHE2_BINARY, APACHE2CTL_BINARY]
+Description: Check for Apache2 binaries.
+Type: [check, info, export]
+Script: |
+   APACHE2_BINARY=$(${WHICH} apache2)
+   APACHE2CTL_BINARY=$(${WHICH} apache2ctl)
+   TMP_APACHE2_NAME=$(${APACHE2_BINARY} -v | ${HEAD} -1 | ${SED} -e 's/^[^:]*:\([^\/]\+\)\/\(.*\)/\1/')
+   TMP_APACHE2_VERSION=$(${APACHE2_BINARY} -v | ${HEAD} -1 | ${SED} -e 's/^[^:]*:\([^\/]\+\)\/\(.*\)/\2/')
+   echo "%% ${MY_SCRIPT_ID} %% INFO %% PROGRAM_NAME %% ${TMP_APACHE2_NAME} %% ${TMP_APACHE2_VERSION}"
+   ${WHICH} apache2 apache2ctl 2>/dev/null 1>/dev/null

data/lib/audit/checks/APACHE2_USER_7.check

@@ -0,0 +1,17 @@
+ID: APACHE2_USER_7
+Depends: [APACHE2_INIT_2, HAS_CAT, HAS_BASE, HAS_GREP]
+Description: Find all directories that are publicly accessible through Apache2.
+Exports: [APACHE2_DOCUMENT_ROOT]
+Type: [info]
+Name: APACHE2 find public directories
+Script: |
+   TMP_SHELL=$(${GREP} "${APACHE2_USER}" "${PASSWD_FILE}" | ${CUT} -d: -f7- )
+
+   if [ "${TMP_SHELL}" = "/bin/nologin" ] ||
+      [ "${TMP_SHELL}" = "/bin/false" ]
+   then
+      ! false
+   else
+      script_warn_message "Apache2 user has login shell ${TMP_SHELL} which is not recommended (should be an invalid shell)"
+      false
+   fi

data/lib/audit/checks/BACKUP_HOME_DOTFILES.check

@@ -0,0 +1,26 @@
+ID: BACKUP_HOME_DOTFILES
+Name: Create a backup copy of dotfiles in home directories
+Depends: [HAS_BASE, HAS_FIND, HAS_CAT, HAS_CUT, HAS_COMPRESSOR, MAYBE_HAS_SUPERUSER]
+Imports: [HAS_COMPRESSOR, MAYBE_HAS_SUPERUSER]
+Description: Create a backup copy of the /var/log directory
+Script: |
+   #if [ "${DU}" = "" ]
+   #then
+   #   TMP_SIZE=0
+   #else
+   #   TMP_SIZE=$( ${DU} -s | ${AWK} '{ print $1 }' )
+   #fi
+
+   #if [ ${TMP_SIZE} -gt 30000 ]
+   #then
+   #   script_warning_message "/var/log directory is bigger than 30M (${TMP_SIZE}k) and will not be backuped"
+   #else
+      TMP_FILES=$( ${RUN_AS_SUPERUSER} ${FIND} $( ${CAT} ${PASSWD_FILE} | ${CUT} -d: -f6 ) -maxdepth 1 -name '.*' 2>/dev/null )
+      ${RUN_AS_SUPERUSER} ${COMPRESSOR} ${AUDIT_DIRECTORY}/BACKUP_HOME_DOTFILES.${COMPRESSOR_SUFFIX} ${TMP_FILES} 2>/dev/null
+      TMP_EXITCODE=$?
+      if [ ${TMP_EXITCODE} -eq 0 ]
+      then
+         script_attach_file "${AUDIT_DIRECTORY}/BACKUP_HOME_DOTFILES.${COMPRESSOR_SUFFIX}" 'Backup of the ~/.* directories'
+      fi 
+      script_set_exit_code ${TMP_EXITCODE}
+   #fi

