CloudyScripts 2.11.45 → 2.11.46
Sign up to get free protection for your applications and to get access to all the features.
- data/Rakefile +1 -1
- data/lib/help/remote_command_handler.rb +5 -0
- data/lib/help/state_transition_helper.rb +34 -9
- data/lib/scripts/ec2/copy_ami.rb +17 -1
- data/lib/scripts/vCloud/open_port_checker_vm.rb +1 -1
- metadata +169 -169
data/Rakefile
CHANGED
@@ -12,7 +12,7 @@ require 'rake/testtask'
|
|
12
12
|
|
13
13
|
spec = Gem::Specification.new do |s|
|
14
14
|
s.name = 'CloudyScripts'
|
15
|
-
s.version = '2.11.
|
15
|
+
s.version = '2.11.46'
|
16
16
|
s.has_rdoc = true
|
17
17
|
s.extra_rdoc_files = ['README.rdoc', 'LICENSE']
|
18
18
|
s.summary = 'Scripts to facilitate programming for infrastructure clouds.'
|
@@ -280,6 +280,11 @@ class RemoteCommandHandler
|
|
280
280
|
stdout = []
|
281
281
|
stderr = []
|
282
282
|
result = remote_exec_helper(exec_string, stdout, stderr, true)
|
283
|
+
#dump stdout in case of error
|
284
|
+
if result == false
|
285
|
+
em = "RemoteCommandHandler: #{exec_string} lead to stdout message: #{stdout.join().strip}"
|
286
|
+
@logger.info(em) unless stdout.size == 0
|
287
|
+
end
|
283
288
|
em = "RemoteCommandHandler: #{exec_string} lead to stderr message: #{stderr.join().strip}"
|
284
289
|
@logger.info(em) unless stderr.size == 0
|
285
290
|
raise Exception.new(em) unless result == true || raise_exception == false
|
@@ -143,6 +143,7 @@ module StateTransitionHelper
|
|
143
143
|
kernel_id = res['reservationSet']['item'][0]['instancesSet']['item'][0]['kernelId']
|
144
144
|
ramdisk_id = res['reservationSet']['item'][0]['instancesSet']['item'][0]['ramdiskId']
|
145
145
|
architecture = res['reservationSet']['item'][0]['instancesSet']['item'][0]['architecture']
|
146
|
+
root_device_name = res['reservationSet']['item'][0]['instancesSet']['item'][0]['rootDeviceName']
|
146
147
|
elsif state['code'].to_i != 0
|
147
148
|
post_message("instance in state #{state['name']}")
|
148
149
|
raise Exception.new('instance failed to start up')
|
@@ -150,7 +151,7 @@ module StateTransitionHelper
|
|
150
151
|
post_message("instance still starting up...")
|
151
152
|
end
|
152
153
|
end
|
153
|
-
return instance_id, dns_name, availability_zone, kernel_id, ramdisk_id, architecture
|
154
|
+
return instance_id, dns_name, availability_zone, kernel_id, ramdisk_id, architecture, root_device_name
|
154
155
|
end
|
155
156
|
|
156
157
|
# Start an instance
|
@@ -532,7 +533,7 @@ module StateTransitionHelper
|
|
532
533
|
@logger.debug "creating mount point #{mount_point}"
|
533
534
|
remote_handler().mkdir(mount_point)
|
534
535
|
end
|
535
|
-
#XXX: detect new kernel that have /dev/xvdX device node
|
536
|
+
#XXX: detect new kernel that have /dev/xvdX device node instead of /dev/sdX
|
536
537
|
if device =~ /\/dev\/sd[a-z]/
|
537
538
|
if !remote_handler().file_exists?(device)
|
538
539
|
post_message("'#{device}' device node not found, checking for new kernel support...")
|
@@ -600,6 +601,15 @@ module StateTransitionHelper
|
|
600
601
|
post_message("#{msg}")
|
601
602
|
end
|
602
603
|
|
604
|
+
# Get root partition
|
605
|
+
def get_root_device_name()
|
606
|
+
post_message("Retrieving '/' root device name...")
|
607
|
+
@logger.debug "get root device name"
|
608
|
+
root_device = remote_handler().get_root_device()
|
609
|
+
@logger.debug "Found '#{root_device}' as root device"
|
610
|
+
return root_device
|
611
|
+
end
|
612
|
+
|
603
613
|
# Get root partition label
|
604
614
|
def get_root_partition_label()
|
605
615
|
post_message("Retrieving '/' root partition label if any...")
|
@@ -788,14 +798,14 @@ module StateTransitionHelper
|
|
788
798
|
|
789
799
|
def disable_ssh_tty(host)
|
790
800
|
post_message("going to disable SSH tty on #{host}...")
|
791
|
-
@logger.debug "disable SSH tty on "
|
801
|
+
@logger.debug "disable SSH tty on #{host}"
|
792
802
|
remote_handler().disable_sudoers_requiretty()
|
793
803
|
post_message("SSH tty disabled")
|
794
804
|
end
|
795
805
|
|
796
806
|
def enable_ssh_tty(host)
|
797
807
|
post_message("going to enable SSH tty on #{host}...")
|
798
|
-
@logger.debug "enable SSH tty on"
|
808
|
+
@logger.debug "enable SSH tty on #{host}"
|
799
809
|
remote_handler().enable_sudoers_requiretty()
|
800
810
|
post_message("SSH tty enabled")
|
801
811
|
end
|
@@ -896,7 +906,10 @@ module StateTransitionHelper
|
|
896
906
|
'aki-525ea73b' => 'pv-grub-hd00_1.02-i386',
|
897
907
|
'aki-8e5ea7e7' => 'pv-grub-hd00_1.02-x86_64',
|
898
908
|
'aki-805ea7e9' => 'pv-grub-hd0_1.02-i386',
|
899
|
-
'aki-825ea7eb' => 'pv-grub-hd0_1.02-x86_64'
|
909
|
+
'aki-825ea7eb' => 'pv-grub-hd0_1.02-x86_64',
|
910
|
+
#RHEL kernel Amazon Kernel ID
|
911
|
+
'aki-36ed075f' => 'aki-rhel-i386',
|
912
|
+
'aki-08ed0761' => 'aki-rhel-x86_64'
|
900
913
|
},
|
901
914
|
'us-west-1' => {'aki-9da0f1d8' => 'pv-grub-hd00-V1.01-i386',
|
902
915
|
'aki-9fa0f1da' => 'pv-grub-hd00-V1.01-x86_64',
|
@@ -905,7 +918,10 @@ module StateTransitionHelper
|
|
905
918
|
'aki-87396bc2' => 'pv-grub-hd00_1.02-i386',
|
906
919
|
'aki-81396bc4' => 'pv-grub-hd00_1.02-x86_64',
|
907
920
|
'aki-83396bc6' => 'pv-grub-hd0_1.02-i386',
|
908
|
-
'aki-8d396bc8' => 'pv-grub-hd0_1.02-x86_64'
|
921
|
+
'aki-8d396bc8' => 'pv-grub-hd0_1.02-x86_64',
|
922
|
+
#RHEL kernel Amazon Kernel ID
|
923
|
+
'aki-772c7f32' => 'aki-rhel-i386',
|
924
|
+
'aki-712c7f34' => 'aki-rhel-x86_64'
|
909
925
|
},
|
910
926
|
'eu-west-1' => {'aki-47eec433' => 'pv-grub-hd00-V1.01-i386',
|
911
927
|
'aki-41eec435' => 'pv-grub-hd00-V1.01-x86_64',
|
@@ -914,7 +930,10 @@ module StateTransitionHelper
|
|
914
930
|
'aki-8a6657fe' => 'pv-grub-hd00_1.02-i386',
|
915
931
|
'aki-60695814' => 'pv-grub-hd00_1.02-x86_64',
|
916
932
|
'aki-64695810' => 'pv-grub-hd0_1.02-i386',
|
917
|
-
'aki-62695816' => 'pv-grub-hd0_1.02-x86_64'
|
933
|
+
'aki-62695816' => 'pv-grub-hd0_1.02-x86_64',
|
934
|
+
#RHEL kernel Amazon Kernel ID
|
935
|
+
'aki-af0a3ddb' => 'aki-rhel-i386',
|
936
|
+
'aki-a90a3ddd' => 'aki-rhel-x86_64'
|
918
937
|
},
|
919
938
|
'ap-southeast-1' => {'aki-6fd5aa3d' => 'pv-grub-hd00-V1.01-i386',
|
920
939
|
'aki-6dd5aa3f' => 'pv-grub-hd00-V1.01-x86_64',
|
@@ -923,7 +942,10 @@ module StateTransitionHelper
|
|
923
942
|
'aki-a0225af2' => 'pv-grub-hd00_1.02-i386',
|
924
943
|
'aki-a6225af4' => 'pv-grub-hd00_1.02-x86_64',
|
925
944
|
'aki-a4225af6' => 'pv-grub-hd0_1.02-i386',
|
926
|
-
'aki-aa225af8' => 'pv-grub-hd0_1.02-x86_64'
|
945
|
+
'aki-aa225af8' => 'pv-grub-hd0_1.02-x86_64',
|
946
|
+
#RHEL kernel Amazon Kernel ID
|
947
|
+
'aki-9c235ace' => 'aki-rhel-i386',
|
948
|
+
'aki-82235ad0' => 'aki-rhel-x86_64'
|
927
949
|
},
|
928
950
|
'ap-northeast-1' => {'aki-d209a2d3' => 'pv-grub-hd00-V1.01-i386',
|
929
951
|
'aki-d409a2d5' => 'pv-grub-hd00-V1.01-x86_64',
|
@@ -932,7 +954,10 @@ module StateTransitionHelper
|
|
932
954
|
'aki-e85df7e9' => 'pv-grub-hd00_1.02-i386',
|
933
955
|
'aki-ea5df7eb' => 'pv-grub-hd00_1.02-x86_64',
|
934
956
|
'aki-ec5df7ed' => 'pv-grub-hd0_1.02-i386',
|
935
|
-
'aki-ee5df7ef' => 'pv-grub-hd0_1.02-x86_64'
|
957
|
+
'aki-ee5df7ef' => 'pv-grub-hd0_1.02-x86_64',