data/lib/audit/checks/BACKUP_LOG.check

@@ -0,0 +1,24 @@
+ID: BACKUP_LOG
+Name: Create a backup copy of the /var/log directory
+Depends: [HAS_COMPRESSOR, MAYBE_HAS_SUPERUSER]
+Description: Create a backup copy of the /var/log directory
+Script: |
+   #if [ "${DU}" = "" ]
+   #then
+   #   TMP_SIZE=0
+   #else
+   #   TMP_SIZE=$( ${DU} -s | ${AWK} '{ print $1 }' )
+   #fi
+
+   #if [ ${TMP_SIZE} -gt 30000 ]
+   #then
+   #   script_warning_message "/var/log directory is bigger than 30M (${TMP_SIZE}k) and will not be backuped"
+   #else
+      ${RUN_AS_SUPERUSER} ${COMPRESSOR} ${AUDIT_DIRECTORY}/BACKUP_LOG.${COMPRESSOR_SUFFIX} /var/log 2>/dev/null
+      TMP_EXITCODE=$?
+      if [ ${TMP_EXITCODE} -eq 0 ]
+      then
+         script_attach_file "${AUDIT_DIRECTORY}/BACKUP_LOG.${COMPRESSOR_SUFFIX}" "Backup of the /var/log directory"
+      fi 
+      script_set_exit_code ${TMP_EXITCODE}
+   #fi

data/lib/audit/checks/BACKUP_MAIL.check

@@ -0,0 +1,19 @@
+ID: BACKUP_MAIL
+Name: Backup mail files
+Depends: [HAS_COMPRESSOR, MAYBE_HAS_SUPERUSER, VAR_LIST_HOME_DIRECTORIES]
+Description: Create a backup copy of the /var/mail directory and $HOME/mbox files
+Script: |
+   ${RUN_AS_SUPERUSER} ${COMPRESSOR} ${AUDIT_DIRECTORY}/BACKUP_MAIL.${COMPRESSOR_SUFFIX} /var/mail 2>/dev/null 1>/dev/null
+   TMP_EXITCODE=$?
+   IFS=:
+   for dir in ${HOME_DIRS_LIST}
+   do
+      ${RUN_AS_SUPERUSER} ${COMPRESSOR} ${AUDIT_DIRECTORY}/BACKUP_MAIL.${COMPRESSOR_SUFFIX} ${dir}/mbox 2>/dev/null 1>/dev/null
+      TMP_EXITCODE=$(( ${TMP_EXITCODE} | $? ))
+   done
+
+   if [ -f "${AUDIT_DIRECTORY}/BACKUP_MAIL.${COMPRESSOR_SUFFIX}" ]
+   then
+      script_attach_file "${AUDIT_DIRECTORY}/BACKUP_MAIL.${COMPRESSOR_SUFFIX}" "Mails backup"
+   fi 
+   script_set_exit_code ${TMP_EXITCODE}

data/lib/audit/checks/BACKUP_WEB.check

@@ -0,0 +1,12 @@
+ID: BACKUP_WEB
+Name: Create a backup copy of the /var/www and /srv/www directory
+Depends: [HAS_COMPRESSOR, MAYBE_HAS_SUPERUSER]
+Description: Create a backup copy of the /var/www and /srv/www directory
+Script: |
+   ${RUN_AS_SUPERUSER} ${COMPRESSOR} ${AUDIT_DIRECTORY}/BACKUP_WWW.${COMPRESSOR_SUFFIX} /var/www /srv/www 2>/dev/null 1>/dev/null
+   TMP_EXITCODE=$?
+   if [ -f "${AUDIT_DIRECTORY}/BACKUP_WWW.${COMPRESSOR_SUFFIX}" ]
+   then
+      script_attach_file "${AUDIT_DIRECTORY}/BACKUP_WWW.${COMPRESSOR_SUFFIX}" "Backup of the /var/www directory"
+   fi 
+   script_set_exit_code ${TMP_EXITCODE}

data/lib/audit/checks/CONFIGURATION_BACKUP.check

@@ -0,0 +1,14 @@
+ID: CONFIGURATION_BACKUP
+Name: Backup configuration
+Depends: [HAS_COMPRESSOR, MAYBE_HAS_SUPERUSER]
+Imports: [COMPRESSOR, COMPRESSOR_SUFFIX]
+Description: >
+   Create an archive of all files in the /etc directory
+Script: |
+   ${RUN_AS_SUPERUSER} ${COMPRESSOR} ${AUDIT_DIRECTORY}/CONFIGURATION_BACKUP.${COMPRESSOR_SUFFIX} /etc 2>/dev/null
+   TMP_EXITCODE=$?
+   if [ ${TMP_EXITCODE} -eq 0 ]
+   then
+      script_attach_file "${AUDIT_DIRECTORY}/CONFIGURATION_BACKUP.${COMPRESSOR_SUFFIX}" "Backup of the /etc directory"
+   fi 
+   script_set_exit_code ${TMP_EXITCODE}