|
958
|
+
#RHEL kernel Amazon Kernel ID
|
959
|
+
'aki-66c06a67' => 'aki-rhel-i386',
|
960
|
+
'aki-68c06a69' => 'aki-rhel-x86_64'
|
936
961
|
}
|
937
962
|
}
|
938
963
|
target_aki = ''
|
data/lib/scripts/ec2/copy_ami.rb
CHANGED
@@ -95,7 +95,7 @@ class CopyAmi < Ec2Script
|
|
95
95
|
class InitialState < CopyAmiState
|
96
96
|
def enter()
|
97
97
|
@context[:source_instance_id], @context[:source_dns_name], @context[:source_availability_zone],
|
98
|
-
@context[:kernel_id], @context[:ramdisk_id], @context[:architecture] =
|
98
|
+
@context[:kernel_id], @context[:ramdisk_id], @context[:architecture], @context[:root_device_name] =
|
99
99
|
launch_instance(@context[:ami_id], @context[:source_key_name], "default")
|
100
100
|
ec2_helper = Ec2Helper.new(@context[:ec2_api_handler])
|
101
101
|
puts "get_attached returns: #{ec2_helper.get_attached_volumes(@context[:source_instance_id]).inspect}"
|
@@ -121,6 +121,22 @@ class CopyAmi < Ec2Script
|
|
121
121
|
mount_point = "/mnt/tmp_#{@context[:source_volume_id]}"
|
122
122
|
attach_volume(@context[:source_volume_id], @context[:source_instance_id], device)
|
123
123
|
connect(@context[:source_dns_name], @context[:source_ssh_username], nil, @context[:source_ssh_keydata])
|
124
|
+
# detect if there is a shift for device mapping (between AWS and the operating system of the system)
|
125
|
+
root_device_name = get_root_device_name()
|
126
|
+
# detect letters
|
127
|
+
aws_root_device = @context[:root_device_name]
|
128
|
+
aws_letter = aws_root_device.split('/')[2].gsub('sd', '').gsub('xvd', '').gsub(/[0-9]/, '')
|
129
|
+
os_letter = root_device_name.split('/')[2].gsub('sd', '').gsub('xvd', '').gsub(/[0-9]/, '')
|
130
|
+
aws_device_letter = device.split('/')[2].gsub('sd', '').gsub('xvd', '').gsub(/[0-9]/, '')
|
131
|
+
if !aws_letter.eql?(os_letter)
|
132
|
+
post_message("Detected specific kernel with shift between AWS and Kernel OS for device naming")
|
133
|
+
end
|
134
|
+
while !aws_letter.eql?(os_letter)
|
135
|
+
aws_letter.succ!
|
136
|
+
aws_device_letter.succ!
|
137
|
+
end
|
138
|
+
device = "/dev/sd#{aws_device_letter}"
|
139
|
+
puts "Using AWS name '#{@context[:temp_device_name]}' and OS name '#{device}'"
|
124
140
|
mount_fs(mount_point, device)
|
125
141
|
# get root partition label and filesystem type
|
126
142
|
#@context[:label] = get_root_partition_label()
|
@@ -1,6 +1,6 @@
|
|
1
1
|
require "help/script_execution_state"
|
2
2
|
require "help/remote_command_handler"
|
3
|
-
require "scripts/
|
3
|
+
require "scripts/vCloud/v_cloud_script"
|
4
4
|
|
5
5
|
# Identifies all open internet services and checks if
|
6
6
|
# there are actually used by a service. Note: this script depends
|
metadata
CHANGED
@@ -1,13 +1,13 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: CloudyScripts
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
hash:
|
4
|
+
hash: 127
|
5
5
|
prerelease: false
|
6
6
|
segments:
|
7
7
|
- 2
|
8
8
|
- 11
|
9
|
-
-
|
10
|
-
version: 2.11.
|
9
|
+
- 46
|
10
|
+
version: 2.11.46
|
11
11
|
platform: ruby
|
12
12
|
authors:
|
13
13
|
- Matthias Jung
|
@@ -15,7 +15,7 @@ autorequire:
|
|
15
15
|
bindir: bin
|
16
16
|
cert_chain: []
|
17
17
|
|
18
|
-
date: 2011-
|
18
|
+
date: 2011-10-24 00:00:00 +00:00
|
19
19
|
default_executable:
|
20
20
|
dependencies:
|
21
21
|
- !ruby/object:Gem::Dependency
|
@@ -73,205 +73,205 @@ files:
|
|
73
73
|
- LICENSE
|
74
74
|
- README.rdoc
|
75
75
|
- Rakefile
|
76
|
-
- lib/audit/benchmark_apache.zip
|
77
|
-
- lib/audit/benchmark_full.zip
|
78
|
-
- lib/audit/benchmark_ssh.zip
|
79
|
-
- lib/audit/checks/APACHE2.group
|
80
|
-
- lib/audit/checks/APACHE2_CONFIG_01.check
|
81
|
-
- lib/audit/checks/APACHE2_CONFIG_02.check
|
82
|
-
- lib/audit/checks/APACHE2_CONFIG_03.check
|
83
76
|
- lib/audit/checks/APACHE2_CONFIG_04.check
|
84
|
-
- lib/audit/checks/
|
85
|
-
- lib/audit/checks/
|
86
|
-
- lib/audit/checks/
|
87
|
-
- lib/audit/checks/
|
88
|
-
- lib/audit/checks/
|
89
|
-
- lib/audit/checks/
|
90
|
-
- lib/audit/checks/
|
77
|
+
- lib/audit/checks/LYNIS_AUTH.group
|
78
|
+
- lib/audit/checks/LOGGED_USERS.check
|
79
|
+
- lib/audit/checks/HAS_FILE_DOWNLOADER.check
|
80
|
+
- lib/audit/checks/MYSQL_HISTORY_1.check
|
81
|
+
- lib/audit/checks/DISTRIBUTION_FACTS.check
|
82
|
+
- lib/audit/checks/HAS_ID.check
|
83
|
+
- lib/audit/checks/MAYBE_HAS_TAR.check
|
84
|
+
- lib/audit/checks/FIND_SHADOW_FILE.check
|
85
|
+
- lib/audit/checks/HAS_UNAME.check
|
86
|
+
- lib/audit/checks/HAS_LSB_RELEASE.check
|
87
|
+
- lib/audit/checks/MYSQL_INIT_3.check
|
88
|
+
- lib/audit/checks/VARIOUS.group
|
91
89
|
- lib/audit/checks/BACKUP_LOG.check
|
92
|
-
- lib/audit/checks/
|
93
|
-
- lib/audit/checks/
|
94
|
-
- lib/audit/checks/
|
95
|
-
- lib/audit/checks/benchmark.group.apache
|
96
|
-
- lib/audit/checks/benchmark.group.full
|
90
|
+
- lib/audit/checks/PLATFORM_FACTS.check
|
91
|
+
- lib/audit/checks/script_header.template
|
92
|
+
- lib/audit/checks/SSH_CONFIG_03.check
|
97
93
|
- lib/audit/checks/benchmark.group.ssh
|
98
|
-
- lib/audit/checks/benchmark.
|
99
|
-
- lib/audit/checks/
|
100
|
-
- lib/audit/checks/
|
101
|
-
- lib/audit/checks/DISTRIBUTION_FACTS.check
|
102
|
-
- lib/audit/checks/DMESG_OUTPUT.check
|
103
|
-
- lib/audit/checks/FIND_GROUP_FILE.check
|
94
|
+
- lib/audit/checks/benchmark.group
|
95
|
+
- lib/audit/checks/LYNIS_AUTH_9208.check
|
96
|
+
- lib/audit/checks/SSH_CONFIG_10.check
|
104
97
|
- lib/audit/checks/FIND_PASSWD_FILE.check
|
105
|
-
- lib/audit/checks/
|
106
|
-
- lib/audit/checks/
|
107
|
-
- lib/audit/checks/
|
108
|
-
- lib/audit/checks/
|
109
|
-
- lib/audit/checks/
|
110
|
-
- lib/audit/checks/HAS_BASE.check
|
98
|
+
- lib/audit/checks/LYNIS_AUTH_9204.check
|
99
|
+
- lib/audit/checks/SSH_CONFIG_09.check
|
100
|
+
- lib/audit/checks/MYSQL_INIT_2.check
|
101
|
+
- lib/audit/checks/HAS_GROUPS.check
|
102
|
+
- lib/audit/checks/LOADED_MODULES.check
|
111
103
|
- lib/audit/checks/HAS_CAT.check
|
112
|
-
- lib/audit/checks/
|
113
|
-
- lib/audit/checks/
|
104
|
+
- lib/audit/checks/HAS_SUPERUSER.check
|
105
|
+
- lib/audit/checks/SLOW.group
|
106
|
+
- lib/audit/checks/SSH_CONFIG_04.check
|
107
|
+
- lib/audit/checks/benchmark.group.full
|
108
|
+
- lib/audit/checks/LYNIS_AUTH_9226.check
|
109
|
+
- lib/audit/checks/APACHE2_CONFIG_01.check
|
110
|
+
- lib/audit/checks/MAYBE_HAS_UNAME.check
|
114
111
|
- lib/audit/checks/HAS_DF.check
|
115
|
-
- lib/audit/checks/
|
116
|
-
- lib/audit/checks/
|
112
|
+
- lib/audit/checks/HAS_UNIQ.check
|
113
|
+
- lib/audit/checks/APACHE2_INIT_1.check
|
114
|
+
- lib/audit/checks/APACHE2_INIT_2.check
|
115
|
+
- lib/audit/checks/USERS_INIT_2.check
|
116
|
+
- lib/audit/checks/PORTS_OPEN_NETSTAT.check
|
117
|
+
- lib/audit/checks/LIST_ROUTES.check
|
118
|
+
- lib/audit/checks/SSH_CONFIG_06.check
|
119
|
+
- lib/audit/checks/SSH_INIT_1.check
|
120
|
+
- lib/audit/checks/SLOW_1.check
|
121
|
+
- lib/audit/checks/MAYBE_HAS_LSB_RELEASE.check
|
122
|
+
- lib/audit/checks/APACHE2_CONFIG_05.check
|
117
123
|
- lib/audit/checks/HAS_FIND.check
|
118
|
-
- lib/audit/checks/
|
119
|
-
- lib/audit/checks/
|
120
|
-
- lib/audit/checks/
|
121
|
-
- lib/audit/checks/
|
122
|
-
- lib/audit/checks/
|
123
|
-
- lib/audit/checks/HAS_LSB_RELEASE.check
|
124
|
-
- lib/audit/checks/HAS_MOUNT.check
|
124
|
+
- lib/audit/checks/LASTLOG.check
|
125
|
+
- lib/audit/checks/HAS_WHO.check
|
126
|
+
- lib/audit/checks/USERS_INIT_5.check
|
127
|
+
- lib/audit/checks/HAS_TAIL.check
|
128
|
+
- lib/audit/checks/header.template
|
125
129
|
- lib/audit/checks/HAS_NETSTAT.check
|
126
|
-
- lib/audit/checks/
|
127
|
-
- lib/audit/checks/HAS_PS.check
|
130
|
+
- lib/audit/checks/VAR_LIST_HOME_DIRECTORIES.check
|
128
131
|
- lib/audit/checks/HAS_ROUTE.check
|
129
|
-
- lib/audit/checks/
|
132
|
+
- lib/audit/checks/PASSWORD_INFORMATION.check
|
133
|
+
- lib/audit/checks/FIND_SUDOERS_FILE.check
|
134
|
+
- lib/audit/checks/APACHE2_CONFIG_06.check
|
135
|
+
- lib/audit/checks/USERS_INIT_1.check
|
136
|
+
- lib/audit/checks/LYNIS_AUTH_9222.check
|
137
|
+
- lib/audit/checks/BACKUP_MAIL.check
|
138
|
+
- lib/audit/checks/BACKUP_WEB.check
|
139
|
+
- lib/audit/checks/HAS_COMPRESSOR.check
|
140
|
+
- lib/audit/checks/HAS_TAR.check
|
141
|
+
- lib/audit/checks/benchmark.ssh.zip
|
142
|
+
- lib/audit/checks/HAS_CUT.check
|
143
|
+
- lib/audit/checks/SLOW_3.check
|
144
|
+
- lib/audit/checks/APACHE2_INIT_3.check
|
145
|
+
- lib/audit/checks/SSH_INIT_2.check
|
146
|
+
- lib/audit/checks/SSH_CONFIG_01.check
|
147
|
+
- lib/audit/checks/benchmark.group.apache
|
148
|
+
- lib/audit/checks/HAS_PASSWD_CHECK.check
|
149
|
+
- lib/audit/checks/USER_INFORMATION.check
|
150
|
+
- lib/audit/checks/SSH_CONFIG_11.check
|
151
|
+
- lib/audit/checks/HAS_DPKG.check
|
130
152
|
- lib/audit/checks/HAS_SORT.check
|
153
|
+
- lib/audit/checks/MAYBE_HAS_WGET.check
|
154
|
+
- lib/audit/checks/APACHE2.group
|
155
|
+
- lib/audit/checks/APACHE2_USER_7.check
|
156
|
+
- lib/audit/checks/SSH_CONFIG_08.check
|
157
|
+
- lib/audit/checks/SSH_CONFIG_07.check
|
158
|
+
- lib/audit/checks/SSH_CONFIG_02.check
|
159
|
+
- lib/audit/checks/LYNIS_AUTH_9228.check
|
160
|
+
- lib/audit/checks/FIND_GROUP_FILE.check
|
161
|
+
- lib/audit/checks/USERS_INIT_3.check
|
162
|
+
- lib/audit/checks/HAS_YUM.check
|
163
|
+
- lib/audit/checks/MAYBE_HAS_ID.check
|
164
|
+
- lib/audit/checks/SLOW_2.check
|
165
|
+
- lib/audit/checks/HAS_MOUNT.check
|
166
|
+
- lib/audit/checks/HAS_AWK.check
|
167
|
+
- lib/audit/checks/MOUNTED_DEVICES.check
|
168
|
+
- lib/audit/checks/MAYBE_HAS_HOSTNAME.check
|
169
|
+
- lib/audit/checks/SSH_CONFIG_05.check
|
170
|
+
- lib/audit/checks/HAS_BASE.check
|
171
|
+
- lib/audit/checks/HAS_GREP.check
|
172
|
+
- lib/audit/checks/SSH_KEYS_1.check
|
173
|
+
- lib/audit/checks/MAYBE_HAS_DU.check
|
174
|
+
- lib/audit/checks/PACKAGES_INSTALLED_YUM.check
|
131
175
|
- lib/audit/checks/HAS_STAT.check
|
132
|
-
- lib/audit/checks/HAS_SUPERUSER.check
|
133
|
-
- lib/audit/checks/HAS_TAIL.check
|
134
|
-
- lib/audit/checks/HAS_TAR.check
|
135
176
|
- lib/audit/checks/HAS_TR.check
|
136
|
-
- lib/audit/checks/
|
137
|
-
- lib/audit/checks/HAS_UNIQ.check
|
138
|
-
- lib/audit/checks/HAS_WC.check
|
139
|
-
- lib/audit/checks/HAS_WHO.check
|
140
|
-
- lib/audit/checks/HAS_YUM.check
|
141
|
-
- lib/audit/checks/header.template
|
142
|
-
- lib/audit/checks/helpers/head.sh
|
143
|
-
- lib/audit/checks/LASTLOG.check
|
144
|
-
- lib/audit/checks/LIST_ROUTES.check
|
145
|
-
- lib/audit/checks/LIST_USER_ACCOUNTS.check
|
146
|
-
- lib/audit/checks/LOADED_MODULES.check
|
147
|
-
- lib/audit/checks/LOCAL_NMAP.check
|
148
|
-
- lib/audit/checks/LOGGED_USERS.check
|
149
|
-
- lib/audit/checks/LYNIS_AUTH.group
|
150
|
-
- lib/audit/checks/LYNIS_AUTH_9204.check
|
151
|
-
- lib/audit/checks/LYNIS_AUTH_9208.check
|
152
|
-
- lib/audit/checks/LYNIS_AUTH_9216.check
|
153
|
-
- lib/audit/checks/LYNIS_AUTH_9222.check
|
154
|
-
- lib/audit/checks/LYNIS_AUTH_9226.check
|
155
|
-
- lib/audit/checks/LYNIS_AUTH_9228.check
|
177
|
+
- lib/audit/checks/HAS_PS.check
|
156
178
|
- lib/audit/checks/LYNIS_AUTH_9252.check
|
157
|
-
- lib/audit/checks/
|
158
|
-
- lib/audit/checks/
|
159
|
-
- lib/audit/checks/
|
160
|
-
- lib/audit/checks/
|
161
|
-
- lib/audit/checks/
|
162
|
-
- lib/audit/checks/
|
179
|
+
- lib/audit/checks/CONFIGURATION_BACKUP.check
|
180
|
+
- lib/audit/checks/HAS_SH.check
|
181
|
+
- lib/audit/checks/HAS_GROUPCHECK.check
|
182
|
+
- lib/audit/checks/LOCAL_NMAP.check
|
183
|
+
- lib/audit/checks/APACHE2_CONFIG_02.check
|
184
|
+
- lib/audit/checks/footer.template
|
185
|
+
- lib/audit/checks/DIRECTORY_LISTING.check
|
186
|
+
- lib/audit/checks/FREE_SPACE.check
|
187
|
+
- lib/audit/checks/LIST_USER_ACCOUNTS.check
|
188
|
+
- lib/audit/checks/APACHE2_CONFIG_03.check
|
163
189
|
- lib/audit/checks/MAYBE_HAS_SUPERUSER.check
|
164
|
-
- lib/audit/checks/
|
165
|
-
- lib/audit/checks/
|
166
|
-
- lib/audit/checks/
|
167
|
-
- lib/audit/checks/MOUNTED_DEVICES.check
|
168
|
-
- lib/audit/checks/MYSQL_HISTORY_1.check
|
190
|
+
- lib/audit/checks/MAYBE_HAS_CURL.check
|
191
|
+
- lib/audit/checks/DMESG_OUTPUT.check
|
192
|
+
- lib/audit/checks/HAS_WC.check
|
169
193
|
- lib/audit/checks/MYSQL_INIT_1.check
|
170
|
-
- lib/audit/checks/MYSQL_INIT_2.check
|
171
|
-
- lib/audit/checks/MYSQL_INIT_3.check
|
172
|
-
- lib/audit/checks/PACKAGES_INSTALLED_DPKG.check
|
173
|
-
- lib/audit/checks/PACKAGES_INSTALLED_YUM.check
|
174
|
-
- lib/audit/checks/PASSWORD_INFORMATION.check
|
175
|
-
- lib/audit/checks/PLATFORM_FACTS.check
|
176
|
-
- lib/audit/checks/PORTS_OPEN_NETSTAT.check
|
177
194
|
- lib/audit/checks/PROCESS_LIST.check
|
178
|
-
- lib/audit/checks/
|
179
|
-
- lib/audit/checks/SLOW.group
|
180
|
-
- lib/audit/checks/SLOW_1.check
|
181
|
-
- lib/audit/checks/SLOW_2.check
|
182
|
-
- lib/audit/checks/SLOW_3.check
|
183
|
-
- lib/audit/checks/SSH.group
|
184
|
-
- lib/audit/checks/SSH_CONFIG_01.check
|
185
|
-
- lib/audit/checks/SSH_CONFIG_02.check
|
186
|
-
- lib/audit/checks/SSH_CONFIG_03.check
|
187
|
-
- lib/audit/checks/SSH_CONFIG_04.check
|
188
|
-
- lib/audit/checks/SSH_CONFIG_05.check
|
189
|
-
- lib/audit/checks/SSH_CONFIG_06.check
|
190
|
-
- lib/audit/checks/SSH_CONFIG_07.check
|
191
|
-
- lib/audit/checks/SSH_CONFIG_08.check
|
192
|
-
- lib/audit/checks/SSH_CONFIG_09.check
|
193
|
-
- lib/audit/checks/SSH_CONFIG_10.check
|
194
|
-
- lib/audit/checks/SSH_CONFIG_11.check
|
195
|
-
- lib/audit/checks/SSH_INIT_1.check
|
196
|
-
- lib/audit/checks/SSH_INIT_2.check
|
197
|
-
- lib/audit/checks/SSH_KEYS_1.check
|
198
|
-
- lib/audit/checks/USER_INFORMATION.check
|
199
|
-
- lib/audit/checks/USERS_INIT_1.check
|
200
|
-
- lib/audit/checks/USERS_INIT_2.check
|
201
|
-
- lib/audit/checks/USERS_INIT_3.check
|
195
|
+
- lib/audit/checks/helpers/head.sh
|
202
196
|
- lib/audit/checks/USERS_INIT_4.check
|
203
|
-
- lib/audit/checks/
|
204
|
-
- lib/audit/checks/
|
205
|
-
- lib/audit/checks/
|
206
|
-
- lib/audit/
|
207
|
-
- lib/audit/
|
197
|
+
- lib/audit/checks/BACKUP_HOME_DOTFILES.check
|
198
|
+
- lib/audit/checks/PACKAGES_INSTALLED_DPKG.check
|
199
|
+
- lib/audit/checks/HAS_HOSTNAME.check
|
200
|
+
- lib/audit/checks/MAYBE_HAS_BZIP2.check
|
201
|
+
- lib/audit/checks/SSH.group
|
202
|
+
- lib/audit/checks/LYNIS_AUTH_9216.check
|
203
|
+
- lib/audit/benchmark_apache.zip
|
204
|
+
- lib/audit/lib/ssh_utils.rb
|
205
|
+
- lib/audit/lib/http_fingerprint.rb
|
206
|
+
- lib/audit/lib/ssh_fingerprint2.rb
|
207
|
+
- lib/audit/lib/nessus_utils.rb
|
208
|
+
- lib/audit/lib/my_option_parser.rb
|
209
|
+
- lib/audit/lib/util/random_string.rb
|
210
|
+
- lib/audit/lib/main.rb
|
208
211
|
- lib/audit/lib/audit_facade.rb
|
212
|
+
- lib/audit/lib/benchmark/check.rb
|
213
|
+
- lib/audit/lib/benchmark/rule_result.rb
|
214
|
+
- lib/audit/lib/benchmark/rule_severity.rb
|
215
|
+
- lib/audit/lib/benchmark/item_exception.rb
|
216
|
+
- lib/audit/lib/benchmark/result_code.rb
|
209
217
|
- lib/audit/lib/benchmark/audit_benchmark.rb
|
210
|
-
- lib/audit/lib/benchmark/
|
218
|
+
- lib/audit/lib/benchmark/yaml_benchmark.rb
|
211
219
|
- lib/audit/lib/benchmark/benchmark_factory.rb
|
212
220
|
- lib/audit/lib/benchmark/benchmark_result.rb
|
213
|
-
- lib/audit/lib/benchmark/
|
221
|
+
- lib/audit/lib/benchmark/automatic_dependencies.rb
|
214
222
|
- lib/audit/lib/benchmark/group.rb
|
215
|
-
- lib/audit/lib/benchmark/item_exception.rb
|
216
|
-
- lib/audit/lib/benchmark/result_code.rb
|
217
|
-
- lib/audit/lib/benchmark/rule_result.rb
|
218
223
|
- lib/audit/lib/benchmark/rule_role.rb
|
219
|
-
- lib/audit/lib/
|
220
|
-
- lib/audit/lib/
|
221
|
-
- lib/audit/lib/
|
222
|
-
- lib/audit/lib/connection/connection_factory.rb
|
223
|
-
- lib/audit/lib/connection/ssh_connection.rb
|
224
|
-
- lib/audit/lib/ec2_utils.rb
|
225
|
-
- lib/audit/lib/http_fingerprint.rb
|
226
|
-
- lib/audit/lib/lazy.rb
|
227
|
-
- lib/audit/lib/linear_script_generator.rb
|
228
|
-
- lib/audit/lib/main.rb
|
229
|
-
- lib/audit/lib/my_option_parser.rb
|
224
|
+
- lib/audit/lib/transformers/web_view_transformer.rb
|
225
|
+
- lib/audit/lib/transformers/yaml_transformer.rb
|
226
|
+
- lib/audit/lib/audit.rb
|
230
227
|
- lib/audit/lib/nessus_new.rb
|
231
|
-
- lib/audit/lib/
|
232
|
-
- lib/audit/lib/parser/
|
233
|
-
- lib/audit/lib/parser/
|
234
|
-
- lib/audit/lib/parser/
|
235
|
-
- lib/audit/lib/parser/
|
236
|
-
- lib/audit/lib/parser/command/cpe_name_command.rb
|
237
|
-
- lib/audit/lib/parser/command/data_command.rb
|
228
|
+
- lib/audit/lib/linear_script_generator.rb
|
229
|
+
- lib/audit/lib/parser/result_type.rb
|
230
|
+
- lib/audit/lib/parser/parse_exception.rb
|
231
|
+
- lib/audit/lib/parser/stdout_line_buffer.rb
|
232
|
+
- lib/audit/lib/parser/script_output_parser.rb
|
238
233
|
- lib/audit/lib/parser/command/listening_port_command.rb
|
234
|
+
- lib/audit/lib/parser/command/check_finished_command.rb
|
239
235
|
- lib/audit/lib/parser/command/message_command.rb
|
236
|
+
- lib/audit/lib/parser/command/data_command.rb
|
237
|
+
- lib/audit/lib/parser/command/cpe_name_command.rb
|
238
|
+
- lib/audit/lib/parser/command/attach_file_command.rb
|
239
|
+
- lib/audit/lib/parser/command/abstract_command_result.rb
|
240
240
|
- lib/audit/lib/parser/command/program_name_command.rb
|
241
|
-
- lib/audit/lib/parser/
|
242
|
-
- lib/audit/lib/parser/result_type.rb
|
243
|
-
- lib/audit/lib/parser/script_output_parser.rb
|
244
|
-
- lib/audit/lib/parser/stdout_line_buffer.rb
|
241
|
+
- lib/audit/lib/parser/command/abstract_command.rb
|
245
242
|
- lib/audit/lib/ssh_fingerprint.rb
|
246
|
-
- lib/audit/lib/
|
247
|
-
- lib/audit/lib/
|
248
|
-
- lib/audit/lib/
|
249
|
-
- lib/audit/lib/
|
250
|
-
- lib/audit/lib/
|
243
|
+
- lib/audit/lib/ec2_utils.rb
|
244
|
+
- lib/audit/lib/lazy.rb
|
245
|
+
- lib/audit/lib/connection/ami_connection.rb
|
246
|
+
- lib/audit/lib/connection/ssh_connection.rb
|
247
|
+
- lib/audit/lib/connection/connection_factory.rb
|
251
248
|
- lib/audit/lib/version.rb
|
252
|
-
- lib/
|
253
|
-
- lib/
|
254
|
-
- lib/
|
255
|
-
- lib/
|
256
|
-
- lib/
|
257
|
-
- lib/
|
258
|
-
- lib/
|
259
|
-
- lib/help/state_transition_helper.rb
|
260
|
-
- lib/help/v_cloud_api_handler.rb
|
261
|
-
- lib/help/v_cloud_transition_helper.rb
|
249
|
+
- lib/audit/create_benchmark.sh
|
250
|
+
- lib/audit/benchmark_full.zip
|
251
|
+
- lib/audit/benchmark_ssh.zip
|
252
|
+
- lib/scripts/vCloud/v_cloud_script.rb
|
253
|
+
- lib/scripts/vCloud/open_port_checker_vm.rb
|
254
|
+
- lib/scripts/ec2/port_range_detector.rb
|
255
|
+
- lib/scripts/ec2/dm_encrypt.rb
|
262
256
|
- lib/scripts/ec2/ami2_ebs_conversion.rb
|
263
257
|
- lib/scripts/ec2/audit_via_ssh.rb
|
258
|
+
- lib/scripts/ec2/open_port_checker.rb
|
264
259
|
- lib/scripts/ec2/copy_ami.rb
|
265
|
-
- lib/scripts/ec2/copy_snapshot.rb
|
266
260
|
- lib/scripts/ec2/critical_ports_audit.rb
|
267
|
-
- lib/scripts/ec2/dm_encrypt.rb
|
268
|
-
- lib/scripts/ec2/download_snapshot.rb
|
269
|
-
- lib/scripts/ec2/ec2_script.rb
|
270
|
-
- lib/scripts/ec2/open_port_checker.rb
|
271
|
-
- lib/scripts/ec2/port_range_detector.rb
|
272
261
|
- lib/scripts/ec2/snapshot_optimization.rb
|
273
|
-
- lib/scripts/
|
274
|
-
- lib/scripts/
|
262
|
+
- lib/scripts/ec2/copy_snapshot.rb
|
263
|
+
- lib/scripts/ec2/ec2_script.rb
|
264
|
+
- lib/scripts/ec2/download_snapshot.rb
|
265
|
+
- lib/help/ec2_helper.rb
|
266
|
+
- lib/help/dm_crypt_helper.rb
|
267
|
+
- lib/help/state_transition_helper.rb
|
268
|
+
- lib/help/script_execution_state.rb
|
269
|
+
- lib/help/progress_message_listener.rb
|
270
|
+
- lib/help/v_cloud_transition_helper.rb
|
271
|
+
- lib/help/v_cloud_api_handler.rb
|
272
|
+
- lib/help/remote_command_handler.rb
|
273
|
+
- lib/help/state_change_listener.rb
|
274
|
+
- lib/cloudyscripts.rb
|
275
275
|
has_rdoc: true
|
276
276
|
homepage: http://elastic-security.com
|
277
277
|
licenses: []
|